Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/j2rGuq_VRvBZMIUilf4ITOxF0ec.roa
File: j2rGuq_VRvBZMIUilf4ITOxF0ec.roa (raw, json)
Hash identifier: H81zMWGgCdHB6vCxYleC8icTYl+mCYt5ajGqnusbDQU=
Subject key identifier: 8F:6A:C6:BA:AF:D5:46:F0:59:30:85:22:95:FE:08:4C:EC:45:D1:E7
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 018655917721A434B97019828771151F1A69
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/j2rGuq_VRvBZMIUilf4ITOxF0ec.roa
Signing time: Wed 15 Feb 2023 14:54:01 +0000
ROA not before: Wed 15 Feb 2023 14:54:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209369
IP address blocks: 81.0.223.0/24 maxlen: 24
77.78.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:91:77:21:a4:34:b9:70:19:82:87:71:15:1f:1a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Feb 15 14:54:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f6ac6baafd546f05930852295fe084cec45d1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:31:96:4a:99:8c:f3:6c:91:0d:45:79:1b:
7b:c4:a4:a8:fa:e9:a4:bd:11:ca:e4:f9:e9:f0:cd:
23:06:86:a8:8b:51:b5:b6:be:6c:54:b4:98:73:8f:
a9:b1:fd:a9:67:be:0c:d9:5a:8a:e8:bb:b6:64:28:
95:ec:53:0e:7b:36:99:31:9d:b2:cc:42:5b:4b:df:
c9:21:80:c6:b9:a4:fd:d2:ab:0e:f9:e9:de:e3:38:
55:de:ff:80:f9:cd:7c:2f:8d:f6:68:87:7f:82:f0:
cb:cb:4f:f1:fd:2f:48:ed:a2:b8:cb:03:2a:1e:2d:
e5:88:44:02:15:21:c3:43:3d:74:24:2f:42:e6:6a:
ca:32:41:51:ea:ff:e0:1f:24:0e:3c:34:31:18:7e:
94:42:a3:40:ac:8a:35:e7:0f:2a:05:86:c0:09:39:
98:5a:d0:61:1d:b8:bf:a3:58:1d:62:d8:87:77:03:
b5:95:71:27:85:2e:46:d1:24:87:64:fa:54:04:c8:
a4:ca:22:de:ab:7a:35:6b:40:e3:35:c2:6f:5d:22:
a2:3b:a6:1b:07:43:4f:96:77:fb:37:9b:a7:9a:9c:
c8:a2:0c:6d:c1:71:9f:ed:53:06:b0:21:b1:52:24:
79:7b:25:5a:5a:9b:84:5b:12:35:a5:fb:9a:49:55:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6A:C6:BA:AF:D5:46:F0:59:30:85:22:95:FE:08:4C:EC:45:D1:E7
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/j2rGuq_VRvBZMIUilf4ITOxF0ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.90.0/24
81.0.223.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d7:d0:42:5a:9c:73:f7:de:d3:90:00:da:96:c2:0e:40:60:
d5:12:8f:9f:9c:71:e8:b6:90:f8:09:55:36:fa:5f:11:6d:a4:
ec:d2:46:0c:8d:79:61:07:e4:f2:0b:c5:8e:2a:15:30:9b:a7:
7a:72:5f:ca:ac:25:a1:52:72:e2:f3:c4:91:87:fd:30:83:2f:
d3:3c:00:ca:7a:c7:ea:7d:80:19:ed:cc:68:db:84:6c:e5:5d:
3f:60:16:db:2c:22:4c:00:50:a8:de:53:1b:0d:ac:0e:00:82:
a1:88:d1:1a:bd:d1:36:79:fc:1e:08:90:40:5b:91:78:d2:13:
79:80:3e:c0:cb:a3:e5:dd:56:13:ee:bd:a2:3e:54:52:d0:5e:
a8:ed:f9:27:1f:e4:58:28:cc:5e:b7:c5:4b:86:95:eb:f4:c3:
74:63:76:e2:d8:1d:d2:7f:1f:17:d6:3f:0b:d3:39:32:c7:ac:
8b:51:26:69:72:5b:ea:8b:6a:b7:e6:4f:e5:8c:09:68:06:dc:
3c:94:f3:19:7a:6c:2f:b0:09:29:d2:46:c2:e0:b5:3d:bc:34:
52:e4:6a:5d:2e:99:c0:97:6c:fa:08:00:7f:7e:4f:fb:10:a9:
ed:e5:fe:b2:96:07:03:7f:b2:90:97:2b:f3:08:cd:e6:58:45:
ba:20:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:07 2024 by rpki-client on console-fra.rpki-client.org