Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/G_04TQE0MuujRmiPMl9y7kRwJFM.roa
File: G_04TQE0MuujRmiPMl9y7kRwJFM.roa (raw, json)
Hash identifier: hQDEz4f0D46aHzIgCiF55qW1BcUXskY1a7HH8fKhQXQ=
Subject key identifier: 1B:FD:38:4D:01:34:32:EB:A3:46:68:8F:32:5F:72:EE:44:70:24:53
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A90FD03B6A91BAB87FA8130587BA
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/G_04TQE0MuujRmiPMl9y7kRwJFM.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50551
IP address blocks: 81.15.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a9:0f:d0:3b:6a:91:ba:b8:7f:a8:13:05:87:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bfd384d013432eba346688f325f72ee44702453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:1c:b0:ec:c3:60:9f:e5:e1:4b:fa:45:b7:
29:7b:a0:b6:c1:92:6b:27:c7:db:80:05:e2:65:83:
34:d5:ff:bd:a1:28:70:38:ba:b0:53:27:c1:1f:bf:
bb:23:7a:5b:4d:a4:22:48:8f:64:f1:83:b9:ea:52:
8b:95:e2:2d:54:08:9b:c3:09:e0:c9:d3:a2:84:27:
cb:76:3d:69:5b:af:f1:e3:eb:bd:ec:02:6c:c5:d9:
23:8e:52:5b:84:50:d7:19:7b:c7:7e:fb:6b:13:3c:
e4:32:2c:0f:08:0b:62:d1:7e:cd:3f:8a:37:de:b9:
27:37:ac:7b:c2:2f:e4:d3:e5:03:5a:76:a9:66:b6:
7c:e8:2d:83:69:ea:1e:a0:8f:9a:54:53:9b:76:91:
98:4e:eb:94:64:d0:bc:56:e9:e6:5d:a8:46:22:c8:
bd:e3:b1:f0:e0:c7:35:22:14:fd:3a:0a:28:58:41:
e8:91:7b:9b:49:c8:d9:4c:78:62:d8:e2:ee:96:53:
b4:82:03:25:e5:15:89:5b:24:10:cf:23:0b:61:5c:
1d:7d:22:5c:d1:0d:dd:c4:c7:fa:a3:2c:7d:99:9f:
17:13:ce:e5:1a:5c:74:31:12:c7:c6:5e:e8:43:a3:
5e:24:4d:65:34:96:37:0d:5a:ac:9c:b6:95:24:27:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:38:4D:01:34:32:EB:A3:46:68:8F:32:5F:72:EE:44:70:24:53
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/G_04TQE0MuujRmiPMl9y7kRwJFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.157.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ea:10:cc:ad:3d:19:c8:7c:5b:c2:b7:18:3b:bf:9f:b9:2b:
e8:03:ef:b0:04:9e:2e:1a:06:ac:31:a4:2a:72:7f:65:87:26:
bd:c5:4b:df:01:56:63:12:02:df:93:15:cd:dc:24:d6:28:4b:
c9:56:11:c3:74:1a:1b:66:82:29:26:a8:6a:6c:01:e5:43:8b:
ef:a2:b1:af:4b:32:f9:65:9a:d9:b2:f0:08:94:70:79:09:8f:
0b:0d:83:f4:67:3e:ba:73:65:af:c2:4a:57:67:6e:04:39:c4:
58:51:55:5a:7f:d4:39:1f:c2:eb:cb:c9:13:4b:2c:47:74:35:
c7:3f:70:8c:10:3c:c7:b8:d2:dd:9f:57:b9:c5:87:66:fd:3a:
41:5e:6d:6f:b4:97:5e:58:83:6a:da:f8:55:89:3c:22:11:a2:
04:26:ca:11:d3:3e:5f:12:aa:a4:74:28:8d:ca:e4:fa:19:b2:
a8:d2:9c:10:8e:be:fd:9c:50:aa:03:88:88:56:4a:5b:cd:73:
17:28:e8:f2:53:bb:e0:01:64:e8:32:a7:ac:88:74:8a:1d:45:
b1:b8:00:fc:83:28:9f:fb:bb:4d:8f:5a:76:da:06:fb:03:e1:
1e:5f:39:ca:a1:47:dd:84:4e:96:22:45:b6:3c:55:dc:78:c9:
9d:80:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org