Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vayMFRqixxePKd4U6X56Criouxs.roa
File: vayMFRqixxePKd4U6X56Criouxs.roa (raw, json)
Hash identifier: RIHdiOTEt3XlB6CgFyUfNCl1TszqTM/U9Nyg1RcpWmA=
Subject key identifier: BD:AC:8C:15:1A:A2:C7:17:8F:29:DE:14:E9:7E:7A:0A:B8:A8:BB:1B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F03A2D58B78F742BD208B8A68545
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vayMFRqixxePKd4U6X56Criouxs.roa
Signing time: Sun 01 Jan 2023 19:35:26 +0000
ROA not before: Sun 01 Jan 2023 19:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56679
IP address blocks: 81.3.154.0/24 maxlen: 24
84.204.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f0:3a:2d:58:b7:8f:74:2b:d2:08:b8:a6:85:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdac8c151aa2c7178f29de14e97e7a0ab8a8bb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:0e:c1:1f:93:3f:58:42:5c:ba:85:60:c9:
8b:14:9b:1f:0f:80:0c:32:39:73:c4:05:2b:08:68:
e9:79:27:a2:3b:ca:44:06:db:ce:f2:2a:62:b6:62:
f5:95:3e:f7:d1:2c:66:47:76:24:3e:ae:7b:8d:10:
2c:c1:eb:15:66:36:32:20:4e:d9:11:9d:95:3d:8b:
f4:34:4a:87:2b:79:93:15:ee:37:0d:48:d0:39:09:
de:2b:c2:d8:72:ec:2d:b3:53:e3:c7:5b:0f:1f:5c:
5c:fa:9e:8f:22:c0:eb:93:22:20:30:79:15:12:3b:
98:3f:3b:f1:e3:7d:ac:7b:3b:29:2e:9b:ba:12:f1:
30:4f:87:24:1b:f2:72:99:1e:0a:6a:42:9b:ce:e3:
71:92:f9:15:74:e6:d1:e1:51:0c:bc:ee:a2:74:59:
c2:60:2e:42:33:68:6f:2d:fb:2e:a0:ac:c7:ce:36:
e7:a7:88:f0:3d:89:42:f4:0e:84:16:ec:a2:b7:b6:
36:04:4b:68:0d:9c:0f:5e:f1:9d:96:82:2e:4c:90:
70:3f:68:1e:98:8b:af:d3:b1:f1:df:3f:60:d4:9f:
6b:82:3f:e4:8a:c7:14:67:1b:a6:c1:ef:9e:63:7f:
cf:f1:ff:35:7a:bf:ae:e4:e6:7f:06:76:7a:57:eb:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AC:8C:15:1A:A2:C7:17:8F:29:DE:14:E9:7E:7A:0A:B8:A8:BB:1B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vayMFRqixxePKd4U6X56Criouxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.154.0/24
84.204.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d8:ce:bb:40:b3:61:89:c9:9b:3a:a8:03:96:6f:e0:ef:46:
de:29:10:ab:87:b4:da:e0:05:f3:87:3f:31:45:f9:ec:aa:a3:
1f:8d:e7:81:e2:6c:78:d7:61:03:71:ec:83:27:26:2d:17:93:
f1:d3:c9:d2:bf:40:9c:02:2b:08:62:66:6b:07:80:8d:ad:e5:
c5:fe:55:4b:4c:39:11:1c:3b:5e:1c:46:3c:40:36:d4:5f:8b:
59:62:6b:ce:8e:9f:d4:7d:12:9a:d7:a1:67:04:4f:44:09:75:
8a:a2:58:fe:e1:8c:62:0c:e7:eb:e5:f0:a1:73:eb:f0:ce:f0:
61:57:d6:78:83:62:93:38:3c:18:48:59:33:04:5b:3a:53:e7:
68:ae:4c:b9:9b:4f:88:36:c3:49:f2:08:ee:52:da:57:f4:1d:
ec:c5:67:a1:52:31:36:75:93:b2:d5:c5:25:a9:cc:60:2e:9c:
13:ad:05:e7:ee:02:e0:32:b3:42:68:26:e5:c3:c0:99:02:72:
95:b2:5d:25:e3:ae:58:fd:20:e0:2d:47:20:f9:28:17:b9:c4:
ad:a6:a4:91:c2:ec:ae:b1:a0:48:05:2e:c7:35:5b:5f:65:f5:
b7:72:5a:f4:ad:21:69:e5:f9:f2:ad:08:3b:f6:d7:df:fa:bc:
bc:7b:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org