Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/3SCCaha0IXBLHrVieFBk5kJ9qEw.roa
File: 3SCCaha0IXBLHrVieFBk5kJ9qEw.roa (raw, json)
Hash identifier: hxTXGjEEuj/xeNoHXpZ6swVZwDwB1LFIhvixzEGxC/0=
Subject key identifier: DD:20:82:6A:16:B4:21:70:4B:1E:B5:62:78:50:64:E6:42:7D:A8:4C
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0185707060D8D5DA20865E2AC3C3443EF26B
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/3SCCaha0IXBLHrVieFBk5kJ9qEw.roa
Signing time: Mon 02 Jan 2023 03:04:51 +0000
ROA not before: Mon 02 Jan 2023 03:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60747
IP address blocks: 81.4.222.0/23 maxlen: 32
81.4.212.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:60:d8:d5:da:20:86:5e:2a:c3:c3:44:3e:f2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd20826a16b421704b1eb562785064e6427da84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:72:0f:43:38:11:88:47:ac:16:53:68:b1:
8c:38:3d:55:28:11:b8:ed:81:d1:b3:12:e0:9a:12:
2e:8b:8d:9d:d6:f1:08:d0:54:e8:22:af:e6:27:c8:
2f:f0:91:f5:31:4c:4a:1a:62:2a:de:16:04:ad:9c:
c4:7f:32:17:54:2f:c3:d8:c0:cb:df:42:ad:cb:ee:
f9:a0:07:30:0a:aa:60:67:e5:ae:77:63:57:97:f6:
7b:b6:19:24:7d:d6:bc:7e:f9:8d:0e:1c:5c:ef:90:
04:e7:11:4f:04:03:5f:cf:16:45:69:3b:7b:ab:8f:
9c:12:d8:93:9e:83:64:12:fb:92:81:af:b2:02:0c:
33:77:7e:e5:65:78:af:08:87:10:25:0a:93:8b:e6:
8e:85:54:b2:66:d2:07:33:d3:b7:20:88:8e:7c:ff:
1f:88:17:9c:bd:6a:dc:c9:82:14:8f:f1:f0:ed:f5:
cb:b0:b9:53:bb:c8:5c:0d:27:81:5b:98:0d:22:ae:
41:09:91:80:6f:ef:11:45:72:62:13:58:83:95:d9:
7f:d0:67:78:cc:b3:c6:52:7c:15:6b:0f:9d:85:90:
68:d4:9b:86:88:8e:9c:b1:f8:2f:96:bf:35:b0:b3:
ff:40:6c:9b:ee:f0:da:b5:4d:b6:d9:2e:8a:e5:fb:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:82:6A:16:B4:21:70:4B:1E:B5:62:78:50:64:E6:42:7D:A8:4C
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/3SCCaha0IXBLHrVieFBk5kJ9qEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.212.0/22
81.4.222.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:12:e1:76:d8:c1:3b:0b:a7:cc:88:92:b4:4f:d4:e5:18:50:
ff:ad:90:0f:90:c3:2c:a5:8a:d1:50:91:6d:08:83:eb:53:1d:
7a:cf:7a:72:0b:0b:d2:3a:43:6e:f2:b9:26:5a:c2:db:1b:6c:
60:b3:15:f5:f7:9b:fb:b8:00:ad:0f:c1:83:a2:42:6d:a0:33:
57:b8:81:04:bf:0d:55:35:99:13:78:f3:0a:6e:c6:89:e0:e8:
9c:26:3b:92:0d:99:d5:0c:9c:51:ea:9f:d4:d9:e9:cd:36:e9:
52:d7:a6:e3:31:c7:07:9c:5a:d0:48:3e:c1:fc:bb:59:0a:f3:
1e:4a:58:f2:45:ee:82:4c:e6:32:27:d8:de:1b:c2:88:05:d8:
3c:4c:83:31:40:df:d9:6b:ac:40:94:11:e4:5f:59:6d:4f:4e:
07:77:35:02:59:58:84:b9:c7:f0:11:3b:df:91:5c:5c:68:54:
ec:b2:26:89:70:5b:75:54:ab:c3:57:6b:bc:9b:c9:36:a9:10:
21:4a:c0:d6:91:1d:8b:0a:25:54:13:96:2b:cd:bf:4b:65:eb:
df:b7:90:bf:a8:e5:cc:6c:71:27:35:45:b9:2e:e0:2d:a2:11:
9d:00:e2:1b:3d:40:6a:28:9e:16:e1:59:2f:50:ab:b8:7e:3d:
5b:70:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org