Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/2GsjXbBrcDPQTj9dMYzCzyxNJks.roa
File: 2GsjXbBrcDPQTj9dMYzCzyxNJks.roa (raw, json)
Hash identifier: VURcjjhGIWzZUy7MQDAA+T4cYWHbz4UjHTpnCsE/XLE=
Subject key identifier: D8:6B:23:5D:B0:6B:70:33:D0:4E:3F:5D:31:8C:C2:CF:2C:4D:26:4B
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 01856F8B81E63B0E2130A02BACDAA4140E41
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/2GsjXbBrcDPQTj9dMYzCzyxNJks.roa
Signing time: Sun 01 Jan 2023 22:54:51 +0000
ROA not before: Sun 01 Jan 2023 22:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3274
IP address blocks: 81.20.224.0/20 maxlen: 24
2001:67c:110::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:81:e6:3b:0e:21:30:a0:2b:ac:da:a4:14:0e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Jan 1 22:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d86b235db06b7033d04e3f5d318cc2cf2c4d264b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:33:be:77:cf:12:65:52:16:7b:d9:e4:29:
97:67:35:a2:ca:2a:70:76:51:5f:69:5e:a7:02:6d:
06:51:d6:17:f4:cd:54:e1:37:20:da:9a:bc:93:3c:
7d:05:4f:79:67:bb:25:4a:7a:78:76:70:03:e7:09:
dc:aa:43:64:51:01:1c:80:1f:a2:d9:77:78:66:07:
c0:94:16:f8:42:44:62:b5:f4:34:18:0c:e1:37:12:
b0:db:9a:01:3c:f9:49:c1:c6:7f:1d:90:34:4a:f5:
48:98:64:6e:e9:db:96:be:c8:e3:e9:2c:46:50:f0:
00:f6:15:39:1e:1d:21:bb:ea:f1:5a:89:d7:86:19:
de:f7:aa:1a:80:49:10:82:46:f9:d4:da:fe:3d:f3:
a1:82:d9:d6:37:a6:6c:ab:f1:f2:f4:87:1a:3a:16:
23:fb:c3:b4:07:59:0a:c0:52:15:0e:d9:48:58:0e:
82:93:3f:28:41:8d:3b:95:84:87:f5:fc:eb:6b:ee:
a4:1f:b5:3a:13:03:16:73:63:78:88:56:ce:1e:db:
f2:ab:99:30:af:1b:3e:60:48:f6:84:43:f2:c4:70:
ae:5e:11:c2:a4:6e:03:9c:cd:fc:0b:11:90:cb:ed:
06:e1:9c:85:cb:d5:ca:f8:3e:72:b9:c0:34:1e:ac:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:23:5D:B0:6B:70:33:D0:4E:3F:5D:31:8C:C2:CF:2C:4D:26:4B
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/2GsjXbBrcDPQTj9dMYzCzyxNJks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.224.0/20
IPv6:
2001:67c:110::/48
Signature Algorithm: sha256WithRSAEncryption
18:89:e2:6d:c8:e7:3c:42:0a:c7:fb:81:30:02:e7:a1:4b:22:
93:e6:49:2c:9e:89:f6:62:46:54:dc:a9:92:49:bd:32:79:1f:
d1:6f:99:b2:00:e1:d7:75:63:6d:f5:f5:7f:45:e0:36:9c:ab:
e4:c4:d8:c8:fc:c2:81:68:db:a7:75:b0:a3:1d:9b:25:d1:a6:
d9:fd:f6:a3:36:18:49:ce:dd:2b:c7:f8:14:b7:02:f3:6a:6c:
69:0c:0b:7e:a3:7f:89:e9:6e:2a:9d:5b:18:ad:e5:34:45:01:
1e:68:99:21:4d:c6:75:76:3b:f4:7c:12:b9:13:de:72:5d:18:
4f:ca:16:1e:a7:e1:13:68:3f:5d:f7:a2:c3:83:94:ac:9b:d1:
dc:e5:40:43:76:73:21:d7:66:b4:66:a1:aa:c6:f9:b4:2b:c1:
fd:07:36:e8:d1:52:3f:f0:51:d0:cb:87:45:1b:80:6d:07:48:
98:2f:e6:ad:71:a4:f3:a2:6f:b2:ef:5c:fb:dc:41:f5:bb:9e:
5c:47:b7:73:cf:c4:0c:df:9f:02:94:b0:9d:4a:93:6c:2e:74:
42:ee:19:12:1b:4b:37:68:7e:5d:ea:d8:fb:4a:31:42:16:ce:
a7:26:37:5b:04:a4:21:60:59:41:0e:94:21:0b:12:dd:ad:dd:
80:42:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:32 2024 by rpki-client on console-ams.rpki-client.org