Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/p9pOQBYH9Jnno6uHJi-q0LTfbVM.roa
File: p9pOQBYH9Jnno6uHJi-q0LTfbVM.roa (raw, json)
Hash identifier: EbQ+QSQi88NNImjg4SdXaAr2UbWRn4aVariTQxcWEQk=
Subject key identifier: A7:DA:4E:40:16:07:F4:99:E7:A3:AB:87:26:2F:AA:D0:B4:DF:6D:53
Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial: 0185AA5C287AAE4172FF684A7DB0DE427E08
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/p9pOQBYH9Jnno6uHJi-q0LTfbVM.roa
Signing time: Fri 13 Jan 2023 09:00:44 +0000
ROA not before: Fri 13 Jan 2023 09:00:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25251
IP address blocks: 81.94.37.0/24 maxlen: 24
81.94.32.0/22 maxlen: 22
81.94.44.0/24 maxlen: 24
81.94.42.0/24 maxlen: 24
81.94.39.0/24 maxlen: 24
81.94.45.0/24 maxlen: 24
81.94.46.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:5c:28:7a:ae:41:72:ff:68:4a:7d:b0:de:42:7e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Validity
Not Before: Jan 13 09:00:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7da4e401607f499e7a3ab87262faad0b4df6d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:d0:a3:39:a0:13:42:0b:7d:10:32:f1:2c:
0b:a6:f7:d6:61:33:2e:41:49:c3:52:50:97:47:06:
cc:91:4d:03:62:cb:3e:07:24:65:29:b3:c8:82:65:
90:c7:0c:26:97:c1:71:69:19:fa:f4:21:f4:07:af:
fe:fc:5e:4d:a1:b7:c1:48:4f:ca:a6:71:a1:32:51:
fd:50:ad:24:81:ea:2d:f9:82:bd:05:f3:ee:ed:5d:
9c:6a:8c:00:71:af:65:48:1f:20:ed:da:35:58:d3:
b1:fc:b8:cf:2d:dc:d8:bc:7e:77:62:ae:cf:1a:fb:
31:d6:e0:e8:e1:3b:0d:43:76:a4:4d:02:32:d1:a4:
98:85:53:8c:36:9e:ba:b1:58:45:46:83:e5:5c:b7:
ac:22:c4:f5:53:f0:26:79:7a:3f:61:ac:03:27:3a:
c4:7c:bd:98:db:c9:16:00:58:33:9f:38:68:2d:12:
ed:a5:1f:7a:79:d7:70:ef:e0:fc:3b:cb:2d:d3:4c:
3b:24:83:f3:26:14:a6:97:be:5a:a2:a2:1b:de:fb:
a2:41:e4:6e:45:a2:16:01:19:1b:36:72:9d:71:8d:
3e:61:45:13:62:03:8a:07:b8:68:4b:7e:44:c4:4c:
56:9e:f5:26:81:60:d8:da:97:d8:69:58:6c:02:ee:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DA:4E:40:16:07:F4:99:E7:A3:AB:87:26:2F:AA:D0:B4:DF:6D:53
X509v3 Authority Key Identifier:
keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/p9pOQBYH9Jnno6uHJi-q0LTfbVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.32.0/22
81.94.37.0/24
81.94.39.0/24
81.94.42.0/24
81.94.44.0/22
Signature Algorithm: sha256WithRSAEncryption
87:d4:18:05:7d:8e:85:f3:56:b1:e3:a4:ce:13:d6:8e:88:9e:
53:e4:5f:3b:ff:98:b5:b7:07:04:7e:79:84:79:5b:2f:40:50:
fc:60:6a:ce:24:cc:2c:fa:72:1b:ee:de:97:b2:6c:ec:c2:5d:
12:d0:b9:25:6d:c2:20:bc:3b:5d:98:0a:bc:d5:ae:77:09:72:
5f:7a:61:59:6a:24:e1:2c:f3:7e:4e:6d:a3:8b:c4:bf:d5:cb:
a7:dd:1b:4e:9a:f5:f0:42:81:d7:fa:db:23:21:29:e1:88:7f:
fd:38:78:c2:12:2f:14:04:b3:4b:9d:c1:cc:5b:d0:11:33:fc:
d3:e1:5d:93:d4:d9:4f:90:b2:ea:02:18:02:1a:95:82:aa:aa:
39:e7:8c:34:b1:d4:ba:71:95:10:2a:4f:fd:7c:12:39:80:12:
6b:72:52:35:4c:e2:5d:4d:b6:cb:0b:49:cb:36:81:f3:e6:4d:
e9:49:21:1d:0a:a4:aa:e7:97:53:16:e4:8d:37:40:82:af:dd:
7b:6e:5b:e3:cb:44:63:79:f9:18:c2:26:0c:4a:9d:22:ae:18:
e4:6e:9a:87:aa:bb:f9:54:41:d5:3f:cf:63:74:5d:78:49:54:
37:25:c9:40:ce:27:0e:a5:34:52:dd:71:a4:29:11:d1:90:19:
fe:b9:b4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:21 2023 by rpki-client on console-fra.rpki-client.org