Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/a6FuJY0v4nhx8WSLOS_5jffKgBs.roa
File: a6FuJY0v4nhx8WSLOS_5jffKgBs.roa (raw, json)
Hash identifier: 5Ag/516Zw1UkumA7I7k2/E0vO4K4LyEZnVhJpnKph4o=
Subject key identifier: 6B:A1:6E:25:8D:2F:E2:78:71:F1:64:8B:39:2F:F9:8D:F7:CA:80:1B
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 018CC3B6A775A89A96D927A5FB4F485956F7
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/a6FuJY0v4nhx8WSLOS_5jffKgBs.roa
Signing time: Mon 01 Jan 2024 06:29:36 +0000
ROA not before: Mon 01 Jan 2024 06:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57242
IP address blocks: 81.163.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 21:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a7:75:a8:9a:96:d9:27:a5:fb:4f:48:59:56:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ba16e258d2fe27871f1648b392ff98df7ca801b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:3d:32:f0:ca:92:88:1f:b0:09:b0:09:c6:
00:0b:c6:06:37:03:b7:0b:d5:2b:49:d3:38:8b:1c:
86:20:7a:fb:53:96:d2:89:be:a2:aa:a0:2a:03:eb:
2b:05:c9:fd:35:b1:be:7a:e2:22:1b:d1:53:be:ae:
5d:fe:48:9f:3a:23:e6:d9:de:4a:ad:62:72:fc:20:
29:46:8e:df:f4:1f:66:49:74:8d:da:83:8a:08:bb:
fb:ea:75:70:22:40:93:85:7f:a3:07:14:f3:38:1c:
3b:a3:51:09:f6:84:c0:f6:a1:b4:05:85:ed:55:c7:
16:9c:91:a1:94:60:0b:66:3a:4e:01:73:6a:35:18:
e7:5c:0b:07:50:68:9d:a8:3e:7c:91:36:54:c2:59:
b0:31:0e:7c:33:2c:9c:08:73:c8:54:80:61:e6:80:
6c:5d:73:5c:08:ab:6a:c0:05:be:fe:0e:da:5b:91:
94:b9:31:b0:dd:e1:f7:0e:b7:6f:2c:5e:61:1e:fd:
99:4a:c8:72:34:4d:e4:25:a4:da:de:30:ae:dd:c5:
a2:81:43:d2:d4:19:8f:65:85:b9:8c:ee:49:2f:7f:
29:05:ff:b5:8d:15:43:c2:d3:f8:fe:9d:0f:b9:72:
1c:0f:b3:ba:c8:6f:b8:80:85:0c:84:4d:b7:05:1a:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:6E:25:8D:2F:E2:78:71:F1:64:8B:39:2F:F9:8D:F7:CA:80:1B
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/a6FuJY0v4nhx8WSLOS_5jffKgBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.208.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c3:eb:ad:22:18:a1:23:d7:34:b0:e3:8d:dd:22:bc:f9:53:
1b:be:ab:ab:9e:74:9e:4c:6a:5a:17:f8:65:d5:de:0b:04:e5:
c0:7b:83:bf:05:43:66:f7:79:6d:0e:66:ee:86:1f:29:0e:af:
14:77:b8:1a:bb:3b:08:e0:99:8d:7b:a2:86:7a:4f:94:2e:10:
e8:3f:d7:78:76:32:66:2a:fe:4a:86:46:46:3f:97:ff:2b:bb:
a2:09:59:4a:09:21:1b:0f:fe:5e:c5:b9:4a:5a:df:64:23:47:
a8:80:e3:9f:51:12:97:c3:71:b8:b1:b3:3c:e3:df:80:87:13:
fe:62:06:d3:d5:d0:0a:fd:37:55:c9:cf:0d:45:4b:38:b9:3b:
62:fc:36:9a:18:21:b9:5f:ec:ff:ac:6f:6c:c8:fd:4d:1f:3f:
48:31:f9:e9:7e:0a:b4:a5:41:f2:81:c7:3e:eb:a6:d7:a8:a1:
37:44:81:35:41:57:05:78:7b:0a:21:46:4f:8d:89:01:7d:b5:
c9:89:76:6f:50:5c:d1:69:cb:8a:6f:e7:b7:33:73:98:b2:a6:
ef:06:c0:64:21:72:d9:37:23:4e:fa:59:20:be:33:b9:b3:2e:
fa:69:13:10:4a:5c:22:c1:15:9c:6f:9b:d2:93:57:d4:e8:ef:
b5:69:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:03:53 2024 by rpki-client on console-ams.rpki-client.org