Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/srrt4G79jeadISV0e_L5_g2a6IA.roa
File: srrt4G79jeadISV0e_L5_g2a6IA.roa (raw, json)
Hash identifier: X2btxGDZxbuJ1CznROo0NOYnaCpdX+3BWgNxahrH/ho=
Subject key identifier: B2:BA:ED:E0:6E:FD:8D:E6:9D:21:25:74:7B:F2:F9:FE:0D:9A:E8:80
Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial: 0186356CCD835AB70A983B96560A7A9602AF
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/srrt4G79jeadISV0e_L5_g2a6IA.roa
Signing time: Thu 09 Feb 2023 09:06:08 +0000
ROA not before: Thu 09 Feb 2023 09:06:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25251
IP address blocks: 81.94.37.0/24 maxlen: 24
81.94.32.0/22 maxlen: 22
81.94.36.0/24 maxlen: 24
81.94.44.0/24 maxlen: 24
81.94.42.0/24 maxlen: 24
81.94.39.0/24 maxlen: 24
81.94.45.0/24 maxlen: 24
81.94.46.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:6c:cd:83:5a:b7:0a:98:3b:96:56:0a:7a:96:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Validity
Not Before: Feb 9 09:06:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2baede06efd8de69d2125747bf2f9fe0d9ae880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:87:d2:42:6e:4a:0d:ff:3a:f3:57:0c:ac:
f2:a3:ab:77:52:5c:84:73:0d:18:b6:c2:e8:85:9c:
c5:7e:af:c4:6d:fd:c7:c1:1d:d1:21:c0:13:00:33:
ea:44:98:fe:91:ea:17:fe:ce:ea:d3:75:bd:75:2a:
b3:13:76:61:93:91:c7:97:43:a9:9a:c5:50:42:48:
3f:8b:e0:6e:45:a3:6b:90:af:d8:12:18:c3:35:35:
da:d7:71:64:63:bf:95:b4:72:3c:9f:07:35:c2:b6:
e4:5a:ca:b8:fa:a5:c0:ec:a5:37:ee:0d:0f:5b:bf:
e1:f0:44:71:55:1b:3b:17:7b:87:60:2a:59:45:e6:
e2:44:e4:ad:77:fa:51:85:c7:ec:17:a9:cc:6c:46:
77:7f:33:06:9e:95:8f:61:62:0e:29:f9:c8:6a:4d:
46:f2:51:b7:f6:10:0d:d8:4a:32:0b:64:61:53:12:
c9:c8:09:a9:98:fd:91:40:91:d6:ed:41:25:ce:b2:
2f:83:9e:2c:fa:0f:d1:46:51:07:1f:66:f1:d4:6b:
3c:de:d0:7e:24:be:b6:0d:99:87:e7:a7:44:4c:99:
97:ff:be:5d:0e:c7:2c:5f:4f:fb:cb:15:dc:24:47:
f7:d8:6a:d6:ee:d5:1b:9f:ca:58:9d:6c:49:66:c7:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:ED:E0:6E:FD:8D:E6:9D:21:25:74:7B:F2:F9:FE:0D:9A:E8:80
X509v3 Authority Key Identifier:
keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/srrt4G79jeadISV0e_L5_g2a6IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.32.0-81.94.37.255
81.94.39.0/24
81.94.42.0/24
81.94.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:0b:d1:62:f0:6c:39:14:ea:58:71:c7:ac:cd:45:64:a2:40:
f1:c3:88:72:68:94:ff:74:68:9c:ac:03:3a:47:9a:14:f1:d0:
e1:41:ae:78:17:7f:b3:c0:a6:da:d5:06:ed:b5:ab:3f:3d:e5:
91:42:e8:9b:6a:aa:35:5e:50:34:fe:5f:eb:91:0b:2f:5a:c9:
6e:e3:22:9e:9a:fc:67:04:33:60:ba:76:b1:96:24:3f:3c:46:
57:e4:99:af:dd:c1:b6:3f:d5:73:f2:60:59:ca:4c:cc:53:f3:
90:cb:c3:1e:30:5f:74:55:25:23:c8:4d:37:98:ab:0d:71:70:
73:13:88:27:1e:f3:c6:89:ca:21:dc:24:f4:2e:2a:84:12:55:
7d:2f:45:7b:77:45:fa:e3:78:3d:d0:72:11:f4:22:07:9b:f4:
11:92:10:f7:97:32:3f:3b:e9:c5:40:6f:11:58:5e:7d:c4:db:
b3:fa:73:58:a4:5c:44:2c:d8:a6:f7:1a:d2:d0:de:d1:e7:32:
6b:b4:00:76:e0:a8:f1:76:dc:2c:70:06:74:5e:b5:22:a1:83:
af:03:75:c5:6a:c2:bd:ad:06:3b:a9:76:6f:9a:05:1d:8d:f9:
4e:a8:88:46:0e:b8:d2:74:73:e2:26:65:70:a9:c9:3f:2d:df:
7b:7a:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:30 2024 by rpki-client on console.sobornost.net