Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/DRIO5Jv8bfvGSe_1CWl3Imp2lHI.roa
File: DRIO5Jv8bfvGSe_1CWl3Imp2lHI.roa (raw, json)
Hash identifier: 5GB+7KIDNAfQvmzvUIGocsTIfJM+kzC+zvN4EgRfkPA=
Subject key identifier: 0D:12:0E:E4:9B:FC:6D:FB:C6:49:EF:F5:09:69:77:22:6A:76:94:72
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 0187BDC9A59B0DFA561A8F9764ACD0212D1F
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/DRIO5Jv8bfvGSe_1CWl3Imp2lHI.roa
Signing time: Wed 26 Apr 2023 13:38:41 +0000
ROA not before: Wed 26 Apr 2023 13:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24832
IP address blocks: 81.28.0.0/24 maxlen: 24
81.28.3.0/24 maxlen: 24
81.28.2.0/24 maxlen: 24
81.28.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:c9:a5:9b:0d:fa:56:1a:8f:97:64:ac:d0:21:2d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 26 13:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d120ee49bfc6dfbc649eff5096977226a769472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:7b:a1:c6:83:a3:16:e9:42:de:a3:ad:46:
9e:62:d4:b0:ae:da:6a:5f:49:79:6f:b5:9d:32:b0:
67:5d:fb:c1:49:97:38:de:ef:5c:9f:1c:5b:d1:c6:
38:f1:ef:5e:6b:7f:73:6c:5a:bb:99:c2:b4:0f:be:
92:9e:50:85:a6:91:ca:14:86:c0:36:c9:ec:b7:d0:
3e:66:e9:7e:b6:fb:f2:1f:2b:96:c0:f6:ad:87:71:
7b:cb:ad:41:70:23:d9:25:1e:b0:6c:0a:df:0c:45:
c7:80:ea:b0:d2:82:32:85:9f:fe:c8:d8:b9:9f:95:
7c:70:37:0a:37:66:4d:dc:38:83:d6:59:f7:00:95:
a9:9e:42:0d:93:f7:29:27:d3:b5:00:60:0f:ef:09:
9a:a5:5e:9c:64:f8:a3:d8:8c:87:1b:10:73:95:9a:
8c:3d:b2:bb:ed:a8:89:98:f4:1d:1e:b0:96:5f:03:
65:07:28:4d:3e:f6:3e:af:5d:8a:d1:2b:57:5e:87:
04:05:af:19:3c:79:50:64:57:05:44:b9:4e:1b:fc:
77:b6:5b:70:4e:bb:76:07:fb:e1:d3:f2:43:4d:31:
d8:5a:c9:47:bf:38:01:88:50:82:7f:2f:59:dd:5a:
04:ad:0d:a2:3d:2f:ec:74:bd:f1:67:02:aa:ab:42:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:0E:E4:9B:FC:6D:FB:C6:49:EF:F5:09:69:77:22:6A:76:94:72
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/DRIO5Jv8bfvGSe_1CWl3Imp2lHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.0.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c6:be:d7:f2:83:7f:41:a2:96:4d:e9:77:16:09:8a:21:0e:
e9:7e:ae:16:bc:5b:20:fc:c5:e2:6e:10:0a:64:c7:4c:9c:c2:
c6:27:6f:a1:59:0b:0b:63:fe:ce:9e:bd:f8:3a:44:73:d8:15:
b7:18:66:82:83:3c:3f:d3:76:2e:ec:b8:77:7b:06:a8:3e:cd:
5f:91:e6:cd:32:10:29:0e:d1:1b:53:1d:b3:67:3e:74:26:50:
4e:34:61:06:a2:91:8a:02:ab:5a:b9:e6:71:85:83:24:cd:2a:
0b:cb:5a:fc:cc:47:26:b8:76:8f:46:84:8a:0f:b6:69:ec:5d:
ac:40:84:2d:51:1f:25:f1:88:d4:3f:5f:1c:45:6a:08:42:97:
d3:d1:b4:36:db:8c:c6:d3:6c:3e:2a:3d:ac:20:f2:81:f8:8b:
55:4e:65:d7:2e:67:37:4b:d8:44:f2:d1:54:ee:33:66:cd:24:
6b:7a:03:da:16:f9:b5:d1:c3:cd:d1:cd:b8:da:75:5e:08:87:
3f:61:a2:de:15:6a:4b:f5:a5:a5:17:75:52:97:ec:7e:d8:ed:
ae:68:88:b5:6f:64:4a:be:b1:9d:30:52:7f:5e:66:09:09:ac:
e7:99:cf:25:36:f2:37:95:84:ce:f4:c3:0a:56:7e:3d:73:d8:
0c:72:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org