Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/jLaBgNhO0mlfFOkmld7pIeqEKuE.roa
File: jLaBgNhO0mlfFOkmld7pIeqEKuE.roa (raw, json)
Hash identifier: /k0qB4vMcAnub0jqRKZT7eoOdAL+8IrrSC1rSm29cLs=
Subject key identifier: 8C:B6:81:80:D8:4E:D2:69:5F:14:E9:26:95:DE:E9:21:EA:84:2A:E1
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019306218A61827544D5BAF4304181D965B9
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/jLaBgNhO0mlfFOkmld7pIeqEKuE.roa
Signing time: Thu 07 Nov 2024 10:18:01 +0000
ROA not before: Thu 07 Nov 2024 10:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61185
IP address blocks: 81.17.160.0/21 maxlen: 24
81.17.168.0/21 maxlen: 24
185.146.18.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 14:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:21:8a:61:82:75:44:d5:ba:f4:30:41:81:d9:65:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Nov 7 10:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cb68180d84ed2695f14e92695dee921ea842ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:6a:0c:2a:14:c2:61:7e:66:c5:6d:52:f8:
8f:ba:9e:cb:a9:25:cd:17:34:04:60:25:20:29:0e:
dc:26:11:90:37:61:e7:3b:36:01:91:62:c2:3e:e6:
e6:01:12:af:7e:6a:54:91:c7:f3:a4:43:f3:2c:2b:
ec:f0:c8:d8:3a:c4:77:59:f4:a4:10:4d:71:7f:80:
cd:64:90:08:22:8a:9c:02:61:30:d7:70:e5:ac:4b:
aa:72:94:03:21:f3:bf:ed:cb:ff:4c:61:1b:69:f1:
aa:88:c5:1d:ea:9e:27:81:f5:9d:6d:ea:f6:4b:d9:
37:a5:e1:14:c4:85:90:67:a6:a4:af:09:b0:09:c6:
36:21:76:4a:92:79:b8:bb:ca:e1:0d:ce:6a:69:bd:
b8:8f:b4:7f:a3:8b:d9:6d:5b:57:f8:58:35:f6:8e:
e8:f9:37:aa:00:c3:86:1e:fc:b7:53:ad:5d:18:5f:
b0:b5:fc:c0:ac:24:58:83:89:17:49:e3:66:c3:6d:
9c:bc:7f:03:18:37:83:6f:3e:38:36:f9:5a:4a:b3:
5f:bb:02:b0:91:a6:79:b0:e6:10:87:f7:0a:ee:34:
8f:54:89:1a:c9:fa:43:13:83:f7:48:95:22:17:62:
9d:cd:81:9d:47:54:ca:15:cc:be:b4:3a:80:25:7d:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:81:80:D8:4E:D2:69:5F:14:E9:26:95:DE:E9:21:EA:84:2A:E1
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/jLaBgNhO0mlfFOkmld7pIeqEKuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/20
185.146.18.0/23
Signature Algorithm: sha256WithRSAEncryption
97:44:39:a6:0f:cd:7a:93:cb:df:b4:2f:a3:20:08:e3:59:37:
20:40:cf:8b:b0:e2:8d:a0:04:57:a6:e0:e5:d3:bd:51:61:d4:
28:3a:21:8e:08:d9:a7:c4:cf:db:e6:c9:c5:fc:75:b5:60:d3:
fa:41:e9:c6:4e:fc:2e:11:17:1c:e3:53:24:dd:12:77:68:2f:
a9:df:6f:5c:76:6c:b3:b3:58:26:23:7e:92:7e:24:f4:3e:ec:
a3:15:ec:54:b2:77:70:07:b5:5f:e6:76:f2:5e:19:cf:eb:f5:
8b:50:bf:6c:e5:38:f3:22:46:63:74:08:99:58:22:7f:bb:c7:
d8:f0:fc:07:45:b9:8e:2b:1f:6e:78:46:55:eb:d3:1a:52:53:
6b:49:e0:16:4f:75:87:0f:dd:77:79:0c:69:c6:f3:1c:f0:de:
7f:81:f8:35:44:dc:eb:fd:6a:ee:a8:2b:14:e8:1e:2e:b5:3f:
92:74:2b:4a:1d:6b:70:33:88:ac:74:5b:e9:09:0b:4a:57:58:
c0:b9:0e:2c:38:ea:af:fe:4c:b5:5a:77:7b:6b:5c:fa:7f:fc:
10:67:4b:18:93:b5:8c:18:71:3e:25:5d:f6:6e:4a:20:5b:60:
70:2d:c4:f8:a6:60:09:17:e6:23:cc:47:16:24:5f:13:3e:f7:
d7:78:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 19:36:41 2024 by rpki-client on console-ams.rpki-client.org