Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1u4GuyOj6dhrGxiKC-KA-OqhW-c.roa
File: 1u4GuyOj6dhrGxiKC-KA-OqhW-c.roa (raw, json)
Hash identifier: z6/emuXKtfbKvKWqZww2Sr6S1gsdSFTcNYXxxyBJRMU=
Subject key identifier: D6:EE:06:BB:23:A3:E9:D8:6B:1B:18:8A:0B:E2:80:F8:EA:A1:5B:E7
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185DBDCCA4507FF4E02F2867CEFFA4A8B73
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1u4GuyOj6dhrGxiKC-KA-OqhW-c.roa
Signing time: Sun 22 Jan 2023 23:42:38 +0000
ROA not before: Sun 22 Jan 2023 23:42:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 22:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:db:dc:ca:45:07:ff:4e:02:f2:86:7c:ef:fa:4a:8b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 22 23:42:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6ee06bb23a3e9d86b1b188a0be280f8eaa15be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:b5:8f:6f:ff:d4:1b:3a:78:2e:f1:71:02:
fc:0c:6d:45:5a:4f:4b:85:99:8d:68:a5:4d:eb:2b:
2d:69:9f:73:f0:3a:af:60:81:5f:ce:46:70:60:47:
b8:38:ff:4b:e6:7a:90:90:d5:54:c5:0c:80:8f:b1:
39:6e:fc:2f:8d:10:78:4d:74:51:c4:6a:a1:c9:2b:
78:d0:25:49:49:c7:da:ec:51:03:a6:fa:2c:28:4a:
e3:68:52:fe:5e:63:7f:9f:90:1b:f2:95:be:39:52:
e7:9e:9a:63:f2:93:87:7e:61:ac:a6:5a:0b:0c:91:
fd:7e:a1:c3:ec:37:66:e8:78:59:d4:19:17:b8:36:
8e:21:e8:7a:66:77:d2:ed:6b:0f:24:72:97:f9:25:
6f:72:31:b3:6f:a1:9f:44:c1:3a:f7:21:17:92:35:
43:37:aa:d9:ab:b5:27:28:29:e0:c6:43:a0:56:74:
12:1d:60:1f:bd:42:07:84:b8:6c:ab:c2:1c:fe:f3:
c2:f9:23:bf:df:62:23:e5:81:d6:9c:19:fb:01:d0:
b0:58:23:0f:4b:e5:99:a0:b1:92:67:51:d7:3e:a9:
e6:e7:06:a5:ff:95:9d:b0:5f:c8:ae:df:54:e1:ae:
b5:a3:b5:d7:b0:80:43:d5:02:18:ae:73:5a:c4:41:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EE:06:BB:23:A3:E9:D8:6B:1B:18:8A:0B:E2:80:F8:EA:A1:5B:E7
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1u4GuyOj6dhrGxiKC-KA-OqhW-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:87:c7:67:c6:35:c3:5a:b7:95:6b:af:42:92:74:16:60:fe:
4a:7d:fc:24:ff:da:92:b5:d3:90:7b:f7:fc:6d:b5:80:65:c6:
e7:69:1c:47:c3:42:a4:30:ec:9c:e5:b6:91:0e:92:13:d4:df:
25:35:d8:1c:4d:fc:49:b4:3b:6e:fa:9a:98:f0:9a:91:fc:c9:
df:aa:c4:cf:2b:b6:ea:f6:43:23:29:cc:9d:ad:24:42:ed:2c:
a7:ee:0a:87:24:47:db:40:64:38:39:82:67:8f:b0:5a:82:ce:
17:04:e0:d5:8b:b5:18:05:dd:02:91:3f:2a:bd:91:bb:ff:5b:
cd:1e:0b:e0:2a:c7:7a:3b:a6:88:3a:8a:28:42:10:9c:91:7b:
a1:8f:03:a6:84:79:c5:62:50:64:cf:55:24:3e:79:2d:c6:8c:
63:fb:03:08:18:4f:4f:70:11:04:38:c7:0b:d5:7e:e3:a9:fb:
a7:a2:da:19:8e:1d:a3:d1:5c:8f:76:76:eb:90:3f:b4:a2:02:
c8:64:46:b2:15:9c:9f:53:17:23:0b:d7:ae:7a:a4:b6:f7:ec:
99:c0:64:68:dc:7a:44:11:ec:2b:8e:c3:b0:b2:6d:6c:5d:06:
c8:c4:f7:5a:31:a4:c4:a6:73:c7:f3:e9:9c:c4:db:47:24:86:
eb:5a:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org