Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/v8IghOENSGFtfBpSCIyUNG-XVgU.roa
File: v8IghOENSGFtfBpSCIyUNG-XVgU.roa (raw, json)
Hash identifier: ZfWaeTF3qbat9MXevt6EA2u1tlcR4LCMbH1QOKOcE04=
Subject key identifier: BF:C2:20:84:E1:0D:48:61:6D:7C:1A:52:08:8C:94:34:6F:97:56:05
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C1D1DF59C09785D72BF6999B3E8B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/v8IghOENSGFtfBpSCIyUNG-XVgU.roa
Signing time: Mon 02 Jan 2023 05:25:04 +0000
ROA not before: Mon 02 Jan 2023 05:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205034
IP address blocks: 81.15.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c1:d1:df:59:c0:97:85:d7:2b:f6:99:9b:3e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfc22084e10d48616d7c1a52088c94346f975605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:31:0a:bc:71:43:a5:7c:f5:b5:09:c0:a4:
01:38:13:a7:7e:8a:86:68:72:56:5d:05:0b:85:ee:
9d:b6:bc:97:5a:18:38:22:1a:47:86:9a:7c:4c:f6:
2f:3d:d3:a3:6c:da:00:56:b8:64:87:86:24:7b:26:
87:13:bd:21:18:8c:5a:27:a6:06:05:46:9f:aa:19:
47:9e:c2:d9:7c:dd:a0:2d:9f:d1:50:fe:03:37:5a:
02:6d:99:79:14:a3:e9:a7:15:5c:da:90:e5:58:26:
3f:f7:3c:65:6c:4f:1a:c5:cc:ae:bc:40:88:20:fa:
cd:c1:99:db:9f:8b:48:a7:67:5c:70:1e:e3:98:4b:
e6:83:a5:e4:cf:ae:eb:25:c3:36:a0:39:58:67:ec:
95:ba:c8:12:0e:e3:b5:ca:20:c7:43:86:02:60:61:
93:ab:66:48:8f:26:a5:48:6b:ff:fc:9a:fa:47:43:
02:a5:7c:66:8d:b2:09:24:be:83:cf:0d:70:de:fc:
8f:6a:9f:52:c8:c3:0c:62:a0:6d:be:b2:81:90:7a:
7a:5e:68:f9:79:8d:9b:ec:a3:63:03:46:17:ae:01:
57:24:2e:5e:20:b3:f2:db:9a:67:6a:da:61:10:f2:
f8:16:4a:07:ff:c0:75:c5:d0:2d:9e:30:53:dc:e7:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C2:20:84:E1:0D:48:61:6D:7C:1A:52:08:8C:94:34:6F:97:56:05
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/v8IghOENSGFtfBpSCIyUNG-XVgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.145.0/24
Signature Algorithm: sha256WithRSAEncryption
95:57:dd:16:d3:40:6d:c5:45:58:e7:30:bc:ec:38:0c:e0:f4:
26:1b:36:7f:cc:5f:ed:b3:10:97:16:f8:cf:8b:99:22:e7:03:
03:ea:2d:36:3a:e1:b3:91:6e:65:83:52:84:ba:e0:9f:b7:94:
0f:e2:ce:2b:ce:02:46:1f:9a:6b:d0:bb:16:cc:e0:04:a0:d8:
18:b6:03:8c:6b:cc:c4:5c:cd:90:27:4e:85:65:d6:07:8d:fe:
18:d9:1c:2a:40:48:80:08:6c:fc:5a:45:fb:6b:82:0b:a8:d3:
9a:d9:e7:4b:90:c8:d8:ea:9a:29:52:8c:f7:28:aa:02:5e:d4:
61:fc:da:99:26:71:c7:8a:e1:24:34:84:6c:84:8b:92:f6:9c:
92:a4:d6:e1:f8:6a:06:ab:c1:f0:ad:c7:83:cd:f8:75:87:86:
55:2b:eb:7b:a2:98:b2:1f:f1:33:bc:54:32:57:23:db:0f:a0:
03:67:05:5d:9d:60:fc:0b:28:f4:ff:c1:2d:65:1a:8a:0d:0b:
b4:f9:5f:6e:84:6d:23:91:da:f5:96:e9:1a:f5:ca:21:9e:15:
56:01:45:36:19:d0:91:40:e0:e1:36:f8:39:78:3f:1f:26:ee:
d6:48:e7:c0:9a:7c:9f:47:fc:a7:65:58:32:84:57:ab:e5:02:
aa:40:64:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org