Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V2RjHczl2q9rcPJyZ3hi_l49RmI.roa
File: V2RjHczl2q9rcPJyZ3hi_l49RmI.roa (raw, json)
Hash identifier: ShjZOWUB8w0eddDr5Fn5C63u/NcUNoarsJmQhq5s5+U=
Subject key identifier: 57:64:63:1D:CC:E5:DA:AF:6B:70:F2:72:67:78:62:FE:5E:3D:46:62
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0AF52FAB312307ACDBA8204422AAF
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V2RjHczl2q9rcPJyZ3hi_l49RmI.roa
Signing time: Mon 02 Jan 2023 05:24:59 +0000
ROA not before: Mon 02 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61256
IP address blocks: 81.15.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:af:52:fa:b3:12:30:7a:cd:ba:82:04:42:2a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5764631dcce5daaf6b70f272677862fe5e3d4662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:54:55:cf:d6:15:90:ed:00:87:c8:56:95:
dd:53:2a:e4:0d:78:35:dc:43:fc:ed:b0:27:85:ab:
7d:a5:3b:79:e6:bd:c9:55:5a:d4:92:5c:1b:58:b0:
e1:72:94:b7:da:c9:fe:a5:a2:88:ec:e9:0f:4c:a9:
b6:9c:e5:08:47:a9:97:5d:99:c5:ba:bb:95:ea:b5:
73:84:3a:86:d4:93:7a:7e:90:8e:c5:5b:b5:dd:5d:
cf:10:d5:56:b2:61:68:f0:e7:f1:44:94:93:0e:bd:
ae:06:f4:f3:3c:cf:6f:dd:d9:bc:2b:c7:4a:4e:5a:
f1:ff:4d:d1:01:d7:9f:f6:91:85:a9:39:9a:a3:3d:
6d:08:9f:29:1b:9d:b6:b8:72:62:15:f2:f5:f8:40:
78:e3:12:12:a1:28:c1:4f:b9:40:d2:d0:12:29:81:
bd:48:de:3c:4f:00:6b:a0:62:cb:67:c3:82:91:5f:
25:e9:97:cd:f8:d5:54:94:31:aa:a7:95:99:92:d0:
cb:f0:3a:f8:5e:f1:48:cd:78:32:40:01:1f:c8:c1:
7a:29:4d:17:16:14:53:13:f1:79:57:9f:bd:0b:82:
a9:5b:a8:fe:a5:95:d6:97:53:c2:b8:b2:84:77:30:
55:fa:cb:b0:59:76:7e:ff:fe:33:cb:9d:c6:b8:ac:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:63:1D:CC:E5:DA:AF:6B:70:F2:72:67:78:62:FE:5E:3D:46:62
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V2RjHczl2q9rcPJyZ3hi_l49RmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ce:07:b0:b3:ca:81:ad:09:b9:e0:85:7f:f7:b0:ff:9f:5b:
e1:e3:1f:3f:85:8e:78:c1:9d:82:29:ce:59:75:79:c7:c9:ba:
a9:03:36:e8:8a:c7:1a:55:f4:41:50:1a:08:ec:da:d0:f1:a0:
b1:e0:07:dd:44:f8:3c:a4:c3:19:99:f1:c3:77:b4:69:f1:7e:
12:b8:ba:b8:89:ae:15:a5:02:db:59:29:44:aa:9c:57:d8:c2:
59:05:02:a3:5b:44:25:21:c5:9a:74:a8:91:31:94:95:dd:1b:
09:26:30:45:ba:99:52:9b:08:8a:24:91:24:91:10:3f:16:8b:
b6:f6:e2:60:f3:b7:e5:1e:95:bd:9a:e4:59:c4:60:6d:f9:87:
38:6a:c4:40:42:84:97:fd:2e:43:ea:c7:ed:0c:68:c4:d0:cc:
ce:ee:5a:f5:e2:ed:06:e6:d6:cf:69:fb:d8:75:c1:69:da:4a:
af:39:3b:4e:af:24:68:d1:c6:c8:5c:60:9b:6f:21:4f:b3:24:
45:13:24:ad:a1:bf:d1:dc:b4:a3:61:9b:52:8b:dd:a7:52:f4:
48:d4:eb:f4:7c:d4:21:ac:df:8d:61:46:60:3e:d4:69:fd:bd:
81:f3:91:42:8d:d2:97:28:f3:87:11:3c:32:1c:70:7e:2a:d3:
50:ae:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org