Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/0cR4vosb7dZoy8_fNyWSC_rQeB8.roa
File: 0cR4vosb7dZoy8_fNyWSC_rQeB8.roa (raw, json)
Hash identifier: 7Cp9EN306CdhDBsdmcR0xrUGk8kiKN76SsoAKZtE/vI=
Subject key identifier: D1:C4:78:BE:8B:1B:ED:D6:68:CB:CF:DF:37:25:92:0B:FA:D0:78:1F
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 01915C3BB79F13500425159B19139056F683
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/0cR4vosb7dZoy8_fNyWSC_rQeB8.roa
Signing time: Fri 16 Aug 2024 17:28:23 +0000
ROA not before: Fri 16 Aug 2024 17:28:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57242
IP address blocks: 81.163.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 07:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5c:3b:b7:9f:13:50:04:25:15:9b:19:13:90:56:f6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Aug 16 17:28:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1c478be8b1bedd668cbcfdf3725920bfad0781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:a3:82:e6:46:73:95:45:cc:1f:09:3d:0e:
06:32:26:b6:b0:bb:e5:b7:fd:90:65:f5:db:b1:12:
16:db:6a:5b:7b:16:04:71:64:3c:49:8e:f4:7f:d7:
ca:ce:60:ae:03:cf:26:38:ad:fe:92:0e:76:17:e6:
2a:66:b8:02:46:1c:bb:7f:4b:cd:1f:9c:10:e4:77:
0a:10:e0:92:94:53:34:e4:0f:5b:05:ad:2b:38:d5:
24:a3:cc:c1:15:53:db:31:4d:fc:c7:19:fd:e5:f7:
9c:ef:9d:b0:51:89:fc:29:84:f2:8c:aa:f8:15:b6:
a0:c9:05:af:19:2a:59:0b:55:f0:82:27:7f:3b:30:
b4:d6:73:72:20:92:cb:f1:ee:f0:b1:23:1e:19:15:
8d:45:8a:26:67:c6:ee:bb:1c:67:c4:e8:c4:f1:e8:
f7:b5:e3:a4:67:c5:d5:5b:bc:ea:32:ea:f7:6f:b8:
0f:32:8f:5a:b1:4c:e0:f0:37:e0:60:af:14:33:3d:
7c:63:cd:69:b5:ff:ab:3b:c6:49:75:f7:6c:29:6b:
3c:ff:fc:50:f0:4d:bd:d4:cc:2f:d7:3e:d1:51:3e:
06:ca:3d:3d:46:59:62:dc:e0:0d:e5:30:02:fb:0f:
6e:33:d7:82:e1:a1:20:a8:70:8e:65:d0:14:c3:ad:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C4:78:BE:8B:1B:ED:D6:68:CB:CF:DF:37:25:92:0B:FA:D0:78:1F
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/0cR4vosb7dZoy8_fNyWSC_rQeB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.214.0/24
Signature Algorithm: sha256WithRSAEncryption
08:17:28:42:cf:6c:25:d6:5c:8d:21:a5:8d:28:b1:79:71:1a:
61:4a:b4:62:7a:ac:e5:25:f0:16:5b:48:65:30:4f:44:ca:9e:
8d:1f:c2:97:15:b3:9d:4d:22:8a:67:5e:6f:3a:64:e5:86:1f:
d5:65:0a:f0:ea:20:cd:1f:e6:c1:c6:a8:e1:fb:c3:00:f2:70:
a2:c0:e3:f1:8a:66:38:5e:db:dd:0f:27:ea:83:90:75:3f:bb:
74:5c:bc:73:72:c0:18:4b:59:27:9d:3c:08:0b:99:47:fe:95:
86:83:b9:8e:9c:48:6b:d1:8d:65:e4:0a:66:4f:3f:c7:09:d2:
be:ac:dc:20:fa:12:4e:7c:f0:b4:df:a9:6d:5c:bb:18:b9:59:
9d:36:38:df:8f:44:a3:ed:90:91:27:4c:bd:54:af:43:e5:04:
61:e0:b9:1e:d4:e4:ec:a3:3e:dd:3b:8f:2b:21:08:b6:93:a0:
0d:18:fa:3c:9f:4a:01:a2:f8:a9:6f:c3:24:1b:2a:fb:8e:4e:
44:97:6d:9e:3c:19:94:4b:90:21:4e:78:7b:8c:c5:2e:60:3b:
e1:0c:16:91:0d:c8:cd:a5:9f:10:95:64:8e:62:f2:d3:cf:4f:
04:ef:57:e1:fb:d0:6c:12:a7:af:ac:17:a8:ec:a3:b4:9b:d7:
15:3f:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:52:53 2025 by rpki-client