Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3iXLfcjZ1racFXSvuayESt3OMeE.roa
File: 3iXLfcjZ1racFXSvuayESt3OMeE.roa (raw, json)
Hash identifier: 2fNx/C9Q0xaFhHDu3HPWmx5UcEtG1r3HzsRiwhkKNb4=
Subject key identifier: DE:25:CB:7D:C8:D9:D6:B6:9C:15:74:AF:B9:AC:84:4A:DD:CE:31:E1
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01887137F2FDCA7D53ECF0D2C639A7CAA934
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3iXLfcjZ1racFXSvuayESt3OMeE.roa
Signing time: Wed 31 May 2023 09:51:12 +0000
ROA not before: Wed 31 May 2023 09:51:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 269846
IP address blocks: 181.41.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:37:f2:fd:ca:7d:53:ec:f0:d2:c6:39:a7:ca:a9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 31 09:51:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de25cb7dc8d9d6b69c1574afb9ac844addce31e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:58:d5:18:84:ce:d8:30:7c:5e:28:cb:37:
54:44:1f:75:b7:c2:48:0a:f1:81:d8:e4:53:92:39:
e8:34:09:74:c3:98:27:83:82:1e:3b:33:ca:42:61:
ec:91:ca:e0:2d:60:bc:e5:b2:ca:f1:e6:0a:40:a0:
2f:2f:8e:f8:71:86:1b:d3:5f:52:63:f7:e5:b0:88:
e8:83:66:6c:61:58:47:a2:f1:0f:61:e8:0b:41:ab:
f3:99:e4:09:f9:35:89:5b:84:67:a2:ed:54:c5:16:
e9:41:0e:8b:a4:3c:f9:01:a5:b7:0a:43:44:c1:73:
92:6e:5c:09:79:29:4e:d6:48:e3:0a:e4:37:46:51:
f7:b1:70:6e:c8:cb:3e:39:6f:e7:84:9e:d1:7d:90:
2b:64:93:ae:b9:bc:b6:ea:32:b6:ca:19:c5:0a:c7:
93:a0:56:30:1e:35:8c:86:ef:27:af:c4:82:b2:5f:
03:45:46:ea:e8:4a:8c:30:a6:59:76:a7:f2:c3:09:
85:64:25:76:cd:18:50:a6:46:3b:6d:0a:b5:6f:6c:
82:ae:95:2b:c6:7c:52:d5:42:a1:83:66:ed:12:8b:
1a:41:ea:20:42:d8:8e:c3:67:e4:75:d2:01:d9:e2:
69:cd:d3:53:90:06:48:20:0a:fd:ba:ba:18:e2:9a:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:25:CB:7D:C8:D9:D6:B6:9C:15:74:AF:B9:AC:84:4A:DD:CE:31:E1
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3iXLfcjZ1racFXSvuayESt3OMeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3a:e4:51:65:43:6f:f9:40:37:7c:26:19:ab:8e:30:a1:78:
2b:c4:d4:6d:37:f7:34:b2:c5:ea:11:22:1c:98:53:63:4e:62:
22:b3:f3:86:d5:4d:5b:0c:a1:7c:e2:fc:6c:cc:51:3f:cb:f3:
3f:1d:2e:1b:3a:e1:6a:f8:b7:42:95:9b:c7:84:1a:e4:3d:8b:
94:ce:d8:e1:11:95:81:87:b3:b7:6b:21:f6:20:e9:8e:40:3b:
3e:ce:35:06:c5:74:8f:e2:fa:a9:99:6c:30:25:bb:05:7d:8e:
27:b9:62:1a:dd:8b:3c:0d:70:b5:20:e9:1f:6a:e4:75:d0:53:
27:6f:ea:28:2e:27:b3:ac:1b:bb:33:d0:f7:35:8b:66:52:a9:
83:ad:79:dc:bf:ac:2e:7c:d0:b9:44:9d:53:a6:4a:73:e3:f2:
a7:93:2a:1d:b5:79:21:24:c2:64:53:f5:ea:01:bb:5b:a8:d0:
28:09:26:eb:d0:e8:46:2a:da:72:51:6e:1a:b6:c6:02:e0:5e:
57:52:48:6b:e2:72:bc:ef:d1:5a:66:b8:21:9e:a5:fe:93:5b:
06:72:09:ea:b1:87:71:49:b7:47:20:62:16:c7:66:b9:3d:18:
96:16:a8:27:34:08:25:2b:33:ec:04:9f:30:cc:a0:1a:7c:94:
ce:5b:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org