Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/AjyergadGspMAzbxxWE7tvcYh60.roa
File: AjyergadGspMAzbxxWE7tvcYh60.roa (raw, json)
Hash identifier: OvdiAVE4D0hSjGRs8wV9SG9qenEGCElMpQZ8Ud3IM5c=
Subject key identifier: 02:3C:9E:AE:06:9D:1A:CA:4C:03:36:F1:C5:61:3B:B6:F7:18:87:AD
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188DA34F9B4548010110756EBB50A3E04A2
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/AjyergadGspMAzbxxWE7tvcYh60.roa
Signing time: Tue 20 Jun 2023 19:08:04 +0000
ROA not before: Tue 20 Jun 2023 19:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 81.22.134.0/24 maxlen: 24
81.22.140.0/22 maxlen: 22
81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 09:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:da:34:f9:b4:54:80:10:11:07:56:eb:b5:0a:3e:04:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 20 19:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=023c9eae069d1aca4c0336f1c5613bb6f71887ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a0:cb:e9:63:ad:26:e7:59:f0:5a:ed:ac:7c:
6a:d2:58:88:c5:25:57:a2:d2:70:59:11:18:dc:36:
e6:6b:68:77:42:71:59:18:7b:c6:c9:b7:c0:f7:a9:
aa:7e:01:9f:c4:93:2c:16:96:c7:e1:2f:8a:5f:37:
48:a7:2a:c3:7d:a9:52:8b:71:b5:1d:34:39:fb:ad:
9d:5d:49:11:be:c2:63:9c:a0:64:ba:c2:a9:a1:b8:
4c:88:05:21:a8:82:f9:88:79:d5:a8:69:50:e5:42:
47:b5:bb:ff:40:06:ab:35:02:21:85:45:4e:d7:ab:
26:1d:9d:09:d1:a9:8c:cf:ac:a1:1e:02:a1:ed:d2:
40:c2:1f:fb:8f:a0:13:30:fa:37:bb:9a:89:98:cf:
49:2f:4d:33:42:f5:88:27:f4:4a:8a:d2:15:1a:22:
87:86:a3:9b:11:7c:41:da:af:92:ce:cd:b8:0c:50:
9c:f8:bc:37:5c:ea:ca:b8:17:38:5c:72:42:a6:e5:
f0:90:e4:23:77:c5:4a:ce:f3:f9:6d:95:e1:ee:10:
d7:ad:b5:a3:c5:ae:ac:1d:2c:de:60:96:a5:c9:b8:
f8:a3:52:16:3f:fc:b9:05:3d:e7:8e:5a:ac:3d:c0:
e2:cb:24:2e:2a:de:f6:12:1f:26:51:ca:44:5e:48:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3C:9E:AE:06:9D:1A:CA:4C:03:36:F1:C5:61:3B:B6:F7:18:87:AD
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/AjyergadGspMAzbxxWE7tvcYh60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
81.22.134.0/24
81.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
67:54:fa:7a:63:1b:c4:37:f2:ba:70:de:19:39:23:e8:ff:63:
73:79:28:7e:0a:aa:80:08:5a:50:3c:81:a8:72:7d:dd:2d:89:
6a:ef:59:54:68:f7:11:75:89:64:1e:55:b6:7e:66:9d:09:91:
41:7f:29:09:97:7f:ea:9d:c6:d0:10:ff:61:6e:72:c3:af:de:
0a:27:9f:56:d3:4d:6d:17:a0:aa:4e:b3:ac:4d:90:1c:79:f3:
69:23:57:39:91:5b:97:ae:b8:aa:10:58:57:00:2e:31:8a:73:
41:92:d1:af:21:11:22:02:b0:bc:5c:b7:54:50:e5:72:dc:db:
cc:80:77:1b:8f:91:cf:dc:a7:95:d3:e1:7e:b3:8a:99:d4:30:
c4:6a:b3:78:0c:f2:2a:0c:96:ac:40:c4:d6:8d:f1:7a:3c:0b:
0e:86:75:2c:f5:dd:12:2f:4e:d0:bb:44:43:a0:2d:eb:01:24:
bd:a8:58:11:43:28:31:a5:d4:0e:7c:0c:57:39:89:2b:f0:dc:
f1:cd:2b:69:97:12:68:c7:0c:99:e3:f8:cb:28:6a:a0:04:84:
02:dd:c3:58:f9:c6:e1:40:9a:38:69:aa:b7:0e:4f:75:d6:11:
91:3e:e9:b2:6d:bc:82:0a:51:32:21:30:e5:63:e8:d8:14:9b:
52:a0:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org