Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/XvNdzoBchviYLrNAG8Zos3ZV5vw.roa
File: XvNdzoBchviYLrNAG8Zos3ZV5vw.roa (raw, json)
Hash identifier: zPblNykNecr3aMgp2qIhdzbyANBhP8ZSRAn4Taox+xg=
Subject key identifier: 5E:F3:5D:CE:80:5C:86:F8:98:2E:B3:40:1B:C6:68:B3:76:55:E6:FC
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 01915A64C7530BE5A2D2A61D76AE1FACA73A
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/XvNdzoBchviYLrNAG8Zos3ZV5vw.roa
Signing time: Fri 16 Aug 2024 08:53:59 +0000
ROA not before: Fri 16 Aug 2024 08:53:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57242
IP address blocks: 81.163.211.0/24 maxlen: 24
81.163.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:64:c7:53:0b:e5:a2:d2:a6:1d:76:ae:1f:ac:a7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Aug 16 08:53:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ef35dce805c86f8982eb3401bc668b37655e6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:73:37:08:af:f4:7a:7c:9b:0a:49:30:a0:
e4:25:30:6c:1e:6b:36:9f:8d:91:67:c0:fb:0c:39:
2f:8b:83:17:20:00:89:bc:d7:45:6b:a5:ee:52:b8:
0a:16:0e:d8:5d:ea:16:10:03:9f:e1:56:b9:64:96:
4b:0d:3c:f9:3b:43:12:7c:6a:0b:f9:12:a3:5a:36:
b1:46:0b:b4:28:31:ae:bc:c5:7e:77:97:74:01:14:
86:29:e1:1c:1e:04:e3:59:1f:aa:b3:fe:00:81:e3:
ae:59:2a:62:d8:b1:77:7e:05:83:85:45:df:9e:e6:
28:d8:ec:0e:30:93:f7:73:02:e7:6e:7f:42:7c:c3:
d1:19:60:2b:71:c2:e5:83:54:6c:94:12:49:07:d7:
93:48:99:56:b8:09:16:87:39:ae:7b:82:74:ae:d2:
6e:a6:77:4d:7b:bc:a7:a6:e6:eb:b7:dd:bd:f0:e4:
39:9f:42:ef:10:bf:43:4b:8f:21:28:fb:7a:a2:ff:
fb:3c:70:d5:d1:bc:9c:86:8f:1b:f7:eb:27:4d:e0:
b5:4d:5b:ae:42:ee:d7:bc:23:16:8e:e9:ab:95:ef:
a5:a8:5d:d9:04:48:37:5f:e6:0e:14:1d:5c:6b:5c:
8d:f9:51:42:99:15:2b:9b:e2:33:b3:4e:77:55:ba:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F3:5D:CE:80:5C:86:F8:98:2E:B3:40:1B:C6:68:B3:76:55:E6:FC
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/XvNdzoBchviYLrNAG8Zos3ZV5vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.211.0/24
81.163.214.0/24
Signature Algorithm: sha256WithRSAEncryption
38:69:ab:60:17:e0:73:4f:c4:0d:21:ee:e1:e9:87:22:23:4e:
28:11:81:5b:b2:77:2f:84:a5:fd:bc:bf:6d:2a:1f:d7:c2:58:
ab:e4:50:97:4c:ad:8a:94:fb:d7:eb:4c:5b:ea:80:1e:02:43:
95:25:6f:5a:f7:93:e6:31:20:15:9b:a9:65:6a:a7:fb:f5:29:
c4:56:83:c4:26:a3:eb:d7:7c:1b:25:55:ce:df:5b:14:a2:e4:
99:33:dc:b0:14:01:e0:20:71:42:30:29:c9:b2:db:9e:63:b9:
94:36:62:8b:72:e1:67:3b:65:89:09:37:c1:8d:ee:75:6f:02:
69:63:32:65:4e:0d:9d:7d:2d:04:d6:a0:5b:fd:d4:ff:2c:05:
cf:b8:50:dd:f6:57:02:d5:64:90:c7:c1:8d:91:75:f1:be:bc:
19:cb:82:2c:46:92:04:65:3d:89:b2:db:0d:28:68:d3:32:5d:
68:c2:7b:ef:da:74:28:d5:d7:2c:09:b1:a0:61:c3:bc:3c:ff:
23:d1:bf:c4:57:ba:48:fc:2b:52:34:80:e0:c4:3f:47:82:6b:
1b:05:59:f7:c6:95:a9:69:c4:49:d5:ae:18:e1:7b:04:d5:1f:
f8:cd:4d:07:8c:8e:ad:5c:99:ac:60:85:e8:bc:66:9d:52:b0:
4f:20:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:02:23 2025 by rpki-client