Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6BJxzqiOv4r9fdO3DLvsGiBIFtk.roa
File: 6BJxzqiOv4r9fdO3DLvsGiBIFtk.roa (raw, json)
Hash identifier: mQqrkC80XySS/RBH41AhCCSVRoM0u4ZiGYFaZcbwhtM=
Subject key identifier: E8:12:71:CE:A8:8E:BF:8A:FD:7D:D3:B7:0C:BB:EC:1A:20:48:16:D9
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188BF8BB7481E934FC682EC39B045ADBF6B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6BJxzqiOv4r9fdO3DLvsGiBIFtk.roa
Signing time: Thu 15 Jun 2023 14:53:04 +0000
ROA not before: Thu 15 Jun 2023 14:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 109.72.118.0/24 maxlen: 24
109.72.117.0/24 maxlen: 24
109.72.116.0/24 maxlen: 24
109.72.115.0/24 maxlen: 24
109.72.114.0/24 maxlen: 24
81.22.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 07:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:8b:b7:48:1e:93:4f:c6:82:ec:39:b0:45:ad:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 15 14:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e81271cea88ebf8afd7dd3b70cbbec1a204816d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6c:10:08:8d:f2:b7:1e:e9:43:ea:2c:ea:62:
0b:75:ed:a8:6a:00:da:ab:fc:22:71:67:e5:46:44:
d9:4b:54:39:c1:b0:da:67:2a:da:5d:b1:4f:9a:66:
81:2c:bf:73:2c:4a:2c:cb:e6:aa:52:5a:f4:ff:1a:
9b:22:f8:26:ce:84:3f:ee:38:e3:f8:ca:c9:72:ed:
67:bf:fa:15:32:fd:11:79:29:8e:3a:70:1d:cd:c9:
70:00:dc:20:d7:a3:50:8e:27:58:91:ce:ed:1c:4b:
91:45:ac:62:f9:e0:fe:49:b9:e4:1b:b6:22:9a:f7:
d6:96:8a:ab:70:cf:a1:70:e4:cf:e0:36:dd:60:82:
3c:f8:c6:fe:aa:cc:79:d4:fe:10:de:62:59:80:aa:
0d:c2:a7:e0:b0:0d:0c:f7:25:42:fb:8e:a6:86:7a:
79:3c:7f:d9:d9:43:a6:d9:10:16:aa:69:af:88:0d:
1b:7b:47:7f:56:7d:e1:01:76:a1:65:1e:22:62:66:
6c:a0:9f:2e:97:10:0c:44:ca:7e:3f:3f:01:4b:47:
27:ac:1c:48:e0:99:ca:8a:13:eb:58:24:2d:46:c7:
cf:3a:22:fb:1e:b6:03:2a:2b:f4:91:b9:7e:2f:bb:
7c:a5:b8:f6:9a:aa:f2:cf:3a:ba:d8:08:a2:49:9c:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:71:CE:A8:8E:BF:8A:FD:7D:D3:B7:0C:BB:EC:1A:20:48:16:D9
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6BJxzqiOv4r9fdO3DLvsGiBIFtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
109.72.114.0-109.72.118.255
Signature Algorithm: sha256WithRSAEncryption
92:c5:5c:26:06:97:06:9a:66:66:e8:72:bc:09:9d:dd:ec:a5:
b5:69:04:f9:93:12:10:89:0b:45:b8:48:51:d7:05:50:ea:1c:
41:47:ca:07:0b:ce:04:f0:0b:9d:87:59:47:d5:24:06:17:19:
a4:6e:8b:55:5f:a1:26:1e:90:b9:23:a5:57:5d:ad:40:89:fa:
75:81:8a:a2:2f:e7:88:3f:23:d9:42:66:89:fd:39:01:dd:3f:
3b:b1:06:70:2a:2a:05:b9:af:d8:ba:81:13:f1:fa:5a:f7:a4:
1b:c3:ed:0f:b9:f3:06:04:97:58:32:2c:c1:9e:1b:ca:6f:56:
1c:b0:9f:08:13:9c:f1:ed:2c:5e:dd:83:3b:f8:79:7b:bb:09:
05:57:e4:b1:e7:e8:5f:63:c8:44:b5:2c:3b:43:3e:a8:cc:16:
7a:a7:2a:3b:9c:89:36:23:63:2c:97:1f:02:0e:b9:f9:e9:af:
48:a4:67:d9:2d:14:2c:8f:37:7d:44:65:65:90:96:d0:aa:3d:
57:01:0d:41:ff:32:11:3a:91:c0:82:74:1c:c1:de:63:d1:0b:
83:fd:cc:a3:d3:22:c4:99:d9:37:48:13:e4:d3:ad:fc:08:d7:
5e:86:c3:a1:e7:75:9a:7a:fe:0a:ce:d4:b1:65:2e:dc:98:af:
29:a0:b4:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org