Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/CBprg7Zv8CDbbUrWO4PLLu2ESHw.roa
File: CBprg7Zv8CDbbUrWO4PLLu2ESHw.roa (raw, json)
Hash identifier: j7mVa4gSk7nM7eo+VATUAzotp+l8IRfKmfcr8s0NXx0=
Subject key identifier: 08:1A:6B:83:B6:6F:F0:20:DB:6D:4A:D6:3B:83:CB:2E:ED:84:48:7C
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 01856FA712945A83C9D80BDFC122C8B9F19D
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/CBprg7Zv8CDbbUrWO4PLLu2ESHw.roa
Signing time: Sun 01 Jan 2023 23:24:58 +0000
ROA not before: Sun 01 Jan 2023 23:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 81.31.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:12:94:5a:83:c9:d8:0b:df:c1:22:c8:b9:f1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Jan 1 23:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=081a6b83b66ff020db6d4ad63b83cb2eed84487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:2e:2e:22:3e:03:09:92:50:f1:17:a1:e5:
ea:2d:b2:92:49:be:04:b6:37:d7:43:18:9d:8d:04:
2a:f9:e1:9e:4b:ad:be:26:e5:d1:f5:54:f6:e2:1e:
99:d3:ef:1e:56:05:d3:93:69:9e:62:1c:83:8b:ce:
08:ad:cb:02:57:b7:35:0c:8b:ad:f1:fe:d9:d2:c4:
f9:e4:28:a7:cb:5b:96:da:cb:2e:6b:ca:f3:4c:6a:
e3:f5:5c:58:1f:8a:27:ad:28:69:46:80:c4:62:1a:
ac:91:85:f7:ef:81:4f:51:71:e9:e3:7a:a9:72:49:
ca:bf:6b:19:2c:0e:50:47:52:9e:95:eb:3e:08:ab:
f8:ba:a7:77:22:e6:0c:14:a6:32:41:50:57:35:c4:
ed:1a:9b:bf:b6:8d:21:92:8d:fe:5b:4c:44:23:47:
e8:d9:66:ea:e1:9a:93:c0:45:e4:28:f8:14:38:52:
7a:68:07:1b:75:95:46:63:af:71:58:f3:ee:60:e8:
08:38:89:09:23:3d:ce:1f:5a:b8:58:78:e5:b2:11:
d5:2f:aa:c6:15:1a:0d:fe:9c:7b:67:3e:8c:41:4c:
87:a1:1f:de:5b:08:fe:35:0e:d2:34:41:0a:fb:c6:
99:41:12:3b:53:26:c5:ca:9f:cb:c2:21:62:80:25:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:6B:83:B6:6F:F0:20:DB:6D:4A:D6:3B:83:CB:2E:ED:84:48:7C
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/CBprg7Zv8CDbbUrWO4PLLu2ESHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:65:08:45:4e:dc:81:30:2f:83:63:d6:75:67:d1:6d:45:14:
d8:78:2b:6e:e4:48:31:9c:bd:e4:5a:78:7a:5f:44:41:bb:b6:
d8:3d:34:59:89:8d:ba:bb:02:87:49:cf:30:6b:3a:91:d6:e7:
3e:94:98:1e:d4:9d:03:e5:d8:3c:7a:3a:98:30:4d:32:d6:0b:
11:9d:7b:19:01:5c:73:92:de:8b:25:d4:53:c6:7f:ee:e7:99:
d1:c0:a9:17:9b:b9:0f:1f:1c:e7:bf:86:1d:9b:fc:4c:24:fd:
0d:d4:7e:de:e4:27:af:21:f6:c3:83:14:6b:1d:fe:c9:3d:81:
5e:b1:bd:28:9a:a4:66:58:15:0d:78:16:86:ab:d4:3b:c4:94:
29:80:9d:98:f5:05:9e:48:49:d6:e9:1f:33:36:80:27:40:66:
3e:f7:cc:bd:36:2d:d7:21:5b:52:03:5c:cd:37:0e:1e:89:be:
67:8c:08:e3:02:83:10:c5:51:82:2c:d9:c8:33:eb:88:4c:69:
56:65:de:cf:93:3b:51:2c:c1:7b:69:a0:dd:93:09:f2:3e:86:
8d:b7:9b:c2:a2:48:ab:d3:51:bb:5d:85:97:67:57:66:78:17:
af:1f:4c:b9:d7:ca:b8:79:3b:1c:4a:03:b6:5a:89:68:25:9d:
53:06:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:42 2024 by rpki-client on console-ams.rpki-client.org