Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/3XhyAKlrqJ1Az4nQekOp1hKaGkQ.roa
File: 3XhyAKlrqJ1Az4nQekOp1hKaGkQ.roa (raw, json)
Hash identifier: WB0IIRwVU8hXNZae669H4XRBnMMiZSyd1ctw2W5crO4=
Subject key identifier: DD:78:72:00:A9:6B:A8:9D:40:CF:89:D0:7A:43:A9:D6:12:9A:1A:44
Certificate issuer: /CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Certificate serial: 018571153D5020EE607F5AEA5F746B58D6D7
Authority key identifier: 29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/3XhyAKlrqJ1Az4nQekOp1hKaGkQ.roa
Signing time: Mon 02 Jan 2023 06:04:55 +0000
ROA not before: Mon 02 Jan 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.81.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:3d:50:20:ee:60:7f:5a:ea:5f:74:6b:58:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Validity
Not Before: Jan 2 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd787200a96ba89d40cf89d07a43a9d6129a1a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:96:35:e1:01:28:c1:e5:1f:00:fd:87:80:
0f:34:54:5d:96:52:92:c1:bb:b3:33:61:32:97:df:
57:4e:0a:2a:fb:b5:15:1a:ec:b8:5f:b1:43:1c:a0:
b5:c5:19:7d:1b:63:ae:91:5b:de:b4:94:c6:5f:57:
4a:ea:c1:24:e4:6c:36:f3:04:77:e3:45:d3:41:2d:
61:97:d6:f9:aa:80:74:14:c7:ce:53:01:75:7e:f0:
47:ec:64:6e:3c:8c:69:0d:1b:3b:66:e3:75:9c:65:
cd:d3:b1:d0:10:27:8f:a7:e7:97:38:94:b9:8d:23:
ed:a8:01:24:7f:0c:ca:48:44:8b:83:4c:e2:de:ec:
44:3e:cc:0b:b9:4b:f9:9a:b9:0f:ff:be:73:33:fe:
15:20:3f:80:68:51:a6:be:ff:6b:8f:c3:bf:ee:93:
fe:e7:1d:a1:0b:a2:e8:ce:24:c7:4a:f1:c8:37:bc:
cb:55:bf:2c:5c:b7:3a:ee:63:14:2d:21:c6:96:1c:
cd:8b:7d:4a:52:02:24:d8:cd:7c:e2:8f:5f:2a:33:
66:d3:94:53:df:90:3a:f8:1a:a5:3c:46:96:ce:5d:
54:6a:ec:56:38:13:e9:43:32:4d:a4:0f:df:7a:32:
3d:78:26:f2:6d:ba:6d:24:6d:3a:6c:aa:c2:6c:c7:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:72:00:A9:6B:A8:9D:40:CF:89:D0:7A:43:A9:D6:12:9A:1A:44
X509v3 Authority Key Identifier:
keyid:29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/3XhyAKlrqJ1Az4nQekOp1hKaGkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/KSxdNyMZ-mF15WynmIPRKwxuOOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.69.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ce:72:65:b9:88:aa:c1:97:ad:7f:66:e7:c4:2b:33:03:71:
cd:e2:93:d6:7c:5e:11:16:21:db:39:af:ae:04:9e:67:b6:61:
33:a9:e8:06:17:7e:0d:5e:db:75:ca:21:29:f1:f5:46:c0:54:
8f:39:4a:c9:af:26:97:72:25:46:cf:65:df:23:86:39:d7:88:
84:df:b2:d3:4c:54:8d:fa:65:b9:c2:c2:d4:91:ae:00:cd:66:
b8:4f:42:73:57:82:07:e5:34:cc:ac:5b:a7:c0:b7:af:32:22:
af:a7:ee:50:23:51:d0:24:19:04:e4:9f:a1:0a:06:38:84:e8:
20:b3:f1:eb:0a:75:e5:98:bf:05:1e:ef:49:8d:68:32:c5:a5:
59:f5:bd:5a:1d:fa:33:0d:94:c7:8d:be:25:b0:1b:c6:bd:b8:
51:0a:56:8b:79:b7:86:bb:78:04:9e:71:d0:e8:f4:20:3b:3f:
4b:a5:b3:4b:17:2a:ad:4b:3b:a5:aa:50:3b:5f:35:64:e2:35:
e8:27:0d:9f:f9:6f:b1:ed:b8:d5:c5:b6:4b:4a:23:48:7a:88:
b8:bc:00:dc:a7:ad:07:e3:38:57:ac:0c:46:00:5d:5c:94:a8:
e0:cc:5b:db:6c:4b:85:f6:45:a0:df:e2:87:9b:74:a1:31:c0:
69:33:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-fra.rpki-client.org