Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/ldIf2xiGhCHWCQdArridXH76Ozg.roa
File: ldIf2xiGhCHWCQdArridXH76Ozg.roa (raw, json)
Hash identifier: EIFIQml2jIuvVAVoRKv/KpFxyeY7t8P/guc3BdR3lnk=
Subject key identifier: 95:D2:1F:DB:18:86:84:21:D6:09:07:40:AE:B8:9D:5C:7E:FA:3B:38
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 01856FA6F9C2ADAF771DD82F2A39BDEC9AC8
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/ldIf2xiGhCHWCQdArridXH76Ozg.roa
Signing time: Sun 01 Jan 2023 23:24:51 +0000
ROA not before: Sun 01 Jan 2023 23:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201419
IP address blocks: 185.62.162.0/23 maxlen: 23
81.173.43.0/24 maxlen: 24
2a03:522::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f9:c2:ad:af:77:1d:d8:2f:2a:39:bd:ec:9a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Jan 1 23:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95d21fdb18868421d6090740aeb89d5c7efa3b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:bf:34:8d:8e:e4:fb:42:56:48:0b:58:de:
a2:aa:c1:26:d7:2a:9f:70:50:83:ae:3f:bd:11:ba:
23:7e:a6:51:67:d2:27:38:55:9b:a8:15:4b:f2:b5:
5f:16:df:f1:18:eb:fb:06:ed:42:67:76:aa:22:34:
9a:ff:22:d4:e3:3f:ae:11:a5:63:5e:2d:6c:a4:3b:
db:03:51:f0:69:8c:d3:59:c4:39:e9:86:b3:27:fd:
4f:0b:b0:9d:12:d9:27:8f:d6:7b:50:bb:d7:13:b5:
f8:88:a3:56:32:44:c1:52:b9:6f:2d:3b:ec:e6:50:
b8:20:df:34:58:cd:29:c9:66:0b:d4:06:48:c6:90:
0e:95:12:c5:46:a0:a3:e3:52:ae:c4:70:4f:96:f8:
b6:3d:30:c9:fa:8a:6d:cd:85:d5:c7:56:21:fd:1e:
fb:58:79:8b:0d:76:3a:5d:52:ae:e7:2c:af:82:45:
89:64:88:03:4c:de:92:ad:f4:3e:1c:d8:17:b4:61:
3b:d0:34:d7:b5:25:3f:8c:a8:1d:f1:35:ce:e5:d5:
87:64:f8:62:a5:17:84:e8:4b:6e:44:6d:2f:ff:05:
5b:3f:f4:79:b4:50:3f:0b:94:a7:d8:34:22:84:64:
23:8a:0b:5b:90:ea:87:c5:32:08:87:5c:67:9b:ec:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:1F:DB:18:86:84:21:D6:09:07:40:AE:B8:9D:5C:7E:FA:3B:38
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/ldIf2xiGhCHWCQdArridXH76Ozg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.43.0/24
185.62.162.0/23
IPv6:
2a03:522::/32
Signature Algorithm: sha256WithRSAEncryption
41:cd:4e:c4:d8:99:5b:24:82:fb:3e:bb:51:b5:d8:5d:36:1d:
7c:43:63:4b:86:a9:e8:58:93:a2:bb:fe:90:57:41:34:74:91:
37:1a:94:62:67:78:31:60:53:7d:1c:a9:37:25:04:42:60:20:
30:c5:e4:71:d3:d2:a9:68:13:36:64:3a:08:85:bb:b0:8d:88:
b3:64:3a:d9:25:1e:56:c6:c1:dd:d4:ba:0c:6a:ca:ec:aa:58:
79:01:d9:37:fc:c9:28:83:1d:1b:78:2c:31:9e:6e:2d:e4:b0:
f9:3a:61:4a:d7:5e:d9:cc:37:ba:b9:7f:d8:3e:d3:83:58:76:
a6:14:72:89:17:75:32:f2:4a:38:71:e9:73:de:cd:f2:79:bb:
61:dd:d0:34:75:9f:a0:09:af:72:59:88:4a:31:d2:d8:2d:23:
a3:6a:04:b4:e7:a7:71:e6:ca:0e:2a:fc:6d:99:da:23:d1:41:
5e:77:88:44:4c:95:12:eb:0c:d1:56:7e:74:c9:a7:9f:67:b6:
6a:7b:5c:a8:80:81:60:da:68:fa:a4:02:19:1b:2b:7a:12:da:
a5:05:10:96:dc:c1:05:1e:dd:fd:ba:3e:5d:76:ba:7f:cf:7d:
67:3a:a6:7f:95:16:9d:bc:92:17:98:85:a2:81:41:a6:81:6a:
e2:85:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:48 2024 by rpki-client on console-ams.rpki-client.org