Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/A6X3TTFDsDWkILxpcruJV8R1V7s.roa
File: A6X3TTFDsDWkILxpcruJV8R1V7s.roa (raw, json)
Hash identifier: x/6GNiUdRBBSfrAXut+hTWNqhBuPh4sza0HCfXfaSao=
Subject key identifier: 03:A5:F7:4D:31:43:B0:35:A4:20:BC:69:72:BB:89:57:C4:75:57:BB
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188C377235900D4CEB7DDAFF4F65A9BF5C2
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/A6X3TTFDsDWkILxpcruJV8R1V7s.roa
Signing time: Fri 16 Jun 2023 09:09:04 +0000
ROA not before: Fri 16 Jun 2023 09:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 81.22.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 19:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:77:23:59:00:d4:ce:b7:dd:af:f4:f6:5a:9b:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 16 09:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03a5f74d3143b035a420bc6972bb8957c47557bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:29:ac:90:aa:ce:d1:4f:80:7c:11:2b:ca:
58:86:9d:26:58:8c:f0:f4:76:3b:64:23:53:70:03:
a5:21:be:ee:1e:0a:c7:a7:c8:e3:49:d0:40:da:4e:
d6:76:d6:8e:12:45:d0:6a:c6:87:6e:89:c0:60:e7:
c3:a8:0c:a0:25:71:71:40:cc:11:2d:7f:69:26:c2:
f5:f8:c9:42:eb:0b:46:9c:e7:d5:4e:f2:3d:e2:db:
36:96:96:91:24:4e:b7:86:bf:6c:53:50:d0:4e:cc:
f4:6f:8f:b3:1b:d9:89:80:82:df:dc:d1:f8:71:75:
91:3d:1a:ca:e1:37:ca:3d:e1:1b:bb:8f:25:94:71:
0f:b9:13:c1:d2:8f:84:aa:58:55:07:71:fb:2b:f6:
ca:1a:f7:b9:33:c8:98:6b:76:68:3e:67:2a:50:21:
26:32:ca:7a:a3:d6:d2:68:41:55:b1:95:ac:40:97:
ad:a8:cf:d0:51:30:57:b6:98:1c:a3:7d:83:ad:70:
d7:8c:7f:b0:af:f5:14:29:a0:6c:f7:56:83:0f:67:
69:8f:f0:b2:4e:cf:96:a9:c7:d1:b4:75:7c:98:00:
69:f0:71:54:bb:07:be:21:b0:0d:e9:c8:5d:e4:cd:
a9:0c:e6:5d:38:cd:8a:df:bf:48:ef:49:fd:37:d1:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:F7:4D:31:43:B0:35:A4:20:BC:69:72:BB:89:57:C4:75:57:BB
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/A6X3TTFDsDWkILxpcruJV8R1V7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.131.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ad:89:26:fe:1d:ce:7f:0a:75:f5:8e:68:7a:ee:a3:14:a0:
cc:12:47:14:5e:f5:04:9b:1d:a4:db:80:73:b2:8e:07:2b:4a:
2c:41:b5:fa:fb:b2:92:14:dc:72:6d:a3:6c:b8:91:e1:4a:d3:
3e:7a:74:6d:f7:df:7f:ae:d8:64:e4:b2:d8:dc:4a:c5:0c:74:
e8:7b:9a:b8:fe:72:14:fd:98:a9:1f:7b:9e:71:ba:5b:1d:6b:
d2:67:50:73:bc:a1:fb:83:4d:31:f5:ea:3a:e2:54:c1:ba:f9:
4b:e2:23:61:47:64:7e:49:f2:8e:0f:64:71:d1:15:7d:ff:1d:
54:2b:86:87:4b:46:52:e2:ac:e8:3d:19:b4:af:d2:a6:fe:ab:
3a:7b:6e:03:86:11:9b:dd:56:99:0c:92:ea:d3:93:df:5c:cd:
3e:3d:9f:dd:79:33:e0:70:79:47:56:98:37:72:ba:93:2d:58:
ea:4b:b2:20:aa:44:ac:00:3f:0f:5d:85:3e:1f:b7:b3:4b:aa:
cb:17:53:ab:08:8b:7b:b2:6d:8a:06:b0:ac:96:21:25:45:fd:
5f:bf:b1:0c:0d:e7:db:12:38:99:16:f1:9c:e6:ff:cd:a3:ec:
e8:1e:37:7e:d3:3c:99:b0:75:54:96:7c:48:d8:05:df:e0:3d:
f1:4d:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org