Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/GA3iY1IHQHN1BaADjJ4nSFO7t_A.roa
File: GA3iY1IHQHN1BaADjJ4nSFO7t_A.roa (raw, json)
Hash identifier: mN4EJyKlsg/Mk1q16/y9Reuogj60w8SaWH6dlT+LbNc=
Subject key identifier: 18:0D:E2:63:52:07:40:73:75:05:A0:03:8C:9E:27:48:53:BB:B7:F0
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 018B4CCBF1ECA5093ECA06DD13BC496D9299
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/GA3iY1IHQHN1BaADjJ4nSFO7t_A.roa
Signing time: Fri 20 Oct 2023 11:15:16 +0000
ROA not before: Fri 20 Oct 2023 11:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205467
IP address blocks: 81.171.62.0/24 maxlen: 24
81.171.60.0/24 maxlen: 24
81.171.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:cb:f1:ec:a5:09:3e:ca:06:dd:13:bc:49:6d:92:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Oct 20 11:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=180de263520740737505a0038c9e274853bbb7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:d6:eb:06:07:3b:da:ca:7f:83:5d:5d:bf:
0a:f7:e6:4f:a2:73:43:c6:2a:7e:2f:60:0c:47:ce:
3d:5b:91:b5:e4:5d:bf:9d:d8:bd:39:e0:97:f8:b8:
6d:c8:10:8b:78:10:68:39:a2:96:60:4e:e5:5c:88:
e8:53:8c:16:7d:7c:82:63:1b:91:86:73:a1:47:00:
7c:5a:61:1a:6d:e8:4c:70:15:36:cf:6f:97:01:cd:
04:c4:9f:3c:bf:e3:a3:6f:af:08:03:00:1f:f0:8a:
96:23:e5:12:d2:6c:c1:2b:f3:f6:65:89:f5:ee:a9:
b7:da:7c:f6:58:f8:37:dc:eb:d5:9d:3e:e3:a8:08:
4a:70:64:a5:b1:8f:dc:25:c0:5f:8e:6d:50:0b:6c:
f4:a8:e1:c7:30:24:75:00:60:54:a1:ca:89:48:e2:
f7:c0:04:61:a3:1e:2d:41:e2:10:aa:27:60:56:87:
72:c5:49:6e:05:4b:2a:29:cf:ca:5e:7a:c4:be:a7:
cc:03:e1:f8:31:67:02:49:d4:03:cf:b3:c0:0c:d2:
02:20:78:cd:1e:df:d4:05:fd:b8:a4:bd:ae:73:fa:
bb:a7:70:15:a6:f8:9b:84:28:1c:a3:11:63:e8:0f:
1a:67:79:8a:24:53:c3:0f:f7:ab:2a:c1:93:41:85:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:E2:63:52:07:40:73:75:05:A0:03:8C:9E:27:48:53:BB:B7:F0
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/GA3iY1IHQHN1BaADjJ4nSFO7t_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.60.0/24
81.171.62.0/23
Signature Algorithm: sha256WithRSAEncryption
00:44:74:d1:6c:82:cd:69:2f:33:0e:dc:aa:87:d0:fd:18:d0:
10:c7:f5:9e:e5:04:45:70:bb:ac:01:59:a2:4f:f3:df:a8:3a:
81:21:e5:14:65:38:64:4a:43:c9:fe:a0:d7:5e:ee:c2:cc:b6:
8c:40:d8:bf:d0:b5:6a:a4:8d:31:8a:ae:29:3b:11:18:5d:06:
e4:1b:6a:0c:7b:6e:63:09:84:b6:86:80:c5:97:ba:6e:06:26:
55:f9:85:aa:b9:33:b8:c1:01:2d:c7:54:8e:82:d1:1f:87:39:
cf:cf:c4:ad:e4:de:78:d4:29:1e:ca:e6:85:51:ec:88:66:95:
98:e2:f4:72:14:8d:ba:0d:be:2e:45:f2:d1:3b:e8:87:ba:60:
15:32:a9:c1:bd:a3:98:1c:bd:93:0c:26:92:ca:53:87:85:ec:
13:13:f2:e6:6f:ed:b3:99:dc:8e:d8:61:8e:dd:d9:03:f8:a4:
b6:93:7d:6a:72:92:ac:92:dd:00:48:bc:72:8a:84:aa:f6:40:
14:56:61:8c:0f:57:6f:0f:48:c9:70:e9:05:85:62:0c:59:e8:
f8:f1:c3:20:9c:cc:10:38:54:b3:cf:97:1c:66:1f:cd:c3:dc:
01:93:81:cc:d7:5b:7b:77:46:a8:6c:28:b4:da:e0:d2:a4:ad:
e6:67:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:17 2024 by rpki-client on console-ams.rpki-client.org