Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SBK0VIud7F28jOF3-i47ur32jOc.roa
File: SBK0VIud7F28jOF3-i47ur32jOc.roa (raw, json)
Hash identifier: egnZLuYT6zA4hatnR+s8bkT8z5hZD379mSStsZmtgNY=
Subject key identifier: 48:12:B4:54:8B:9D:EC:5D:BC:8C:E1:77:FA:2E:3B:BA:BD:F6:8C:E7
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186CC02FEECA9F5C0FA80ED8F084033EC2B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SBK0VIud7F28jOF3-i47ur32jOc.roa
Signing time: Fri 10 Mar 2023 14:53:13 +0000
ROA not before: Fri 10 Mar 2023 14:53:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202104
IP address blocks: 81.25.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:02:fe:ec:a9:f5:c0:fa:80:ed:8f:08:40:33:ec:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 14:53:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4812b4548b9dec5dbc8ce177fa2e3bbabdf68ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:98:e3:e5:f7:75:b3:fe:7b:00:1d:c5:c4:
41:b2:87:bb:3a:ab:db:e1:03:1c:c1:6b:f2:b3:d4:
67:6d:9a:28:61:d1:25:80:af:86:a8:91:4b:8c:25:
6c:83:8a:bd:d3:2f:b5:ae:cb:1f:32:9f:b8:d0:15:
e5:a2:b5:94:78:a5:c9:81:04:c1:d4:3a:85:27:71:
b5:55:18:1f:aa:6a:98:9e:95:29:23:1c:5f:51:04:
c6:7e:5c:08:e2:2c:61:5d:81:dc:bc:10:ec:ee:e1:
2a:7a:23:3f:9f:78:f1:87:47:ef:39:da:e2:ec:53:
8e:78:73:ef:8f:1d:b1:5b:1e:91:9b:8b:bb:7e:0a:
88:03:de:e3:46:66:96:87:e0:9b:d1:47:35:28:e1:
92:2f:04:6d:ae:79:1a:5a:89:7d:31:57:b4:42:2a:
35:ff:8d:45:ad:12:d8:25:92:10:5b:4f:c4:80:16:
33:a8:23:60:7e:8b:ee:2c:d8:f0:0f:ee:13:ff:8b:
b3:ea:d1:cd:e7:36:8e:15:1b:1e:83:a4:e8:34:dc:
1b:4f:60:dc:53:57:13:83:00:df:78:32:fe:13:1c:
09:0c:b7:9e:27:a3:a7:49:9c:64:4b:f0:6a:db:79:
8f:7e:90:b7:3e:96:09:1b:d9:6d:9f:de:4e:f6:d6:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:B4:54:8B:9D:EC:5D:BC:8C:E1:77:FA:2E:3B:BA:BD:F6:8C:E7
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SBK0VIud7F28jOF3-i47ur32jOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.70.0/24
Signature Algorithm: sha256WithRSAEncryption
92:80:c0:c9:b8:7d:cd:5b:40:0b:c3:0f:d7:2a:4d:ea:0b:cd:
c4:63:9a:f6:65:6d:8c:ff:ae:a6:a8:f6:5e:c2:03:82:73:62:
cf:e0:1a:d7:df:19:a9:63:97:02:14:19:2e:f1:1a:9e:7e:39:
5d:5e:21:1a:fa:6f:5a:64:97:1c:0e:1f:b6:08:6a:c4:59:5e:
06:3d:13:6f:19:3d:cf:94:a6:e3:a3:8b:0b:90:2a:76:cf:6f:
14:a4:8a:5f:8a:f9:b4:46:ed:0e:4c:7c:9b:24:8f:ba:d4:de:
24:b6:3f:5f:bf:1b:4e:82:d9:a1:b4:d5:47:4c:dc:d2:bd:b0:
9b:d2:11:fd:14:93:b1:65:69:27:0f:8c:78:b1:65:18:d4:71:
74:75:2d:01:4a:06:ef:ff:c3:d7:ed:e5:30:01:41:ff:1b:bc:
76:d9:f6:2e:e4:27:92:52:af:0d:89:a1:a1:74:db:c5:d5:b7:
f9:f6:cc:ab:8e:b6:c6:f2:13:5b:30:45:c4:84:4d:d2:19:e4:
75:01:d0:dc:9a:ca:ac:3c:30:bc:9f:ee:92:e4:92:ed:9b:94:
75:3c:3f:d2:c6:13:9a:da:a1:d4:76:e0:7c:26:3d:c4:1a:3c:
8c:62:be:f4:89:ea:8c:da:f1:ce:c0:c2:c8:97:5d:b2:2b:69:
a7:ee:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org