Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1Fgh1dZifaHZ9gT7tRhBnwqYdp4.roa
File: 1Fgh1dZifaHZ9gT7tRhBnwqYdp4.roa (raw, json)
Hash identifier: N64+Dev108GyrWnK4V+3SX2u/JKvsRkVqmsYUhAyNJU=
Subject key identifier: D4:58:21:D5:D6:62:7D:A1:D9:F6:04:FB:B5:18:41:9F:0A:98:76:9E
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01872958AABD2ACD642C50A994470CD572B0
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1Fgh1dZifaHZ9gT7tRhBnwqYdp4.roa
Signing time: Tue 28 Mar 2023 17:51:29 +0000
ROA not before: Tue 28 Mar 2023 17:51:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210531
IP address blocks: 81.22.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 May 2023 09:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:29:58:aa:bd:2a:cd:64:2c:50:a9:94:47:0c:d5:72:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 28 17:51:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d45821d5d6627da1d9f604fbb518419f0a98769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:f2:0f:3d:66:cd:3a:2c:bc:d8:fe:26:d5:
86:26:e2:a1:43:36:3e:2c:f7:b8:92:bc:77:ca:65:
84:e8:c2:25:63:5e:8f:e7:6b:6f:39:ee:58:16:d6:
64:ba:45:fa:37:7b:da:f6:a2:3f:15:d0:f0:f7:f4:
90:de:ca:fa:84:b8:4c:20:61:03:54:ec:15:1c:b2:
01:dc:a2:8e:5c:e6:81:bf:9b:d8:9b:0e:35:7a:6a:
85:17:31:09:10:00:4c:4c:b7:54:fb:34:de:cb:0d:
29:ed:4a:99:bf:4e:08:bb:56:83:38:a4:7c:51:4c:
1a:0d:0b:cd:e3:ad:e2:92:12:6b:fb:7f:bf:13:16:
ab:fe:ee:7d:04:f0:e4:34:c6:47:2c:f3:fc:48:c6:
f2:24:c1:f1:c8:0f:88:da:b7:27:3b:a3:ef:38:1c:
e7:63:64:21:b9:8b:b3:39:5d:a8:3c:25:5d:4a:13:
e2:d8:28:77:42:05:97:89:22:54:92:72:8b:da:00:
77:08:05:97:2e:87:f2:78:d3:09:7f:72:4a:6a:3d:
cc:67:80:93:1a:da:55:5a:53:b2:78:56:06:dc:1a:
df:41:89:8f:ae:02:fc:51:1b:4e:25:a7:97:c2:4c:
e1:ff:cd:10:a7:5b:e3:e0:b1:4b:21:44:92:18:ba:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:58:21:D5:D6:62:7D:A1:D9:F6:04:FB:B5:18:41:9F:0A:98:76:9E
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1Fgh1dZifaHZ9gT7tRhBnwqYdp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.134.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2f:12:5e:4b:60:34:1e:92:e8:e5:09:8a:fe:4b:4a:b7:9d:
65:75:17:5c:75:ac:1e:d2:d0:cd:92:8a:a2:84:b4:fe:94:94:
55:4b:66:fa:b2:2e:77:da:b0:ee:b0:90:e1:e6:5b:7e:34:27:
7a:2f:9b:51:be:68:60:3b:06:db:d6:ef:0f:35:ed:fe:1d:33:
de:47:5e:fe:bd:1f:b1:f2:2c:df:f3:45:bd:89:93:8c:ea:8c:
dd:bb:16:13:c6:8e:a2:96:16:8e:20:1c:f2:23:7f:c0:50:81:
60:fa:9a:77:4f:b7:bb:6e:04:6e:e3:0a:33:88:63:c7:5c:2f:
9b:85:f6:db:26:0c:a5:2b:2a:3b:bb:40:7a:a8:99:df:29:89:
b9:23:0c:46:42:b5:f7:00:ac:ba:9e:3c:b1:d5:87:80:98:80:
f0:c1:4f:73:bf:b6:a3:7d:07:8d:9e:62:55:6f:75:ba:22:3e:
ab:82:af:47:1c:e0:98:6c:e9:89:c2:1e:a7:d7:e7:53:08:27:
ab:0e:01:f5:7a:a4:89:b9:d9:5d:5e:ba:44:9a:ee:c8:30:c5:
f1:c8:43:1d:6b:89:0e:c1:18:dd:e0:36:5a:46:a0:39:2b:0b:
bc:4c:b9:c6:69:f5:4f:3d:e5:21:7d:10:50:99:02:b6:23:71:
49:dd:08:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org