Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/CfqLC8KZrQZkvUAzIJIxMbZwc3I.roa
File: CfqLC8KZrQZkvUAzIJIxMbZwc3I.roa (raw, json)
Hash identifier: XlM+HFVmy1nOapvoW1P0vjt3ugtIJd25wS1i+OypqBI=
Subject key identifier: 09:FA:8B:0B:C2:99:AD:06:64:BD:40:33:20:92:31:31:B6:70:73:72
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01857295C9AE5AC454B3C8A009132F1A8277
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/CfqLC8KZrQZkvUAzIJIxMbZwc3I.roa
Signing time: Mon 02 Jan 2023 13:04:57 +0000
ROA not before: Mon 02 Jan 2023 13:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139719
IP address blocks: 81.199.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:c9:ae:5a:c4:54:b3:c8:a0:09:13:2f:1a:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 13:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09fa8b0bc299ad0664bd403320923131b6707372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:19:e9:a8:08:dd:fe:66:6e:85:23:05:4e:
79:b3:75:1d:c5:3e:59:f6:fb:5e:69:bb:92:80:28:
04:17:8f:fd:df:90:88:2e:a3:86:81:c6:ec:4d:27:
12:07:69:28:66:a6:48:b7:40:44:cb:55:29:7c:5a:
39:49:c2:c4:c7:65:dc:cc:53:7d:c4:8b:cd:a2:78:
df:d1:0f:cf:c3:aa:66:a7:51:f9:96:4b:a4:c5:79:
f8:0e:70:b6:a7:36:ac:76:60:cc:ce:60:c6:62:7a:
18:82:31:ad:3d:cc:59:7d:34:be:37:fd:f5:68:7a:
1c:0a:78:34:a9:ba:01:a5:f4:ba:a3:2a:57:fb:53:
a9:95:fe:f4:9d:e2:69:49:28:68:b0:38:dd:d9:c2:
cb:73:23:86:49:3b:1d:2d:fd:43:57:d2:a3:a5:e0:
55:b4:86:45:77:e9:dc:25:b9:3b:0a:0c:9c:da:46:
9f:c0:7f:8d:31:0c:4f:6e:93:0c:82:cf:8e:d7:05:
70:c4:b1:33:91:86:14:96:94:5f:64:1d:d1:46:ec:
3d:cd:27:f4:9a:de:17:48:b2:14:da:4b:f5:c2:ef:
25:7e:b1:f3:89:d3:f1:6c:b6:5a:1f:9b:72:6d:c7:
d1:bc:b5:29:3e:7b:70:61:91:91:48:e9:53:c5:94:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FA:8B:0B:C2:99:AD:06:64:BD:40:33:20:92:31:31:B6:70:73:72
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/CfqLC8KZrQZkvUAzIJIxMbZwc3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.114.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8a:6c:57:29:f6:14:49:e8:4d:44:d8:a2:99:46:b9:79:36:
3d:43:bf:7b:cb:3b:e7:00:f7:d4:fc:a3:1d:7c:7f:c6:e2:08:
66:7a:2b:ab:8a:87:e8:6b:b0:f1:9d:c8:10:14:64:69:71:92:
54:da:ae:a3:84:7d:74:ae:72:69:98:8d:97:3f:25:49:fc:38:
96:b6:a7:b5:da:98:c6:23:58:f5:36:b0:0f:7b:a0:61:7d:a3:
cf:cd:e7:06:46:db:2a:c5:4e:87:47:89:f0:30:fa:6c:7a:73:
8b:c7:72:03:20:df:4e:0e:9d:47:7c:ff:95:90:83:f5:be:46:
1c:a4:43:ec:fe:48:8e:cc:c6:a2:71:a5:f8:24:8b:5f:2c:c8:
19:50:00:8f:5e:b7:e1:dc:50:9e:0c:b4:c0:88:ae:28:d5:0c:
bf:2c:f5:a2:4f:1c:fd:01:a0:9d:f3:97:58:20:af:c0:1a:ab:
e6:c6:86:4b:a6:5d:da:10:31:3d:e4:26:c0:84:49:cd:42:66:
f7:e0:70:3e:12:d7:50:49:e9:42:cc:fa:f8:dd:60:ea:be:c0:
a8:ed:1e:42:11:c4:99:49:47:ec:d1:3d:be:a8:87:78:44:97:
98:62:29:e7:cf:01:fc:6b:31:07:6f:a9:05:b5:28:49:9e:61:
95:c4:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org