Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/jMlmHM21CVlUFKvbv2R3tVdFVHk.roa
File: jMlmHM21CVlUFKvbv2R3tVdFVHk.roa (raw, json)
Hash identifier: lH0OZ9MZu00qYbDIpoERWS4LCwwc4QKSL9AdXroXnQE=
Subject key identifier: 8C:C9:66:1C:CD:B5:09:59:54:14:AB:DB:BF:64:77:B5:57:45:54:79
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 01857102D737A44971B410AD25449C567A10
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/jMlmHM21CVlUFKvbv2R3tVdFVHk.roa
Signing time: Mon 02 Jan 2023 05:44:49 +0000
ROA not before: Mon 02 Jan 2023 05:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24848
IP address blocks: 81.26.0.0/20 maxlen: 20
81.6.176.0/21 maxlen: 21
81.26.16.0/20 maxlen: 20
81.6.184.0/22 maxlen: 22
81.6.188.0/22 maxlen: 22
2a00:cd80::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:d7:37:a4:49:71:b4:10:ad:25:44:9c:56:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jan 2 05:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cc9661ccdb509595414abdbbf6477b557455479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:74:ab:62:98:a1:61:fb:68:7b:55:d3:f4:
70:ed:b3:d0:61:72:ff:2b:b8:27:33:89:b4:30:57:
1a:c0:c4:09:ae:32:ba:7e:4e:ac:5b:d1:d8:07:5d:
82:ec:06:d2:46:ae:45:64:ba:97:68:6c:1f:05:38:
b7:f9:01:f0:a1:c9:c3:ce:2c:0a:dd:45:fc:5f:70:
b2:94:94:1a:3f:bd:cd:8d:69:34:2a:bd:51:7f:e7:
59:66:26:6d:41:6d:c7:79:b0:a4:e8:26:4f:bc:74:
96:e4:fa:5b:af:d7:ce:ce:62:cd:09:d9:aa:cd:5b:
e6:f7:47:bd:9e:7b:ee:48:32:22:60:c0:39:33:b2:
e6:27:21:00:7e:d2:6d:66:b6:31:ac:5d:e3:93:8e:
cf:33:01:ac:42:52:a3:9c:5a:7f:a1:95:62:71:e9:
bc:9e:c8:28:10:f1:e2:a9:75:07:a8:fb:ee:e0:69:
a2:ad:1d:24:77:7c:f0:15:73:26:65:fc:87:7d:ad:
4c:11:b1:a9:4a:72:97:b7:86:19:d3:e8:cb:f3:6c:
8d:6d:b0:8c:45:d4:68:c9:29:4a:0e:92:69:a5:e3:
b2:b9:5c:19:03:5f:92:ee:11:54:b1:af:15:15:18:
55:a7:43:ee:2a:cf:16:98:64:b3:46:df:59:3e:d0:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:66:1C:CD:B5:09:59:54:14:AB:DB:BF:64:77:B5:57:45:54:79
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/jMlmHM21CVlUFKvbv2R3tVdFVHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.176.0/20
81.26.0.0/19
IPv6:
2a00:cd80::/33
Signature Algorithm: sha256WithRSAEncryption
b5:9f:23:df:81:5a:c6:8c:af:6c:3c:04:16:d2:2a:32:b2:30:
bf:af:9c:36:c2:fb:f3:9b:c1:fd:8a:a3:f3:b5:21:58:36:d2:
1a:8c:37:0a:95:8e:42:18:50:0d:93:dd:d6:1d:92:eb:bc:f4:
d2:83:ce:26:89:1b:d1:59:8d:6d:82:46:c4:38:3c:aa:57:64:
86:79:e4:c0:a5:da:bd:92:19:54:4f:47:35:2a:b0:38:f6:ee:
bb:fa:d8:53:c7:e1:9e:e6:ce:ee:d1:64:11:c0:3f:b0:5e:a2:
92:87:3e:75:d9:ef:6d:d9:ec:45:4f:ae:41:fe:ec:60:19:9e:
55:d1:0f:ab:8e:33:70:e8:ea:7d:3a:a0:51:e8:7f:ec:33:47:
06:8d:fe:87:8e:d2:1b:04:b3:12:0d:a1:76:d3:37:37:e0:fd:
a6:45:b8:26:8f:2e:34:1f:d7:95:57:da:13:72:ee:89:e8:dc:
85:9a:b0:d8:b1:aa:4b:a5:c3:31:8a:80:7a:3e:8a:86:92:dd:
14:9c:30:bd:29:be:34:87:dc:8c:76:6e:40:94:f5:37:a9:d2:
fd:9f:c3:6d:5c:92:22:8d:f8:0b:27:d0:f0:ef:f5:36:df:fd:
68:62:8d:5b:f6:ba:0f:2d:fc:95:c0:18:f9:91:7c:5d:4d:60:
c8:0d:b6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org