Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/87-FnvbPM4kGAImHFYnP_0cLc3I.roa
File: 87-FnvbPM4kGAImHFYnP_0cLc3I.roa (raw, json)
Hash identifier: OhTrMPaZg3gOCgTj+0vhbZtvSJoaaOBc4H9I4EEHPAM=
Subject key identifier: F3:BF:85:9E:F6:CF:33:89:06:00:89:87:15:89:CF:FF:47:0B:73:72
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018570672FB5179C1CDCD73FB62620080F8B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/87-FnvbPM4kGAImHFYnP_0cLc3I.roa
Signing time: Mon 02 Jan 2023 02:54:48 +0000
ROA not before: Mon 02 Jan 2023 02:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 81.22.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jan 2023 20:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:2f:b5:17:9c:1c:dc:d7:3f:b6:26:20:08:0f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 2 02:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3bf859ef6cf3389060089871589cfff470b7372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:40:54:31:4a:22:69:ab:d5:a5:7d:28:d2:
53:e9:99:52:a6:5b:ad:84:49:ba:d5:1d:78:31:e5:
4c:41:c0:f6:00:51:93:d6:bf:91:8f:fa:86:16:92:
5b:64:7c:b0:d3:50:cd:1c:d7:64:46:9a:f6:9c:4f:
ea:22:41:54:77:e7:fa:00:7c:8f:0a:4f:9d:41:51:
ba:62:4c:5d:c7:24:1d:3f:2d:3c:b8:62:e7:3d:53:
68:18:4d:89:2d:47:77:a2:d0:e1:36:01:1f:81:07:
24:73:98:e1:e5:7d:40:30:e4:84:6c:c6:03:73:0f:
de:38:18:0b:a5:ed:1d:ca:87:bd:00:39:19:f7:6a:
24:41:2e:3d:d0:a3:79:ce:14:95:2d:51:68:00:fb:
ea:de:55:5c:02:74:c2:16:7d:19:05:53:1b:a4:71:
7b:f0:8a:f0:5d:0c:10:60:d8:cc:de:e9:03:74:4d:
bd:d1:48:16:f8:d5:d7:7c:8a:63:68:3c:f2:c2:64:
e9:ed:e7:17:25:d9:ed:57:91:f9:f1:0e:4a:5a:1f:
c1:6d:25:c3:d4:c7:2a:26:9b:42:4a:ee:97:1b:40:
be:61:e9:2e:1e:70:df:8e:c2:4c:02:a1:ef:34:d4:
6f:9c:2d:95:44:ba:7a:f3:09:48:b0:4c:40:11:35:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BF:85:9E:F6:CF:33:89:06:00:89:87:15:89:CF:FF:47:0B:73:72
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/87-FnvbPM4kGAImHFYnP_0cLc3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
94:14:26:9e:f0:ee:71:3c:f9:28:ba:84:47:b2:ea:1f:27:90:
d3:ea:6e:71:91:6d:d5:f6:19:3a:e8:cb:48:09:b0:dc:28:fc:
fe:ce:fb:aa:4f:ac:af:bd:82:fc:a0:9d:74:07:85:ea:86:01:
1f:5f:5f:b5:1c:4a:79:05:0c:cb:b9:d3:9b:99:8b:82:f9:48:
34:d7:25:a0:89:f7:41:be:ab:e6:1d:5c:ce:87:a8:8d:2b:25:
20:cb:13:de:52:f9:65:d6:0e:e1:a1:6e:f3:0c:ab:c8:0a:fe:
24:44:9f:96:56:23:60:8f:a9:b6:7b:d3:0e:4e:37:fe:32:17:
33:e7:69:d1:53:dc:b3:61:e5:4d:69:84:10:3c:d4:a8:a2:73:
bb:7a:10:4b:46:fe:11:c3:c3:93:04:43:c7:b2:7f:1a:ad:02:
ec:82:69:b7:63:63:11:6f:d6:72:69:9c:f5:80:ab:99:33:e0:
8f:17:b6:3d:f4:0d:a1:ef:db:ad:a8:d0:2c:51:b7:5b:f0:a8:
09:d0:4f:7f:7f:6d:4c:ce:d7:c8:5e:bc:a2:55:ea:cb:f3:f7:
d4:71:c2:cb:ea:8f:9c:92:2d:c6:8d:52:0e:cf:63:65:d4:6b:
2b:bc:65:dc:9e:1d:e3:e6:65:8c:3b:aa:bb:71:a4:6a:d1:8f:
20:94:12:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZy+1F5wc3Nc/tiYgCA+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMTAyMDI1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2JmODU5ZWY2Y2YzMzg5MDYwMDg5ODcxNTg5Y2ZmZjQ3MGI3MzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lhAVDFKImmr1aV9KNJT6ZlSplut
hEm61R14MeVMQcD2AFGT1r+Rj/qGFpJbZHyw01DNHNdkRpr2nE/qIkFUd+f6AHyP
Ck+dQVG6YkxdxyQdPy08uGLnPVNoGE2JLUd3otDhNgEfgQckc5jh5X1AMOSEbMYD
cw/eOBgLpe0dyoe9ADkZ92okQS490KN5zhSVLVFoAPvq3lVcAnTCFn0ZBVMbpHF7
8IrwXQwQYNjM3ukDdE290UgW+NXXfIpjaDzywmTp7ecXJdntV5H58Q5KWh/BbSXD
1McqJptCSu6XG0C+YekuHnDfjsJMAqHvNNRvnC2VRLp68wlIsExAETWDBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPO/hZ72zzOJBgCJhxWJz/9HC3NyMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvODctRm52YlBNNGtHQUltSEZZblBfMGNMYzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCURaMMA0G
CSqGSIb3DQEBCwUAA4IBAQCUFCae8O5xPPkouoRHsuofJ5DT6m5xkW3V9hk66MtI
CbDcKPz+zvuqT6yvvYL8oJ10B4XqhgEfX1+1HEp5BQzLudObmYuC+Ug01yWgifdB
vqvmHVzOh6iNKyUgyxPeUvll1g7hoW7zDKvICv4kRJ+WViNgj6m2e9MOTjf+Mhcz
52nRU9yzYeVNaYQQPNSoonO7ehBLRv4Rw8OTBEPHsn8arQLsgmm3Y2MRb9ZyaZz1
gKuZM+CPF7Y99A2h79utqNAsUbdb8KgJ0E9/f21MztfIXryiVerL8/fUccLL6o+c
ki3GjVIOz2Nl1GsrvGXcnh3j5mWMO6q7caRq0Y8glBKq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org