Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/WeAWZQiR3iu3NhZRYrSRciz0Spo.roa
File: WeAWZQiR3iu3NhZRYrSRciz0Spo.roa (raw, json)
Hash identifier: n8fvntYFXTmIh8PULOyaOIsD2CItZfwQJCRgDh+eCNY=
Subject key identifier: 59:E0:16:65:08:91:DE:2B:B7:36:16:51:62:B4:91:72:2C:F4:4A:9A
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 0187FC436E14653B66AAF267AF020732FBAA
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/WeAWZQiR3iu3NhZRYrSRciz0Spo.roa
Signing time: Mon 08 May 2023 16:48:10 +0000
ROA not before: Mon 08 May 2023 16:48:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213205
IP address blocks: 81.163.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:43:6e:14:65:3b:66:aa:f2:67:af:02:07:32:fb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: May 8 16:48:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59e016650891de2bb736165162b491722cf44a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:fa:44:9f:be:cc:69:9b:f7:ff:47:e0:95:
38:a5:14:9a:75:e6:9e:4a:28:f6:f0:3b:47:dc:99:
ac:b8:3b:2b:d5:78:4e:9e:be:65:0b:68:e7:d9:2f:
0a:fd:e0:45:19:d5:c9:6e:33:54:6a:d8:a8:59:2c:
95:e4:97:ef:f9:6a:8d:e7:50:04:5b:77:a4:7d:08:
49:42:d5:79:dc:ba:1f:ae:5c:3a:d9:4a:96:52:6c:
3d:18:92:f2:05:fc:78:94:03:0d:11:86:42:0f:33:
4b:fe:20:72:f3:d2:d0:96:a6:1e:f2:fe:54:da:e6:
0b:ed:69:39:22:31:65:37:43:5c:f8:54:eb:18:f5:
e7:d7:da:84:dc:e1:3d:15:15:cb:34:52:ef:81:00:
c2:8c:b5:e7:13:89:b6:84:96:fd:a1:72:fa:f9:1c:
a0:fc:44:a1:10:39:08:9c:fa:f5:b8:ab:a6:9b:87:
8d:2e:2d:48:e0:1a:1a:8c:fd:86:8d:5d:c1:bc:2d:
1b:db:3e:8f:69:48:3a:d7:9f:ae:eb:3e:d3:fb:c7:
e4:dc:e2:d7:70:32:95:74:35:a3:84:d3:1e:7c:ca:
8f:4a:8f:07:10:3b:da:42:c8:fa:a1:06:09:87:3a:
07:90:78:a3:d9:29:da:58:9f:11:a3:33:5f:53:6d:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:16:65:08:91:DE:2B:B7:36:16:51:62:B4:91:72:2C:F4:4A:9A
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/WeAWZQiR3iu3NhZRYrSRciz0Spo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.209.0/24
Signature Algorithm: sha256WithRSAEncryption
76:85:8f:23:44:16:83:79:97:0e:99:38:c6:04:ae:5a:82:8d:
2a:32:04:af:3e:1e:41:d0:09:2a:11:83:d1:0a:81:86:f3:ed:
f2:e2:43:92:d3:de:a7:4d:1e:b7:f8:35:27:fe:11:0d:9e:5a:
58:59:85:fc:e1:16:ea:b8:6f:3c:74:bc:37:96:4c:98:b0:f8:
eb:71:14:78:ee:39:c2:5a:38:0d:f9:d7:11:6c:c2:3f:11:33:
31:c7:80:85:c4:73:88:72:cc:0a:c6:8d:d1:33:1f:53:37:44:
bd:97:33:ad:65:b5:1c:ed:a8:39:82:53:96:5c:5c:26:39:24:
aa:da:94:2d:24:2d:3f:33:cb:0a:2d:72:f3:38:7b:0a:44:2c:
c1:e9:ff:4b:bb:df:87:14:80:e1:f9:f6:b7:eb:b4:72:4d:ab:
4e:62:52:7c:9e:e2:5f:8e:d8:46:b9:b8:d1:eb:52:7e:80:af:
77:c1:77:5c:60:92:90:ad:28:d5:9c:80:2b:b3:26:73:68:74:
85:b3:e6:20:a3:2f:05:b8:2b:17:96:0c:2d:c8:a4:6f:35:84:
37:fa:55:56:f1:3e:8d:52:24:b3:43:ee:6a:a3:00:07:a0:fd:
38:ee:f4:14:d1:20:56:e4:78:0c:78:67:5c:7f:a7:c0:73:f5:
0c:4b:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:31:05 2024 by rpki-client on console-ams.rpki-client.org