Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/0kZj7DeU0EF2nkUj77oQ06YvMP4.roa
File: 0kZj7DeU0EF2nkUj77oQ06YvMP4.roa (raw, json)
Hash identifier: 9qNY0aR+J5grc4/hFIxFMtON7k7ePs2RFlzcVrBM04Y=
Subject key identifier: D2:46:63:EC:37:94:D0:41:76:9E:45:23:EF:BA:10:D3:A6:2F:30:FE
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705AED42EB88B7FF8F52668DD606FB
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/0kZj7DeU0EF2nkUj77oQ06YvMP4.roa
Signing time: Mon 02 Jan 2023 03:04:49 +0000
ROA not before: Mon 02 Jan 2023 03:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24626
IP address blocks: 81.18.128.0/19 maxlen: 32
81.4.192.0/18 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5a:ed:42:eb:88:b7:ff:8f:52:66:8d:d6:06:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d24663ec3794d041769e4523efba10d3a62f30fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:e2:3f:9e:26:e7:f9:1d:ff:81:f9:c0:52:
fb:0c:8b:ff:82:f8:c6:ee:cf:39:93:b6:25:31:37:
c0:49:fa:73:f2:56:77:57:2c:e0:5b:5b:23:7f:15:
89:7e:6b:42:a7:d9:fd:e2:71:c2:05:d3:ff:f4:c3:
4b:76:61:51:cf:08:fa:76:2f:db:9d:1b:35:6a:41:
1a:15:7e:fe:5a:c4:bc:04:fb:55:73:33:e0:6e:34:
76:a8:ba:bb:5d:5c:79:9e:88:3c:6e:54:e0:29:66:
f5:16:53:f6:70:0b:08:e8:61:1d:ac:db:21:77:8b:
70:63:74:cf:48:8f:d7:c1:77:03:fc:0d:9b:57:90:
fc:2d:c1:d6:7b:7b:5e:03:4a:3c:73:1f:9f:50:8b:
27:7e:14:1e:b0:f0:5b:71:af:6a:14:25:4e:ac:17:
9b:dc:a9:16:3d:8f:ef:e5:24:f4:ca:4f:d3:03:2e:
68:7e:71:05:1d:70:f3:8c:31:49:45:fc:98:4a:b0:
e7:e4:06:56:c9:4b:15:9c:1b:4d:d7:0e:07:74:c6:
96:29:22:71:6f:ba:1e:4c:94:8f:c8:b5:4d:5d:cd:
08:01:f8:4b:27:8e:8e:ae:8f:dd:6a:42:c2:2d:7e:
51:6f:28:43:a8:db:82:a8:f7:9e:b4:34:8c:9a:cc:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:63:EC:37:94:D0:41:76:9E:45:23:EF:BA:10:D3:A6:2F:30:FE
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/0kZj7DeU0EF2nkUj77oQ06YvMP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.192.0/18
81.18.128.0/19
Signature Algorithm: sha256WithRSAEncryption
89:07:20:60:a2:88:34:1c:82:05:8f:68:5f:74:17:e1:31:e7:
ff:05:69:ed:00:40:a7:28:bf:51:23:99:79:1f:25:37:8c:31:
60:38:26:52:3e:d3:ba:12:2a:11:24:60:24:9e:bb:24:bd:90:
9b:05:68:98:0b:1f:86:8d:9c:13:a6:5b:d8:64:4f:d0:67:33:
6f:06:66:65:82:c7:8f:b1:fe:f4:6a:81:6b:e6:63:08:df:52:
41:2f:ef:a5:ca:db:e4:e3:91:54:18:61:d9:29:54:15:3c:cf:
2d:02:ce:43:5d:77:90:fc:4b:88:f6:84:12:16:55:10:de:ca:
4c:68:95:b4:31:fa:dc:dd:0e:67:11:db:81:0f:73:1f:cb:17:
8f:1b:24:0f:77:31:31:6a:98:5e:05:27:6a:5a:25:1b:89:0d:
98:ef:49:ab:50:13:09:22:8f:2e:b5:03:c8:9d:e8:0a:7f:85:
9a:cf:9a:37:0f:ab:e0:a3:a4:54:a4:97:fd:2a:01:08:06:d4:
91:b9:7a:d9:e7:5c:1e:a8:34:86:d9:f3:0a:eb:b3:fc:61:8d:
1a:8a:6c:aa:a7:88:4e:ea:0d:32:8c:7a:30:37:7c:59:7e:38:
14:ae:82:b3:6e:34:82:a5:51:d5:11:33:15:c6:5e:bd:04:43:
d9:0d:d9:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwcFrtQuuIt/+PUmaN1gb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjMwMTAyMDMwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjQ2NjNlYzM3OTRkMDQxNzY5ZTQ1MjNlZmJhMTBkM2E2MmYzMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdniP54m5/kd/4H5wFL7DIv/gvjG
7s85k7YlMTfASfpz8lZ3VyzgW1sjfxWJfmtCp9n94nHCBdP/9MNLdmFRzwj6di/b
nRs1akEaFX7+WsS8BPtVczPgbjR2qLq7XVx5nog8blTgKWb1FlP2cAsI6GEdrNsh
d4twY3TPSI/XwXcD/A2bV5D8LcHWe3teA0o8cx+fUIsnfhQesPBbca9qFCVOrBeb
3KkWPY/v5ST0yk/TAy5ofnEFHXDzjDFJRfyYSrDn5AZWyUsVnBtN1w4HdMaWKSJx
b7oeTJSPyLVNXc0IAfhLJ46Oro/dakLCLX5RbyhDqNuCqPeetDSMmsypMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNJGY+w3lNBBdp5FI++6ENOmLzD+MB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvMGtaajdEZVUwRUYybmtVajc3b1EwNll2TVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGUQTAAwQF
URKAMA0GCSqGSIb3DQEBCwUAA4IBAQCJByBgoog0HIIFj2hfdBfhMef/BWntAECn
KL9RI5l5HyU3jDFgOCZSPtO6EioRJGAknrskvZCbBWiYCx+GjZwTplvYZE/QZzNv
BmZlgsePsf70aoFr5mMI31JBL++lytvk45FUGGHZKVQVPM8tAs5DXXeQ/EuI9oQS
FlUQ3spMaJW0Mfrc3Q5nEduBD3MfyxePGyQPdzExapheBSdqWiUbiQ2Y70mrUBMJ
Io8utQPInegKf4Waz5o3D6vgo6RUpJf9KgEIBtSRuXrZ51weqDSG2fMK67P8YY0a
imyqp4hO6g0yjHowN3xZfjgUroKzbjSCpVHVETMVxl69BEPZDdn/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org