Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/i_Fq3_xrGcIn5E6VZRaRLgrN7D4.roa
File: i_Fq3_xrGcIn5E6VZRaRLgrN7D4.roa (raw, json)
Hash identifier: XKXwAUssIV9jw/MHq+Nli9xCofvpPgltNjb1w0XwVkM=
Subject key identifier: 8B:F1:6A:DF:FC:6B:19:C2:27:E4:4E:95:65:16:91:2E:0A:CD:EC:3E
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255AD1C00F321C2E57E09BA2C1CD7A3
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/i_Fq3_xrGcIn5E6VZRaRLgrN7D4.roa
Signing time: Mon 02 Jan 2023 11:54:55 +0000
ROA not before: Mon 02 Jan 2023 11:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48623
IP address blocks: 81.4.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:ad:1c:00:f3:21:c2:e5:7e:09:ba:2c:1c:d7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf16adffc6b19c227e44e956516912e0acdec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:e5:0a:4c:58:47:47:e8:2e:b2:63:4c:21:
5a:4f:d0:27:55:e1:2a:fc:b2:90:12:0b:ff:34:a2:
f1:44:ef:34:3f:4f:8c:65:f2:96:9b:6d:f1:98:65:
d7:40:b7:bf:e3:de:c1:c4:af:70:31:ec:b7:97:80:
a6:c4:a3:3d:82:f1:56:03:9f:af:7a:a0:4d:09:3d:
65:0f:17:15:42:f3:73:d4:21:d4:4a:f2:44:38:91:
7e:46:58:72:14:7d:f9:bc:ad:77:5c:48:a7:b4:77:
5e:1e:94:94:ca:6c:ed:85:d1:75:20:1a:5d:b8:b7:
87:ff:f5:22:9e:af:2e:50:c3:ee:8a:68:28:aa:0b:
00:3c:3b:6b:ff:a7:3b:d6:65:9f:7b:c7:63:11:05:
59:24:9c:be:f7:c7:6a:9e:64:98:ea:8e:d7:7a:e7:
70:a0:9c:61:85:f9:3b:74:4e:18:d3:2d:59:b0:51:
f7:62:67:21:68:38:be:c6:47:23:eb:9b:75:fd:f5:
e6:50:70:59:05:fe:33:bb:08:53:a6:60:be:8a:a2:
54:14:77:34:b3:1a:a4:1c:5f:60:da:2b:10:c3:79:
4c:6b:d2:66:69:48:23:1e:8d:c4:70:04:a9:bc:1a:
07:d6:3d:93:87:0e:4a:b7:73:e1:a6:ba:58:15:24:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F1:6A:DF:FC:6B:19:C2:27:E4:4E:95:65:16:91:2E:0A:CD:EC:3E
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/i_Fq3_xrGcIn5E6VZRaRLgrN7D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:da:25:8e:14:52:d5:1a:0f:57:32:b8:d1:40:96:7d:b4:08:
c7:8d:b8:2b:e3:e2:fe:95:87:29:70:ca:1b:f5:ef:9e:ce:19:
5f:00:57:e7:40:0c:68:c3:ff:0c:93:87:ba:38:6c:9d:c5:99:
62:34:78:35:c2:f6:95:0c:29:c8:04:57:3c:61:b7:f1:47:e1:
b9:11:d1:36:29:0d:4d:0e:79:cf:ad:e5:a5:89:5a:30:78:91:
b3:44:61:8e:6e:b2:c0:4f:18:d5:22:d6:b0:65:ae:4f:25:49:
af:0b:6f:48:c0:0d:dc:86:45:24:bd:b8:8c:ff:bc:dd:02:ef:
cd:50:7b:63:4f:61:b9:7d:ab:03:7e:34:3b:8e:93:a9:f8:af:
9c:86:91:60:13:93:1d:d4:d3:16:56:a2:39:2f:5e:70:88:b6:
f2:6c:61:f0:8d:4c:7e:83:e1:ac:04:6e:b4:33:c0:72:2b:6e:
12:c9:52:24:ee:e2:a1:99:4d:76:96:2e:b1:6d:7b:11:1a:d6:
e8:b1:c0:86:6d:aa:6d:d9:33:a5:5d:84:90:a9:b2:85:9d:1c:
ea:e7:3f:3c:de:d3:d2:a1:2b:da:f5:37:db:62:bf:eb:f8:dd:
1e:6e:9d:82:b6:4a:70:ed:07:af:b4:ec:f9:47:d7:bf:c0:cc:
6f:c7:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org