Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/9awWxlc7HPd2xHbJdmOQjfCGm5M.roa
File: 9awWxlc7HPd2xHbJdmOQjfCGm5M.roa (raw, json)
Hash identifier: bGK/WwmHpogENoLJQ47V0bdhCnq3T9KxdDyqC1NagjA=
Subject key identifier: F5:AC:16:C6:57:3B:1C:F7:76:C4:76:C9:76:63:90:8D:F0:86:9B:93
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 0187FC436BA93EED9D0F7B1A9E3B72E8776B
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/9awWxlc7HPd2xHbJdmOQjfCGm5M.roa
Signing time: Mon 08 May 2023 16:48:09 +0000
ROA not before: Mon 08 May 2023 16:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42905
IP address blocks: 81.163.216.0/21 maxlen: 21
81.163.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 05 Dec 2023 15:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:43:6b:a9:3e:ed:9d:0f:7b:1a:9e:3b:72:e8:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: May 8 16:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5ac16c6573b1cf776c476c97663908df0869b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:93:c4:b4:2d:23:62:a6:45:01:bc:b2:f2:
8f:b3:b3:25:32:10:1e:7d:c8:ec:be:36:4d:c1:39:
da:7b:cf:8c:45:1e:3f:9b:d6:44:36:2a:9a:af:c1:
4b:4b:88:92:08:05:df:0b:6e:02:70:44:ef:81:f2:
a3:63:26:74:82:4a:3f:22:44:43:a9:dc:5c:b4:93:
9c:02:d7:98:f4:78:26:56:80:96:eb:9a:5c:02:35:
75:c3:53:e6:47:e7:dc:39:7f:22:88:27:6a:6b:45:
a4:60:58:41:2d:7f:97:c1:10:95:c4:03:26:3c:0a:
73:68:1c:e6:8e:48:74:34:8f:6d:c9:7d:6c:61:72:
e7:e2:50:ca:17:a1:5d:dc:87:16:37:c8:45:d3:00:
b2:2f:c8:7e:7f:30:da:a5:a8:31:c9:ae:57:28:d6:
71:3f:25:67:8b:c5:a8:69:28:14:ea:0a:70:c0:d7:
2b:c5:dd:13:a5:26:59:52:6a:6a:0d:c9:2e:1f:0c:
10:76:c6:bc:f1:b9:30:4a:57:55:26:93:1a:db:d5:
0a:44:9e:1d:f5:49:71:d0:62:6f:d4:54:85:3d:9c:
9c:89:9a:fb:fe:f0:2d:0e:c2:42:37:1a:3c:90:ff:
da:37:b2:47:05:11:eb:7a:be:96:be:a3:6a:1b:9d:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:16:C6:57:3B:1C:F7:76:C4:76:C9:76:63:90:8D:F0:86:9B:93
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/9awWxlc7HPd2xHbJdmOQjfCGm5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.216.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:4d:56:2f:af:59:15:58:fd:a5:35:ae:67:c3:a9:26:22:7f:
04:32:48:92:fd:87:51:47:07:1f:04:5b:1e:7b:15:58:97:f9:
af:95:84:b8:54:c0:73:76:7b:96:7a:0d:1a:9a:4e:a5:f4:3d:
0f:c9:32:b6:fa:fb:85:a7:ff:58:65:47:48:d0:f1:7f:93:b0:
c5:8f:d4:73:2d:a7:5e:6d:f4:0d:66:c5:ca:76:ed:6d:5e:74:
83:6e:8d:7e:24:40:ca:49:01:8e:0f:99:01:66:8f:89:37:33:
35:d1:43:6f:2d:83:e7:7f:49:d2:e1:3b:6f:0d:1c:75:1f:19:
d3:58:b1:91:66:df:87:19:30:b2:f1:de:33:7d:dc:b5:e4:11:
54:2f:8c:ce:f6:a2:83:c4:f6:9e:e8:c0:02:a5:cf:9f:ff:47:
b9:11:b2:17:02:8a:44:fc:87:f7:10:96:58:13:6e:2a:25:0f:
13:03:3d:32:43:3f:d4:3b:45:c7:28:e6:1d:75:65:65:11:9e:
17:1f:4d:07:ed:7c:c7:49:50:89:68:0c:ee:36:8e:ce:cb:19:
3b:1b:0c:5a:cf:55:3b:e8:9e:80:98:cc:8b:d1:97:9a:00:9d:
b5:dc:c2:3b:2c:f0:de:65:90:fa:1c:4e:f5:20:9c:68:ff:a7:
68:53:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org