Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/Ts3D7mj-q0Cb3sPppD_EspStNzE.roa
File: Ts3D7mj-q0Cb3sPppD_EspStNzE.roa (raw, json)
Hash identifier: GHhdRYBQyBMxQFtnPUDpon2fbbkyaSSkovaEKGnpAog=
Subject key identifier: 4E:CD:C3:EE:68:FE:AB:40:9B:DE:C3:E9:A4:3F:C4:B2:94:AD:37:31
Certificate issuer: /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial: 01856EF41FF8A89533227C705182C562CF71
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/Ts3D7mj-q0Cb3sPppD_EspStNzE.roa
Signing time: Sun 01 Jan 2023 20:09:30 +0000
ROA not before: Sun 01 Jan 2023 20:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39103
IP address blocks: 81.16.216.0/23 maxlen: 23
81.16.216.0/22 maxlen: 22
81.16.218.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:1f:f8:a8:95:33:22:7c:70:51:82:c5:62:cf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Validity
Not Before: Jan 1 20:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ecdc3ee68feab409bdec3e9a43fc4b294ad3731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e1:4b:4e:0e:cd:24:58:c9:60:13:e9:b3:a4:
16:9d:54:51:01:7d:21:f3:6f:37:19:a3:bd:5a:87:
b0:cf:58:b6:aa:74:41:56:8b:09:ea:e5:d6:07:f2:
5b:d7:ee:5a:54:50:45:13:16:6c:99:67:37:ce:72:
b3:e8:0b:00:2d:40:19:3a:46:77:d4:46:98:6a:dd:
20:94:1a:f2:b9:52:b4:fa:65:5a:6e:da:26:72:d5:
0b:6e:61:63:26:37:d4:02:a7:8f:af:c1:c1:b8:70:
ed:71:c1:5a:ea:6b:90:98:8e:b8:76:02:32:d4:c4:
d7:81:f1:59:d4:c3:71:11:67:37:90:1f:14:4f:cd:
29:9c:ff:9f:7e:8a:d9:65:15:4c:c1:cf:79:f7:ea:
cf:c8:14:b2:8f:34:24:d9:73:bc:01:86:bb:52:5b:
14:b7:52:ba:c4:49:7b:1f:d4:65:7d:bb:89:c5:be:
27:ca:90:55:d3:10:8b:70:15:96:f8:6c:cd:08:cf:
6e:0e:fa:be:de:b8:c2:34:ab:4a:93:06:e2:d5:72:
22:13:f8:e6:75:ce:40:44:75:cd:75:d6:d5:9e:ac:
3b:04:55:bc:3e:d9:86:78:f2:26:a9:12:d7:b7:95:
4f:03:fa:1f:f7:15:17:1f:2b:24:a0:f7:4a:8c:01:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:C3:EE:68:FE:AB:40:9B:DE:C3:E9:A4:3F:C4:B2:94:AD:37:31
X509v3 Authority Key Identifier:
keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/Ts3D7mj-q0Cb3sPppD_EspStNzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.216.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:22:79:12:6e:ac:62:0f:93:5c:72:b9:d6:d4:c3:8e:17:34:
14:e8:80:58:da:b1:e6:23:20:8d:95:8d:51:80:df:4b:10:9f:
2b:f8:5e:06:6d:25:49:ed:6d:f9:7e:99:3c:74:73:f8:ad:6e:
8f:7f:2f:9b:13:2b:f7:8d:12:98:92:85:ed:1e:bc:e8:34:79:
33:35:c5:70:9b:0f:8f:82:8a:4c:ee:0e:d1:e3:1a:20:fe:e4:
4c:85:bd:b0:ad:3b:a0:4c:ad:b8:0f:6c:df:b4:eb:3b:46:19:
ee:cd:31:7e:2e:e1:95:d3:6d:ae:96:cd:2f:98:2e:3e:f6:76:
57:3a:92:0f:33:6e:11:3c:57:4b:42:06:8c:b5:84:69:72:09:
15:ab:0b:8d:84:12:e7:1c:2a:77:d5:c7:91:6b:e8:af:18:ca:
56:73:27:67:37:82:51:57:c1:c0:28:92:60:50:ac:f7:66:39:
a5:fc:33:94:d1:5b:84:f9:59:04:74:19:7c:15:89:22:18:07:
a0:a3:83:bf:d6:34:37:ee:48:ca:ea:90:63:7a:62:85:23:d4:
51:89:5c:1d:24:1b:8a:f9:85:2e:d3:e5:05:24:54:22:a5:38:
f5:d3:d8:67:fa:03:6f:6e:18:d6:79:20:10:68:f8:20:01:da:
58:f7:8d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:07 2024 by rpki-client on console-fra.rpki-client.org