Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/uuXxRf-YS6jGwJ2L6PVkbHHW_-k.roa
File: uuXxRf-YS6jGwJ2L6PVkbHHW_-k.roa (raw, json)
Hash identifier: x2aXtKXbtVWfN+hZMAnEMFe57XyCJPSfdaLaK4s6RNM=
Subject key identifier: BA:E5:F1:45:FF:98:4B:A8:C6:C0:9D:8B:E8:F5:64:6C:71:D6:FF:E9
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018570E753D995AA2D35EF854C78862746D0
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/uuXxRf-YS6jGwJ2L6PVkbHHW_-k.roa
Signing time: Mon 02 Jan 2023 05:14:46 +0000
ROA not before: Mon 02 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49602
IP address blocks: 81.7.108.0/22 maxlen: 22
81.7.112.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:53:d9:95:aa:2d:35:ef:85:4c:78:86:27:46:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bae5f145ff984ba8c6c09d8be8f5646c71d6ffe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:b5:1d:d8:31:85:a1:0f:77:4e:e2:f0:7d:
86:86:29:20:5e:32:3a:5a:6c:73:ee:60:9f:23:c9:
f9:fb:8f:c5:54:6b:b3:0c:5a:50:05:49:b7:cc:79:
92:cf:d9:b4:65:2d:41:98:2c:fa:f6:c0:81:0a:c7:
e2:28:b5:ea:13:7d:78:b7:74:d9:11:ad:3a:ed:a5:
74:17:34:47:62:4d:76:b0:b3:11:28:11:0f:78:76:
19:f5:fb:90:b8:d4:ed:1e:d5:14:c6:4b:d8:85:38:
51:3d:af:1a:6f:02:08:b7:24:ac:fb:1f:66:5a:64:
d5:9f:7f:ce:04:35:44:3f:cb:91:3a:d4:a0:ea:ba:
f1:f9:28:3c:f3:f6:b9:bc:f0:76:58:4d:23:93:a5:
69:a0:3c:ae:88:38:99:a8:f7:93:55:6e:07:c8:50:
9c:4c:6d:98:0e:fa:05:fc:7e:d0:52:d4:47:a4:0f:
30:a1:0c:11:37:48:95:d7:7d:ef:da:e9:ea:31:a3:
e6:09:d8:99:c1:dc:fc:76:fa:a3:5a:d8:8c:8d:ff:
47:ea:12:63:e9:97:89:c6:53:7d:4b:cc:27:a5:63:
3d:4e:3e:0d:e6:d9:90:fb:ef:cc:99:1c:6a:63:23:
c2:0e:a0:bd:00:00:b2:b3:f5:0e:7f:d2:c1:3a:a1:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:F1:45:FF:98:4B:A8:C6:C0:9D:8B:E8:F5:64:6C:71:D6:FF:E9
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/uuXxRf-YS6jGwJ2L6PVkbHHW_-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.7.108.0-81.7.113.255
Signature Algorithm: sha256WithRSAEncryption
1b:25:56:73:79:89:d6:ea:8e:b9:fa:dd:f6:17:a4:6a:56:1b:
96:7b:85:49:a0:bb:7d:68:94:c7:a8:cd:b9:38:80:ac:fa:72:
c6:62:6c:38:17:ae:fa:09:e9:9d:1f:0f:35:79:79:84:b6:b2:
37:c8:27:10:09:e2:b6:6a:74:89:ac:48:68:ad:bd:b0:9f:84:
26:8a:81:25:7e:36:b8:c5:e3:1e:a5:92:8a:35:25:79:13:37:
6d:84:85:85:ec:05:de:c6:b8:aa:a8:0a:da:e4:70:7f:7d:ce:
50:85:f0:11:4b:56:75:0c:47:af:ed:a8:c2:b5:17:d1:8a:74:
e4:97:d2:36:83:98:15:61:35:28:2e:3a:63:14:b3:00:f9:b1:
6b:78:b2:be:63:21:5a:31:a8:93:67:6b:59:e1:16:a4:15:8c:
01:84:97:7a:7c:f1:44:b2:fb:1c:29:91:34:c0:d0:c1:72:8f:
a7:7a:22:a7:45:1c:e2:f8:74:90:b1:92:60:00:7d:37:22:2e:
74:57:56:86:5f:d9:95:4c:0c:af:a2:2f:e3:fd:4c:f3:df:ae:
4e:6e:c5:15:48:58:0d:ed:f9:10:0b:5b:00:c2:13:d6:7e:8f:
c0:f9:d4:13:e6:23:a9:5d:62:0d:10:2c:db:2a:27:93:6c:ce:
3d:2a:93:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:29 2024 by rpki-client on console-fra.rpki-client.org