Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/7JIfPqy--3lz5X8QhQ9voxa0q3I.roa
File: 7JIfPqy--3lz5X8QhQ9voxa0q3I.roa (raw, json)
Hash identifier: DeyRipJdsoFscjbTDdBr+t5CTedQeu0bHM19bmmQNBk=
Subject key identifier: EC:92:1F:3E:AC:BE:FB:79:73:E5:7F:10:85:0F:6F:A3:16:B4:AB:72
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CC649C862544D0D92FB260E4A5863D036
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/7JIfPqy--3lz5X8QhQ9voxa0q3I.roa
Signing time: Mon 01 Jan 2024 18:29:33 +0000
ROA not before: Mon 01 Jan 2024 18:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 81.22.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 18:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:c8:62:54:4d:0d:92:fb:26:0e:4a:58:63:d0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 18:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec921f3eacbefb7973e57f10850f6fa316b4ab72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:d8:31:25:d0:9b:24:94:2e:ff:08:71:d7:
a5:0e:08:8a:cb:c6:31:e4:ab:e3:07:03:3b:9d:cd:
cd:3c:3b:0a:d5:8b:7e:10:a6:d6:7e:10:40:cb:b6:
95:ba:93:c4:ba:03:6c:90:72:3a:82:ed:f4:03:fe:
61:29:5d:58:05:8f:64:1f:bc:84:a0:93:4a:62:1e:
95:55:cd:af:08:76:32:cb:2f:f9:6f:82:a5:98:19:
99:f0:db:6a:2a:61:79:0c:4d:a1:e7:12:f9:ae:9b:
51:6c:1d:95:b4:04:0e:2c:7b:5e:63:b9:cd:0c:d3:
72:79:6f:7c:6d:36:f4:e9:0b:b4:7d:4f:fc:cc:62:
5a:07:17:5d:4b:af:7d:8d:af:62:a8:f9:0b:5e:13:
9b:5a:a5:f6:b1:7b:23:6e:6b:b9:85:d8:a5:e4:0e:
a5:13:ee:04:91:eb:24:f4:76:f9:68:2b:7a:0d:0a:
0c:24:29:a0:8e:4f:d9:07:fa:fe:38:c0:da:3e:86:
32:a6:b9:e3:93:91:70:5d:f6:26:26:f7:14:5b:f0:
e0:0b:83:39:33:ce:ec:f0:1a:a5:5c:1a:1e:2c:f3:
cc:f5:23:32:00:a6:86:2d:db:3a:e6:d6:b9:eb:15:
c7:0f:c4:26:ba:5f:c1:ee:92:47:bc:a0:47:00:f0:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:1F:3E:AC:BE:FB:79:73:E5:7F:10:85:0F:6F:A3:16:B4:AB:72
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/7JIfPqy--3lz5X8QhQ9voxa0q3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.134.0/24
Signature Algorithm: sha256WithRSAEncryption
77:53:6e:5d:9a:e5:92:76:9b:30:55:88:b4:09:6b:a4:ff:01:
d7:09:0c:5b:46:f2:1b:bf:78:80:fb:eb:dc:5f:81:17:01:55:
11:af:0a:e5:b9:e8:1f:ef:fd:05:f5:42:09:7f:b6:a5:bb:5c:
f1:5b:e3:b4:a8:19:f5:74:8b:da:69:af:fb:17:7e:10:25:73:
5a:e2:44:48:8d:6e:88:86:18:58:92:85:13:dc:0f:c6:b5:0a:
a4:0a:f8:3e:d1:17:dd:09:f7:9f:fb:8f:18:48:dd:f5:19:d5:
f8:64:2d:82:3a:51:f3:a9:f7:40:b4:57:01:e2:bd:98:95:fb:
a8:8f:1b:f9:06:a7:dc:72:b5:43:2f:35:a2:e2:21:a7:b4:e3:
40:23:e0:2c:0e:bf:3e:4d:a6:a9:cb:a7:c5:fc:ba:4b:26:6c:
cf:41:ed:2b:7c:c0:9e:12:76:6b:a4:c8:97:f3:79:1d:e5:72:
1f:06:f0:a8:8c:00:8e:06:d3:09:09:62:ba:9b:33:a9:9b:fa:
5d:58:89:d9:81:5c:80:0f:c2:81:f1:bd:1a:d9:61:dc:b2:e0:
89:ed:d3:00:c2:34:07:09:d5:c6:80:4a:9d:b3:38:30:f1:48:
1a:25:99:4f:6f:e6:3c:44:f1:e6:2c:be:5c:0a:98:0e:25:b4:
2f:81:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org