Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dXvJYxuyU26mxFN0gOXTPJRjNuo.roa
File: dXvJYxuyU26mxFN0gOXTPJRjNuo.roa (raw, json)
Hash identifier: PeMTdENO9AanF4Ytl2yJJj+A0WHh30k0Vp+9PtB+qhY=
Subject key identifier: 75:7B:C9:63:1B:B2:53:6E:A6:C4:53:74:80:E5:D3:3C:94:63:36:EA
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01856F54B9DE1C3CB4D63E3F36F1EECF7756
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dXvJYxuyU26mxFN0gOXTPJRjNuo.roa
Signing time: Sun 01 Jan 2023 21:55:01 +0000
ROA not before: Sun 01 Jan 2023 21:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 81.29.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:b9:de:1c:3c:b4:d6:3e:3f:36:f1:ee:cf:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=757bc9631bb2536ea6c4537480e5d33c946336ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:bc:fb:70:14:b4:31:b4:9a:11:9d:e2:bd:
d7:f2:11:f8:c2:3a:6f:ea:ad:e8:00:d8:5f:fb:3c:
9e:47:28:5c:42:eb:d1:1a:30:b2:e3:cb:dd:08:9d:
e3:dc:ca:6b:bd:63:d2:40:3d:03:23:70:f5:e1:73:
02:d2:1b:c9:89:63:08:90:c4:e0:86:b9:3e:a6:04:
72:c9:5e:52:1a:15:06:05:cb:39:76:d5:d5:23:dc:
62:10:d4:3a:2d:a6:8a:c0:4f:13:fe:d3:7a:1f:c8:
89:42:08:78:97:04:2c:1f:20:d7:79:19:7f:79:51:
e6:4d:29:85:c3:15:8e:76:53:2b:af:3a:b3:2f:9b:
d3:35:53:df:eb:13:23:70:42:89:e3:47:8c:6a:75:
76:1d:70:e2:4e:97:db:ec:ec:8a:51:1b:e2:42:c9:
1d:9e:cb:6d:77:cc:8a:15:9a:06:dd:b8:b1:75:b3:
1a:61:76:7d:da:4d:51:8f:82:08:52:6c:4f:ef:ac:
5b:8a:e6:46:47:98:69:43:3d:fb:07:0e:ab:59:38:
91:5d:6d:d2:42:b9:3e:f9:f6:b4:e6:a4:94:00:dd:
92:d4:6c:11:d0:8a:6b:0d:d7:d8:de:ec:04:9a:55:
48:e1:53:aa:6a:4b:3e:f2:3f:98:6b:9a:7f:66:6a:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:C9:63:1B:B2:53:6E:A6:C4:53:74:80:E5:D3:3C:94:63:36:EA
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dXvJYxuyU26mxFN0gOXTPJRjNuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.154.0/24
Signature Algorithm: sha256WithRSAEncryption
62:cb:41:e6:c2:ce:80:0c:bc:ce:02:72:12:26:28:d0:6b:b9:
f2:82:75:84:9c:30:e2:65:1b:59:84:1d:ab:9c:a0:47:04:1e:
17:8f:ec:a7:c0:a6:94:f8:cf:fc:a6:ad:82:12:29:50:9b:a3:
8d:7a:33:db:c0:18:e3:2c:23:b6:10:7d:9c:81:14:0a:3f:fc:
ac:65:a7:71:25:66:b3:7b:a2:09:f5:0b:52:ab:39:01:7f:e2:
2b:ed:89:65:09:44:39:e8:f7:9e:14:3a:6d:e6:20:7d:c4:68:
3a:e0:51:7e:9e:f2:2f:7f:83:3e:6d:38:64:cc:22:3e:40:f3:
82:b0:fb:4f:e0:1b:28:db:75:f0:b1:0e:e2:9d:97:f2:53:05:
71:86:09:5b:de:66:25:72:27:2d:5a:45:ad:48:ec:f4:2b:09:
49:ad:42:88:1b:43:84:27:7c:de:6a:b5:c6:93:79:3c:f4:80:
91:1f:9e:0f:2c:db:f2:dd:bf:5f:3d:5a:a2:35:e3:23:9d:3f:
9b:76:7f:00:73:c4:dc:aa:db:61:d9:41:b8:66:a8:b0:43:6b:
66:95:54:b4:95:52:d6:34:bf:1f:54:69:d3:de:4f:20:00:d6:
67:11:cf:e2:65:9b:34:36:18:e1:11:ed:f5:f6:6f:4a:ba:33:
af:b4:82:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org