Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/TDRcDOl7xlWLc_wGkP19SrDQPoY.roa
File: TDRcDOl7xlWLc_wGkP19SrDQPoY.roa (raw, json)
Hash identifier: axW+Oq9uH2Uc5fmqy9aSE4KZdFeGeJKw7VlS1VSewxQ=
Subject key identifier: 4C:34:5C:0C:E9:7B:C6:55:8B:73:FC:06:90:FD:7D:4A:B0:D0:3E:86
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 0187FC436DA8301E37FEA6BD1AA79DD6E9D0
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/TDRcDOl7xlWLc_wGkP19SrDQPoY.roa
Signing time: Mon 08 May 2023 16:48:10 +0000
ROA not before: Mon 08 May 2023 16:48:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213039
IP address blocks: 81.163.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:43:6d:a8:30:1e:37:fe:a6:bd:1a:a7:9d:d6:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: May 8 16:48:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c345c0ce97bc6558b73fc0690fd7d4ab0d03e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:70:14:e5:a2:17:03:65:c6:24:29:80:b2:b2:
c6:21:bb:43:7d:26:24:cb:65:4a:46:50:39:fe:79:
ac:93:0e:32:09:b7:44:d3:d0:6b:97:f5:b9:73:f6:
aa:ee:10:ce:96:cd:19:60:e0:c1:17:68:80:62:63:
57:d9:46:9c:5e:35:dd:60:30:e9:c4:f5:5b:1b:fa:
e8:51:b4:82:f0:d6:54:15:87:68:fa:21:43:0b:8c:
17:f0:83:f1:67:ad:14:84:15:6e:57:c5:bf:23:85:
a1:28:01:4a:cd:f0:49:68:f7:0d:24:e5:7c:f3:ba:
b1:43:54:e7:8b:b7:36:d1:6a:c9:42:28:ee:a0:9c:
eb:f7:7c:44:4a:83:2c:18:a9:10:ef:3b:0f:66:db:
d2:8d:64:c8:fc:59:e5:ad:ba:83:7d:23:0c:df:4d:
b3:dd:cc:86:13:83:24:58:2c:a2:0f:3b:27:dd:b8:
3c:7a:6e:58:0e:dd:f3:b5:a4:9b:78:b7:5b:71:d8:
e3:0c:c3:53:61:be:ad:2f:1c:fb:7a:e0:4a:fa:d1:
c9:c2:8f:8b:2a:c3:73:19:89:01:18:e3:30:dc:b6:
b1:90:af:3a:9b:2f:fd:b6:4d:c9:3a:4d:e6:9d:c3:
17:65:39:10:86:a0:3c:fe:3b:97:33:9a:ac:c1:ee:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:34:5C:0C:E9:7B:C6:55:8B:73:FC:06:90:FD:7D:4A:B0:D0:3E:86
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/TDRcDOl7xlWLc_wGkP19SrDQPoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.210.0/24
Signature Algorithm: sha256WithRSAEncryption
68:72:68:0d:5c:24:33:2a:36:e1:f0:c6:95:96:b8:c1:f7:52:
14:19:0d:32:ce:d8:86:bc:9a:35:53:d5:20:10:a5:54:74:5c:
c3:56:04:1d:8e:91:dd:aa:cb:b3:43:6f:9f:25:aa:2d:61:25:
c5:a8:77:6e:ce:12:d8:73:b2:09:64:f5:66:ba:58:f7:1a:54:
e7:e1:b5:d3:bf:4e:be:70:ad:bc:06:fa:f5:56:ea:b3:20:0c:
be:8b:8b:8c:f0:67:b7:79:d6:3a:28:c0:a0:77:fd:f7:21:fe:
14:0d:08:d4:aa:49:03:85:b3:e4:3d:14:25:00:e8:0a:3b:97:
f7:71:92:ea:53:c0:ee:24:1e:27:98:ec:10:ae:f8:aa:8f:b3:
7f:7a:1a:87:03:46:f1:b0:41:dd:8f:93:22:5d:1b:be:76:d0:
e8:1a:cc:f7:cf:c5:e3:12:49:f1:f5:79:0e:de:fd:72:44:28:
48:b8:28:13:b0:ce:35:22:06:8f:e7:22:93:98:10:a7:b6:9d:
f5:e8:1a:74:2f:21:81:b7:6c:3a:3f:75:31:56:a4:b7:11:8c:
49:10:bc:c6:a0:a4:6f:5f:e0:8c:22:39:fc:a8:45:47:79:b8:
08:61:83:dc:08:34:89:20:f8:f3:22:a2:97:09:2c:7e:e5:71:
37:b8:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org