Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/oxV6uVlw2QjKj2pmLyvesBC7Iv0.roa
File: oxV6uVlw2QjKj2pmLyvesBC7Iv0.roa (raw, json)
Hash identifier: v5vrDnZFE5FZ/Tex9xfAonFHMpXlYA7JN5wzzVck1QI=
Subject key identifier: A3:15:7A:B9:59:70:D9:08:CA:8F:6A:66:2F:2B:DE:B0:10:BB:22:FD
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E506B79C79E140F7BD51FB1DD4DF7
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/oxV6uVlw2QjKj2pmLyvesBC7Iv0.roa
Signing time: Mon 02 Jan 2023 07:24:44 +0000
ROA not before: Mon 02 Jan 2023 07:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 81.199.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:50:6b:79:c7:9e:14:0f:7b:d5:1f:b1:dd:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3157ab95970d908ca8f6a662f2bdeb010bb22fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:6b:d5:35:94:f8:0f:71:09:5a:8b:c0:76:
3e:ac:b6:38:9c:4d:73:33:5e:8a:13:62:5a:6e:56:
91:f8:84:a8:18:95:06:91:9b:be:ed:39:c4:92:bf:
c1:be:5c:2b:07:75:b4:12:ee:46:17:4b:c8:f9:02:
96:58:2c:36:af:a7:e8:50:13:3f:69:e7:20:cd:7a:
f5:4f:64:02:b0:14:71:3b:cf:f9:0c:20:64:88:ee:
73:e8:b0:ac:76:56:0b:6b:93:b3:9a:de:5f:c4:99:
76:38:3f:54:d2:65:7a:e8:c1:79:22:da:83:a9:ba:
e8:46:a0:7a:ce:bc:81:e1:60:b9:7c:02:46:32:15:
51:85:1f:49:fa:a2:9b:5e:dc:c2:f0:ee:de:ce:98:
88:62:b7:66:d3:c0:35:06:45:af:45:81:4d:98:5a:
5c:63:b2:8d:93:3d:91:e4:52:de:a4:0b:4d:6f:28:
66:aa:c4:20:26:ee:a5:13:3e:24:a0:bc:6b:bb:38:
c0:4e:70:e1:7f:7e:ac:7d:64:80:ad:a0:da:a6:be:
6b:36:c0:cd:36:db:68:48:ba:2c:66:06:cb:10:0c:
c1:1f:3f:50:29:b0:28:41:e1:92:62:72:83:72:a3:
b2:e8:12:77:da:ad:82:df:a1:22:55:92:b4:be:a1:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:7A:B9:59:70:D9:08:CA:8F:6A:66:2F:2B:DE:B0:10:BB:22:FD
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/oxV6uVlw2QjKj2pmLyvesBC7Iv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:57:bd:70:d2:10:c2:97:8f:6a:7c:ba:7d:6b:bb:a3:24:80:
8c:3c:ca:7e:75:2f:7c:d7:99:c2:5a:c0:e8:51:38:32:ff:5e:
51:ed:87:30:fb:1c:b4:24:c1:83:48:fd:87:52:f6:34:5d:11:
c1:99:fb:ee:8d:f4:6a:24:c7:6c:a3:a5:6d:f2:65:bc:e1:bf:
96:c8:2c:fa:df:88:51:98:17:16:22:36:51:e6:33:3e:f0:bd:
a9:bc:6b:53:8d:95:34:27:46:7e:2b:eb:45:63:9d:a1:44:25:
2c:bc:9b:7d:5b:c4:b8:ab:a3:72:23:91:82:70:98:ef:e8:74:
57:1a:5a:ec:e5:8b:fd:f8:dd:fc:41:9c:ba:c6:4b:94:c0:a3:
ef:da:4d:7d:17:36:8f:14:4d:dd:65:4f:62:60:e3:ef:8c:0d:
0e:e8:12:ae:86:b4:5b:3a:e6:60:1c:7d:e7:0c:d6:d5:63:1d:
14:73:ed:e4:f3:74:62:0a:b6:1a:d0:95:e1:57:f7:4f:d8:79:
33:60:1f:86:9b:8d:f3:0d:d5:58:b8:3c:23:2e:f2:9b:4f:2e:
3e:b6:72:55:ea:87:9b:6d:44:95:08:b0:c0:ab:24:ea:26:df:
40:4a:06:85:0b:fb:ef:f0:25:85:3a:ea:a4:31:1f:7c:a1:00:
81:38:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:40 2024 by rpki-client on console-ams.rpki-client.org