Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/86lWCd9fNdFCwKN0krq-T6plCuE.roa
File: 86lWCd9fNdFCwKN0krq-T6plCuE.roa (raw, json)
Hash identifier: RCJQ0n5J6Qq3KEA6rRuNCPmp70EW36DO5WOKcQd/n34=
Subject key identifier: F3:A9:56:09:DF:5F:35:D1:42:C0:A3:74:92:BA:BE:4F:AA:65:0A:E1
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018810FBFBBD6C7C546A607E6716A3D34122
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/86lWCd9fNdFCwKN0krq-T6plCuE.roa
Signing time: Fri 12 May 2023 17:22:09 +0000
ROA not before: Fri 12 May 2023 17:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 81.22.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:fb:fb:bd:6c:7c:54:6a:60:7e:67:16:a3:d3:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 12 17:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3a95609df5f35d142c0a37492babe4faa650ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:f7:b4:e1:f0:e9:92:e8:a6:46:e0:9a:b9:
9a:08:da:62:ff:5d:2f:b9:15:07:e3:69:f2:9e:c0:
92:03:f8:2b:5d:66:c5:c7:05:25:1d:4b:6b:c5:1a:
54:b8:f6:a5:8e:51:c8:24:24:f0:77:00:8d:e3:49:
46:c1:39:37:70:0b:c9:f8:f9:6e:39:5c:7b:37:83:
d6:53:9c:e0:6e:96:a5:27:9a:90:36:b7:2e:e3:32:
03:ae:3d:5a:99:e4:7d:64:a9:b4:97:1b:2a:0c:16:
0d:5c:08:5f:84:57:a0:7c:13:12:c0:8d:ec:3e:24:
1c:75:0a:57:89:7a:90:a5:ef:49:ee:ef:f4:5d:aa:
4f:3e:76:01:80:e4:0d:95:b4:ac:f5:0c:fb:c0:a3:
14:65:13:d6:74:4e:8f:c8:96:d5:cc:fa:f4:a6:14:
c6:58:a3:4e:1b:de:f5:b1:cc:05:e8:cc:d0:3d:c0:
f2:74:e4:fd:bc:59:a5:33:37:de:71:ea:5e:db:39:
2b:31:df:60:d2:46:5c:0d:6c:5e:f5:c8:66:e9:7e:
0b:8c:77:c3:7f:c0:a6:3a:34:fb:c8:92:7e:c9:75:
28:80:47:2f:b0:3a:38:e8:27:2c:2d:f1:9a:af:e1:
59:4c:6b:82:b1:e4:19:4f:ab:fd:8a:1d:48:53:f8:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:56:09:DF:5F:35:D1:42:C0:A3:74:92:BA:BE:4F:AA:65:0A:E1
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/86lWCd9fNdFCwKN0krq-T6plCuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3c:90:5f:3f:80:c8:f4:1d:47:39:2d:88:c7:60:b3:63:68:
e4:96:30:c2:1e:37:f6:3a:09:a1:48:ce:b7:af:f4:e2:30:0d:
60:79:b8:17:a1:2a:90:8c:9e:a0:74:ae:b1:f2:8c:af:63:4c:
95:e0:cb:06:2d:55:04:1d:48:7b:38:31:d3:7b:99:e1:1b:83:
e8:cc:b2:1d:29:75:a6:f0:dd:eb:1c:32:a8:6c:40:77:00:b7:
f9:9d:a4:87:27:43:61:83:f7:c0:c4:8d:35:4b:91:3a:b9:11:
1d:7f:cf:b3:78:72:2b:6f:3c:7d:79:23:f8:a6:c2:7a:33:ea:
1b:6e:41:50:8e:46:b6:56:dc:c3:58:84:2c:b0:36:c5:52:1d:
e2:ad:3c:d3:2d:b8:a1:35:13:a8:dc:de:25:88:33:b3:a4:65:
33:be:90:16:db:d1:ab:e3:d2:07:05:04:b5:e4:91:bb:68:11:
54:f9:1a:7e:59:76:28:2c:f3:10:b1:b0:0b:75:36:b1:72:0f:
54:e4:9b:e6:67:36:cd:33:de:94:a9:f5:59:ac:02:99:4d:92:
7f:09:01:98:19:1d:e2:61:36:86:38:d8:96:ff:7a:d9:bd:d9:
73:8c:59:48:81:b5:d8:34:35:f4:f3:30:3c:f3:96:57:7e:6a:
3d:30:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org