Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n7vd6Khz2OFQYCX5hhVUJXd2IYo.roa
File: n7vd6Khz2OFQYCX5hhVUJXd2IYo.roa (raw, json)
Hash identifier: diR+XnQIU2syLD9pWIk0HM6PPjPb+2Ac0lju5+QfSX0=
Subject key identifier: 9F:BB:DD:E8:A8:73:D8:E1:50:60:25:F9:86:15:54:25:77:76:21:8A
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E59558864D15BD251A34E49641362
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n7vd6Khz2OFQYCX5hhVUJXd2IYo.roa
Signing time: Mon 02 Jan 2023 07:24:46 +0000
ROA not before: Mon 02 Jan 2023 07:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 81.199.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 11:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:59:55:88:64:d1:5b:d2:51:a3:4e:49:64:13:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fbbdde8a873d8e1506025f9861554257776218a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:d9:0a:e4:8f:aa:9f:4f:05:6c:93:2e:fb:
86:3e:de:89:d2:35:12:15:2f:16:f4:8d:5c:42:91:
68:13:9a:ce:13:9f:c0:4e:b1:fe:f9:45:3a:aa:e9:
ec:ce:0f:11:89:4a:0a:08:e0:41:ab:fd:09:b6:15:
a3:3c:2c:8c:af:cc:c1:82:80:71:db:0e:e2:16:e5:
07:4e:5a:a0:54:f8:b4:e5:c5:a2:c9:71:34:d4:e9:
55:11:b5:48:9c:23:3a:11:bf:00:4d:da:e2:e9:17:
5f:cb:62:ab:dd:78:c0:03:b4:0d:39:dc:90:72:1e:
41:7a:9d:c1:c5:43:9f:05:5d:62:69:f6:65:52:ba:
5e:23:6e:ac:0c:0d:72:50:3b:b6:23:46:99:aa:68:
20:63:2a:ec:c0:92:58:c2:da:14:33:5d:b1:26:d6:
86:27:e7:ef:18:51:c8:38:30:4d:7f:4a:e6:a3:8f:
14:f8:a5:30:0c:55:7e:e0:bd:dd:07:de:35:7a:35:
1d:3f:91:7a:63:09:19:49:fc:cf:8e:f4:77:2d:f1:
f3:23:b1:50:ba:42:7f:71:ba:37:97:23:2c:ab:d4:
10:95:7f:61:ad:af:98:ef:ae:6a:44:c6:bd:0a:a5:
d3:58:7c:b3:be:3e:53:e3:92:8c:6b:f2:2e:e0:c5:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:DD:E8:A8:73:D8:E1:50:60:25:F9:86:15:54:25:77:76:21:8A
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n7vd6Khz2OFQYCX5hhVUJXd2IYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.26.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:e8:c8:95:3e:b0:a8:2e:24:c2:4b:84:b9:08:d8:b2:46:c5:
17:c3:24:e9:84:92:8c:7f:3c:ce:6b:9c:3c:d8:e8:45:53:91:
9c:fc:0a:4e:66:43:40:95:3a:2c:34:68:73:82:78:0f:c6:7f:
76:f7:d9:b7:1d:c9:5b:7b:04:22:d5:a0:ae:c9:57:3f:68:59:
09:ed:4d:06:0a:7d:4b:00:35:d7:12:a1:a2:76:5a:b0:1f:7e:
a9:89:99:fc:2c:a2:30:4a:cc:21:19:69:56:4a:04:ef:b4:75:
41:3d:dd:ed:f6:02:2c:7e:30:b9:1f:8c:13:08:86:91:5f:7a:
0f:5a:3f:68:d2:ad:79:df:bc:05:49:97:1d:be:42:d2:f2:65:
ee:8b:0e:0b:48:a9:5d:9c:f5:6c:9b:25:2e:c1:df:18:e0:2f:
d9:76:93:db:8d:e5:44:92:f5:bb:17:15:92:08:78:9a:16:76:
f9:66:2d:b8:35:fe:8a:aa:ab:f9:c1:fb:38:3f:dc:22:d0:fb:
45:74:76:4f:08:df:6f:d7:3c:a7:bd:4e:cb:5d:38:4a:f4:dc:
b3:14:f7:8d:d9:bd:46:29:04:18:ca:9c:f2:1f:3a:1a:6e:8f:
bd:6b:f5:69:59:41:c5:c6:25:97:f9:24:9c:5b:90:14:e3:55:
12:96:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:57 2024 by rpki-client on console-ams.rpki-client.org