Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-5PjZ_W1nf6l-FbAJrfNnUt72wc.roa
File: 1-5PjZ_W1nf6l-FbAJrfNnUt72wc.roa (raw, json)
Hash identifier: z+aftcUBpUnXJIlFXcW4lAKRYU8d0Hg7en0bHaCL3JE=
Subject key identifier: FB:93:E3:67:F5:B5:9D:FE:A5:F8:56:C0:26:B7:CD:9D:4B:7B:DB:07
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018F20D1BBA89AA2637506B74592BCB62D18
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-5PjZ_W1nf6l-FbAJrfNnUt72wc.roa
Signing time: Sat 27 Apr 2024 18:29:26 +0000
ROA not before: Sat 27 Apr 2024 18:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 81.22.138.0/24 maxlen: 24
89.185.0.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 15:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:d1:bb:a8:9a:a2:63:75:06:b7:45:92:bc:b6:2d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 27 18:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb93e367f5b59dfea5f856c026b7cd9d4b7bdb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:2a:e2:a8:08:c0:94:78:fc:8c:32:12:8c:
42:57:12:ea:83:d9:86:8d:00:98:5a:3f:a7:fc:e3:
2d:c6:a6:1e:26:e9:57:ae:c9:f0:e9:8e:37:b6:d5:
ec:95:64:06:f9:1a:f9:e1:20:13:22:fb:d0:37:93:
60:2c:f9:e8:17:f3:4b:7d:c8:4b:ba:2e:83:46:f4:
38:a3:f0:8a:dd:ac:ad:6e:b7:1c:88:e0:eb:3b:46:
a5:0b:0d:f7:ad:ad:e3:50:41:a6:13:18:d7:8c:b9:
ef:44:62:f7:68:a7:4c:13:3a:61:10:fa:22:f1:bb:
64:e1:07:77:a1:a4:a8:6b:28:10:00:13:38:1b:11:
3a:d4:46:86:8b:35:3b:28:da:1c:54:66:22:9a:b6:
9a:45:85:f6:d8:b3:41:80:14:5c:07:bb:b8:de:7f:
89:88:27:ce:d3:71:7b:a1:02:c2:15:53:48:79:16:
f4:90:78:65:a1:21:30:da:7c:01:2b:2b:c4:11:ad:
50:b6:a1:45:36:49:10:30:a5:4d:34:07:33:fc:c1:
4a:8a:e2:95:1f:b3:6c:94:95:20:6e:67:dd:a8:19:
87:8b:82:00:4c:bf:c9:05:13:1c:dd:ff:b2:5c:0d:
01:5e:75:f1:4e:e6:00:57:2a:b1:b7:e3:69:90:2f:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:E3:67:F5:B5:9D:FE:A5:F8:56:C0:26:B7:CD:9D:4B:7B:DB:07
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-5PjZ_W1nf6l-FbAJrfNnUt72wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.138.0/24
89.185.0.0/24
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5b:9c:65:09:05:14:2d:9d:88:05:d7:fb:6f:8d:00:a6:2c:
c5:73:e6:63:7b:6f:9c:bd:d3:d1:97:30:b0:a0:53:ae:26:3e:
70:a9:69:2b:37:d0:d9:95:61:fa:4a:aa:de:e6:14:20:9c:d9:
b2:30:4e:c2:87:f7:63:57:b0:d6:62:dd:2f:44:30:85:0f:01:
b8:c6:3f:fa:13:51:5f:e7:9c:1d:e6:8f:29:3b:f1:07:19:e8:
26:d5:66:db:fc:e5:db:31:20:f4:e5:15:6f:28:4a:67:b6:ae:
fd:e0:8a:fe:9c:a2:c7:13:75:48:ba:13:6c:3a:ff:e8:e7:c4:
be:88:61:41:79:fb:e5:49:18:13:18:46:d4:2a:ad:73:3c:ab:
26:6e:d3:ab:70:52:dc:90:da:d5:de:9a:c2:3c:52:4d:5e:08:
1b:c1:f9:1e:6c:c4:5c:0f:cd:7c:9b:c9:bc:1f:69:db:8f:21:
2e:53:75:d0:f7:e1:57:00:69:6f:3d:0e:bc:65:3a:01:9e:3d:
53:84:e1:d8:29:9d:b5:1d:43:0d:d5:ae:28:77:80:81:10:36:
ce:a1:23:b1:cc:15:c4:61:91:60:77:3b:08:bf:dc:50:74:b6:
49:1f:b6:85:7b:eb:4b:28:3f:e7:69:c2:14:8e:67:f6:ab:ea:
14:73:f0:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org