Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/g3OU0bAIw8-3TVMlFyEu74zdB7c.roa
File: g3OU0bAIw8-3TVMlFyEu74zdB7c.roa (raw, json)
Hash identifier: Vf2WXOBL182eAgXDcOt6xp0jAvCmyQ9SplKj1yXG8Mc=
Subject key identifier: 83:73:94:D1:B0:08:C3:CF:B7:4D:53:25:17:21:2E:EF:8C:DD:07:B7
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 01856C4131F74F546FF1333B03F1A6025963
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/g3OU0bAIw8-3TVMlFyEu74zdB7c.roa
Signing time: Sun 01 Jan 2023 07:34:49 +0000
ROA not before: Sun 01 Jan 2023 07:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41157
IP address blocks: 81.201.176.0/20 maxlen: 20
2a02:2218::/29 maxlen: 32
2a02:2218::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:31:f7:4f:54:6f:f1:33:3b:03:f1:a6:02:59:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Jan 1 07:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=837394d1b008c3cfb74d532517212eef8cdd07b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:03:82:ea:87:a2:07:6a:59:bb:f4:d0:83:
74:e5:94:a6:cf:8e:b0:78:dc:d5:ae:eb:c3:f1:5c:
90:36:80:5f:b2:9a:9f:a7:28:74:e0:9a:7d:55:7b:
25:0f:a2:08:1e:01:94:25:2b:55:3c:0f:9d:6a:0c:
1b:47:64:57:e4:9d:2c:3e:90:54:aa:48:19:48:ab:
f2:f9:d0:ab:e8:5c:d8:13:f8:50:c9:02:97:6c:7e:
2d:11:62:17:e4:d9:9c:90:51:8b:80:9b:1c:81:f7:
60:6d:ba:39:77:36:d3:0c:aa:9b:8c:ed:29:4e:5b:
1e:cc:61:59:9a:2c:4f:db:32:8b:b0:8e:49:79:b5:
ef:7c:01:13:f3:43:3c:61:0e:9f:cb:dc:2e:3a:8b:
59:00:5a:c2:4a:37:e8:cb:3c:22:ff:3b:8a:38:2a:
51:1a:0c:41:dc:9f:f6:25:fa:60:8e:75:27:7b:3a:
ec:d5:70:d4:95:21:c8:82:35:52:d0:f1:53:a7:a1:
62:e3:25:af:14:77:ae:b3:20:67:e2:aa:79:1e:39:
e4:9a:92:0d:9f:ea:34:c0:09:44:1b:c8:77:38:f3:
1e:91:18:9d:d2:37:ba:11:d7:e2:99:6a:1a:ff:f0:
46:be:77:7a:a5:72:76:d2:2d:45:f4:7e:aa:e6:07:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:73:94:D1:B0:08:C3:CF:B7:4D:53:25:17:21:2E:EF:8C:DD:07:B7
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/g3OU0bAIw8-3TVMlFyEu74zdB7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.176.0/20
IPv6:
2a02:2218::/29
Signature Algorithm: sha256WithRSAEncryption
3b:6e:b3:5a:c3:8b:c5:d0:c5:8e:74:3b:90:2d:d3:95:25:ea:
96:8a:9e:c8:95:10:27:4f:31:d7:f8:47:eb:24:d4:f4:e7:84:
88:c9:a7:16:24:43:79:4f:f9:d1:4a:4f:a0:a8:8f:71:2d:7b:
da:17:37:9c:73:8f:a6:c6:13:e1:41:8a:47:94:58:aa:24:e7:
03:99:f8:dc:fc:fa:20:10:fc:04:bd:d7:8d:56:75:f2:dc:05:
5d:8f:af:2b:cd:11:14:c8:53:28:1c:28:7f:35:85:df:26:fd:
c5:ec:d6:2f:62:bf:76:0d:eb:90:73:0e:00:1c:00:20:ea:f0:
db:f7:e8:19:04:a7:6b:94:0d:5d:ee:af:c0:c3:70:39:1e:14:
3f:f7:77:88:e6:77:20:0d:51:c9:0a:e0:3b:0a:1c:78:08:05:
a6:d4:ae:b4:45:c5:08:e1:ca:9f:91:6e:4a:69:4c:cf:3f:dd:
c3:98:8f:eb:79:7e:9b:1a:f2:c2:b5:57:44:f6:af:40:ab:43:
21:bb:57:87:76:63:97:8e:ae:66:54:2b:59:67:cd:a2:dc:9e:
a3:39:d4:ae:0b:69:f8:23:25:bc:9d:53:4a:1c:1b:04:65:36:
68:8c:53:bd:20:95:55:43:dd:73:12:fb:e1:e3:17:27:f4:08:
eb:ed:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:46 2024 by rpki-client on console-fra.rpki-client.org