Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/xVH_AkeIHWcgpQJRRKdI61r4kzU.roa
File: xVH_AkeIHWcgpQJRRKdI61r4kzU.roa (raw, json)
Hash identifier: Gq7etrs60D8ju8lBAgwwyrrSgUTtv3e2uY5EANhAwgE=
Subject key identifier: C5:51:FF:02:47:88:1D:67:20:A5:02:51:44:A7:48:EB:5A:F8:93:35
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 0187FC436C811DDEBA33AC1926C77B42FE6E
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/xVH_AkeIHWcgpQJRRKdI61r4kzU.roa
Signing time: Mon 08 May 2023 16:48:09 +0000
ROA not before: Mon 08 May 2023 16:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51273
IP address blocks: 81.163.212.0/24 maxlen: 24
81.163.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:43:6c:81:1d:de:ba:33:ac:19:26:c7:7b:42:fe:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: May 8 16:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c551ff0247881d6720a5025144a748eb5af89335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:0e:d5:6c:b1:80:08:88:70:14:a7:b4:f4:
67:35:68:8c:c6:fc:8e:f9:aa:f6:0c:3a:bd:50:a8:
64:64:61:c6:b8:bc:cd:23:b9:5e:e4:92:75:97:3d:
25:6d:d1:0b:ee:2f:ff:b7:34:3b:74:ee:cc:db:9c:
fa:d0:a4:20:40:73:b0:f1:90:8c:40:35:60:e5:6d:
5e:09:10:b1:40:da:07:85:fd:07:fd:8f:48:f2:66:
45:3a:97:0a:a4:d4:ae:61:2f:36:ba:07:7c:67:37:
b1:60:fc:19:96:b1:2d:95:df:15:fd:72:64:06:70:
e4:35:c4:5e:67:4e:24:4f:31:0b:f2:39:a0:ec:d9:
ff:ab:d8:f5:f2:08:a0:4b:ea:d6:88:1e:a0:f1:61:
3d:6e:1f:5d:a4:dd:7f:01:4f:78:9c:9d:dc:c0:88:
64:0e:a1:ec:0b:18:3a:64:8f:c2:dd:2e:2d:73:32:
bc:31:f6:0c:27:8c:5c:d4:34:29:f5:27:a6:aa:bb:
1f:ed:bd:b6:86:d5:0e:4c:10:10:a4:d6:75:98:f2:
de:36:10:e8:3c:a5:fa:9d:3b:95:d9:b0:5d:e1:d3:
e6:d2:a6:c5:e2:ff:95:17:d7:5b:9c:e8:e4:20:1f:
1b:bb:70:7c:ed:ea:88:d4:f5:56:2d:fe:51:cb:4e:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:51:FF:02:47:88:1D:67:20:A5:02:51:44:A7:48:EB:5A:F8:93:35
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/xVH_AkeIHWcgpQJRRKdI61r4kzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.211.0-81.163.212.255
Signature Algorithm: sha256WithRSAEncryption
a3:a7:b3:50:ca:67:8f:ea:bf:00:79:45:9d:ab:4c:99:a1:eb:
d1:d9:06:6f:e2:b4:66:d9:84:66:df:08:68:58:a1:c0:17:d6:
b7:0c:27:c3:2f:2e:60:46:8f:21:d7:0b:91:be:df:24:ee:ce:
fc:68:cb:b7:a9:49:99:65:94:3e:56:a6:d9:87:25:76:fa:ed:
a9:61:24:3a:18:40:7c:24:53:77:98:f1:fd:18:8a:d5:d6:88:
46:ed:4c:b3:8a:ac:2d:7a:8a:bb:41:f4:4c:75:19:99:21:dd:
16:52:8f:34:c4:51:56:88:41:58:48:03:1e:6c:0c:87:7e:c7:
36:7a:d6:c8:11:4d:4d:d8:29:9d:dd:f6:43:9b:5b:b5:f8:98:
eb:06:8b:07:00:24:d5:2a:16:d9:21:f9:3a:61:92:95:50:ef:
c8:61:e5:ab:b8:7e:01:8b:06:ea:b5:0e:95:69:fb:af:00:da:
81:30:20:31:67:b2:48:ac:91:5e:28:af:1a:38:88:99:ee:de:
ad:70:12:b9:07:e6:8b:61:bd:ff:d7:d1:bc:52:63:d2:e1:d4:
a4:f5:59:fb:07:2b:c0:02:c0:4b:de:77:b4:e8:e2:f1:db:ea:
7a:9c:f9:6d:c6:fb:da:48:43:ef:61:26:3b:e2:50:f6:f4:84:
c3:24:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org