Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/bFyATSeiwt2Mh2dr4DMaU_8J6IU.roa
File: bFyATSeiwt2Mh2dr4DMaU_8J6IU.roa (raw, json)
Hash identifier: EP/io8cWvdTCJj1UIrl+rhUF9O++VJXkk0Gp2s9KewE=
Subject key identifier: 6C:5C:80:4D:27:A2:C2:DD:8C:87:67:6B:E0:33:1A:53:FF:09:E8:85
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 0186A27DF66F7C33D920C4438A5705AE26D9
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/bFyATSeiwt2Mh2dr4DMaU_8J6IU.roa
Signing time: Thu 02 Mar 2023 13:23:29 +0000
ROA not before: Thu 02 Mar 2023 13:23:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 81.20.216.0/21 maxlen: 21
213.151.176.0/22 maxlen: 22
213.151.180.0/22 maxlen: 22
213.151.184.0/23 maxlen: 23
213.151.186.0/23 maxlen: 23
81.20.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:7d:f6:6f:7c:33:d9:20:c4:43:8a:57:05:ae:26:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Mar 2 13:23:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5c804d27a2c2dd8c87676be0331a53ff09e885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:81:4d:0c:e4:f4:fa:e1:f8:f8:15:a5:17:
b5:04:fa:8a:8b:b5:74:a8:e1:d5:2a:06:30:e6:aa:
30:52:3e:5d:be:15:07:d1:17:d4:eb:4f:dd:c0:a7:
a8:bb:d6:c0:f4:22:25:ba:11:2d:35:5c:ab:a0:20:
a8:15:42:f3:b8:3a:4c:68:7b:f6:44:e4:da:41:b1:
c4:04:11:45:21:a4:02:d2:bf:54:7a:93:19:76:f9:
67:63:e0:11:a6:46:3d:7e:1d:e5:53:cc:44:d6:6b:
51:21:9d:a3:df:b4:55:30:0c:b0:16:9f:31:ff:28:
c9:83:f0:5c:24:d6:b9:93:8f:02:bc:03:a6:84:71:
61:30:40:da:85:fa:85:00:b9:d2:47:57:6e:48:52:
ab:8c:6e:cb:4d:56:94:ea:ff:a6:08:0b:6e:39:17:
b7:f7:21:ee:ec:4a:23:4b:5f:1c:36:3d:d6:2e:be:
48:a3:ac:ae:83:a3:86:3e:d9:97:1a:7b:86:58:bb:
cc:fa:f1:b2:99:4d:71:ef:f7:bd:c7:f6:bb:57:e8:
3f:3a:5e:7d:8b:37:5d:84:06:e5:9c:e4:b0:74:16:
32:7a:2b:90:a1:d7:2c:76:72:4c:a8:28:bb:32:78:
0f:76:31:f8:c3:0f:fd:ef:27:2c:9c:64:78:00:59:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:80:4D:27:A2:C2:DD:8C:87:67:6B:E0:33:1A:53:FF:09:E8:85
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/bFyATSeiwt2Mh2dr4DMaU_8J6IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.208.0/20
213.151.176.0-213.151.187.255
Signature Algorithm: sha256WithRSAEncryption
94:52:f7:bb:86:e8:82:d9:68:dc:c9:52:cd:3b:f0:62:bf:3b:
c1:e4:83:cb:35:61:6b:f9:4a:36:1c:32:1f:6f:cb:bd:a3:21:
72:a2:17:38:da:e2:e1:72:e5:8f:eb:61:da:43:86:e4:74:ee:
a7:bd:d0:24:02:01:f8:6f:9e:d9:8a:45:8f:6b:1b:f1:1b:20:
74:ab:df:67:8f:6a:7b:96:f1:6e:20:5e:ff:30:61:ac:83:8d:
9c:94:a6:1c:12:bd:4b:71:38:05:25:6f:ea:0a:55:28:5c:d2:
9a:95:d2:82:4d:f4:66:07:1e:3d:cb:63:93:d0:4a:d6:41:ca:
b2:7c:65:2a:dd:9f:a3:91:53:b9:4a:fc:84:f4:e4:1c:4f:3f:
df:75:b8:65:85:45:1c:91:d9:2e:9a:47:59:46:74:7d:b4:2d:
b3:9d:8f:40:95:4e:9e:4d:bb:09:5b:e4:ce:9c:2d:90:82:5b:
9b:42:63:43:0b:de:ad:63:97:01:42:66:b5:7b:35:e9:12:a2:
c2:6b:0b:15:ae:0f:29:5f:6f:9c:b9:79:d4:4c:66:08:51:69:
ab:51:f4:db:42:4f:b2:ea:19:e3:bf:1a:a5:a1:00:ac:a3:97:
46:53:67:e9:47:56:e3:a9:0e:de:a1:2f:4d:76:c1:c0:d1:f0:
9b:5c:df:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:11 2024 by rpki-client on console-fra.rpki-client.org