Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V_Fq5pZWL3ZEJ-NYWfabAvyeRT0.roa
File: V_Fq5pZWL3ZEJ-NYWfabAvyeRT0.roa (raw, json)
Hash identifier: 5iFyxfIfyUKt1UPP+HoZP6mXS+3i7hM0b66NmPdSxOI=
Subject key identifier: 57:F1:6A:E6:96:56:2F:76:44:27:E3:58:59:F6:9B:02:FC:9E:45:3D
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0AE18B029845704997CCA781CB2D8
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V_Fq5pZWL3ZEJ-NYWfabAvyeRT0.roa
Signing time: Mon 02 Jan 2023 05:24:59 +0000
ROA not before: Mon 02 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60378
IP address blocks: 81.15.200.0/24 maxlen: 24
82.177.136.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ae:18:b0:29:84:57:04:99:7c:ca:78:1c:b2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57f16ae696562f764427e35859f69b02fc9e453d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:a3:92:58:e5:41:15:7e:08:00:55:00:60:
2b:e4:6c:36:2f:c0:05:3d:28:96:2b:cd:44:0d:1b:
de:ee:0e:20:42:30:a8:6f:17:72:fd:77:44:2f:0a:
52:f9:39:a2:00:89:00:d2:6b:b1:f2:69:1d:c2:ab:
46:e4:2a:87:7c:b9:e6:af:f8:a7:e9:ef:6c:44:73:
e7:94:e0:75:c2:d4:16:2b:42:6d:67:00:ad:f8:25:
b7:18:d2:1b:06:c7:17:f8:a8:77:32:f3:e1:6d:82:
e4:4d:9f:de:63:e4:0b:42:c3:5a:57:95:c6:f0:4d:
76:c3:8f:e7:82:9a:b0:a2:80:a4:e3:5b:5f:e2:23:
aa:32:a4:57:4d:ef:1f:cb:54:0f:e9:d7:30:58:50:
61:aa:2e:5c:07:30:2a:dd:82:da:af:96:40:97:78:
08:a0:a6:dc:e0:b3:66:79:db:fa:9c:8b:04:24:99:
39:82:e7:91:c7:10:7d:02:df:45:c3:6d:b2:e0:cf:
67:b7:53:dd:47:c7:35:9a:82:65:a8:ce:ed:39:72:
76:d7:d8:ee:c2:10:c9:33:52:f8:df:73:d4:7e:d5:
10:f4:ce:10:be:ee:89:ba:e4:d0:04:4f:cb:d0:13:
67:74:ea:cb:91:1d:ab:77:c0:85:58:4d:77:74:06:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:6A:E6:96:56:2F:76:44:27:E3:58:59:F6:9B:02:FC:9E:45:3D
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V_Fq5pZWL3ZEJ-NYWfabAvyeRT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.200.0/24
82.177.136.0/23
Signature Algorithm: sha256WithRSAEncryption
65:a0:92:06:8b:8b:f1:47:5e:3d:16:38:3d:69:57:e4:0a:b8:
6e:af:81:2d:0e:81:7e:f0:61:00:0e:c9:d9:b4:88:9c:ac:32:
f6:3b:ca:9c:3b:bd:f2:74:6f:50:fb:9d:e4:ab:36:7e:85:2f:
bc:79:d8:1f:74:ae:07:50:be:8e:bc:bb:d5:ee:79:99:d1:ea:
30:39:d8:e1:db:47:f6:3d:72:fe:8a:35:98:c7:ab:2e:4c:7b:
d3:2d:6c:b0:cd:97:c4:ce:68:fc:ca:b9:76:7a:95:35:41:26:
9c:3b:e2:92:61:22:7a:f1:a6:61:65:af:d8:0d:6a:66:98:2a:
11:fd:19:2e:a7:f5:1d:bb:2b:d4:da:1c:db:1c:ed:3f:01:b3:
82:79:56:b0:b7:ee:b7:59:4d:29:c8:ab:2b:12:b0:8d:1b:1c:
6f:0a:19:d2:30:28:c3:dd:a7:c2:78:49:2a:eb:38:ba:ad:ec:
c1:32:b8:a1:7b:39:12:97:70:4f:83:6f:6d:82:37:47:0a:0e:
b3:4c:91:e7:74:bd:e7:bb:40:07:b3:9c:26:47:9a:b9:d0:bf:
ce:5f:e8:5f:65:09:a7:00:28:bf:3a:a9:f2:d5:7a:51:a0:cf:
80:1f:33:4d:38:35:4b:64:e0:1d:6e:9b:be:55:69:96:82:8f:
cf:0f:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org