Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4syCLKa9ac2aRKiVw9XGQKEF93g.roa
File: 4syCLKa9ac2aRKiVw9XGQKEF93g.roa (raw, json)
Hash identifier: I8Tl+QJZaX4JStAGnj4lupf9afWmsquc5nCF9py/cqs=
Subject key identifier: E2:CC:82:2C:A6:BD:69:CD:9A:44:A8:95:C3:D5:C6:40:A1:05:F7:78
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01857E0912749D722F38580BDD317794A9D9
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4syCLKa9ac2aRKiVw9XGQKEF93g.roa
Signing time: Wed 04 Jan 2023 18:26:41 +0000
ROA not before: Wed 04 Jan 2023 18:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150670
IP address blocks: 81.22.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 19:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7e:09:12:74:9d:72:2f:38:58:0b:dd:31:77:94:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 4 18:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2cc822ca6bd69cd9a44a895c3d5c640a105f778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:7a:11:55:ca:8b:b2:9f:ab:11:8d:74:97:
2f:a9:12:8a:4e:37:5f:f3:0f:76:da:46:a6:c4:0c:
87:f0:71:2f:b1:40:c3:a8:dd:53:7e:8f:df:db:c3:
13:97:f7:7b:1a:6c:a0:18:ea:8e:e4:55:99:f9:c4:
d0:69:10:1e:e4:0e:ac:50:7e:cd:44:84:71:fb:a7:
82:e1:3f:39:fd:b2:da:9b:52:0e:1c:54:95:80:2a:
99:9a:f2:85:08:4d:ad:42:68:f1:4b:c6:8a:6e:ea:
46:8b:c9:c5:18:35:d1:a6:8b:e3:04:fa:90:0e:84:
0e:ab:6e:2c:23:64:3d:b8:06:69:89:b6:7a:b6:94:
0b:61:62:ef:ed:ae:de:39:27:fa:7b:01:c3:25:5a:
eb:8c:5c:73:3e:98:80:c0:5f:3b:54:94:b4:b7:3d:
b9:8a:89:dd:9d:0a:34:07:f6:46:de:90:00:1d:b8:
38:75:e5:93:b4:5f:4b:aa:64:c4:ef:43:b4:84:2d:
01:5f:c8:cc:0f:4c:a0:02:28:87:37:ce:b6:0f:d9:
5d:3c:fd:74:e5:dc:f5:4e:e5:8f:b7:a8:0d:9b:c9:
46:64:bd:2f:2a:82:93:e7:90:e2:e8:1e:66:8e:5d:
43:5c:be:86:2c:20:89:50:0d:89:cd:1a:3d:91:8c:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:82:2C:A6:BD:69:CD:9A:44:A8:95:C3:D5:C6:40:A1:05:F7:78
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4syCLKa9ac2aRKiVw9XGQKEF93g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ea:f2:91:9a:25:3e:78:fa:77:5f:bc:51:7c:1b:56:da:5d:
95:1b:76:b3:c2:ff:ee:f0:76:2a:ab:a2:0b:02:27:5e:8a:4e:
2c:47:e1:ae:c7:4f:99:3d:4c:c1:21:3b:bb:e5:b7:5a:cf:ec:
98:39:46:23:09:4d:12:d3:b5:03:6d:bc:12:9c:f6:f9:a3:e4:
35:26:94:6f:d8:90:be:05:ca:25:d6:36:39:0b:c2:dc:ef:cf:
27:a3:6e:f2:f7:8e:b5:cb:b3:3a:d3:37:60:29:d3:12:64:e3:
2a:98:47:ae:3d:d8:6d:35:87:b4:4a:18:80:20:78:23:94:56:
46:07:0f:e6:29:a1:8d:42:a8:fc:00:cb:bb:3e:61:82:45:d2:
ea:66:b8:54:b1:77:98:98:18:7a:96:df:bc:c8:e7:f0:6a:48:
bb:ee:06:3d:4d:39:92:aa:56:1d:63:e2:fb:ef:d6:d6:13:d2:
06:b2:fa:6d:2d:2f:a7:7c:d6:7d:ac:e9:ef:b5:10:48:92:4b:
07:93:b8:94:84:bb:78:59:b4:44:46:10:17:d5:13:3b:fa:1f:
d9:31:10:dc:c3:78:e3:2c:de:db:72:19:0c:c1:14:af:e8:82:
80:1b:0a:28:e2:b7:a5:25:07:a1:88:c4:7f:24:94:bd:79:27:
1d:78:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org