Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Av0H8ajv1N-2P3sPDLC8kCpYxIE.roa
File: Av0H8ajv1N-2P3sPDLC8kCpYxIE.roa (raw, json)
Hash identifier: JqJv1Ew6Fa06SMJH/ACnyJTmZxILBTf8i6FqC9Rwj1A=
Subject key identifier: 02:FD:07:F1:A8:EF:D4:DF:B6:3F:7B:0F:0C:B0:BC:90:2A:58:C4:81
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018DC6BA49BF8B788A4F4C71F24CC99EBF1A
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Av0H8ajv1N-2P3sPDLC8kCpYxIE.roa
Signing time: Tue 20 Feb 2024 13:35:13 +0000
ROA not before: Tue 20 Feb 2024 13:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.22.129.0/24 maxlen: 24
81.22.130.0/24 maxlen: 24
89.185.1.0/24 maxlen: 24
89.185.3.0/24 maxlen: 24
109.72.117.0/24 maxlen: 24
109.72.120.0/24 maxlen: 24
109.72.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 15:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:ba:49:bf:8b:78:8a:4f:4c:71:f2:4c:c9:9e:bf:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Feb 20 13:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02fd07f1a8efd4dfb63f7b0f0cb0bc902a58c481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:5c:8b:a0:c8:bf:66:63:0a:19:d5:1d:92:
2d:31:87:af:0c:d2:2b:54:41:8d:b5:b8:2b:b7:b5:
d1:21:ed:09:8b:b6:eb:30:d7:6e:70:ca:18:c5:67:
d0:59:61:36:e6:d1:54:9c:4f:09:7e:67:2b:63:65:
5f:d5:80:1a:f4:f7:14:ef:08:44:23:44:9d:da:6d:
4a:1b:6d:fa:9b:f0:3a:ec:41:36:ca:20:40:2f:a6:
8b:53:54:cc:3c:56:2a:e6:31:82:b2:5f:29:f9:36:
1f:f0:97:79:36:62:e3:c2:74:4b:9b:af:fa:bd:7b:
66:05:1c:ee:1e:29:ad:63:1e:cf:1f:2b:35:de:df:
7c:87:f6:f2:6a:2c:d4:08:e2:c7:84:9b:a5:d6:12:
bc:c1:96:c0:ed:b7:2b:4c:e0:26:61:98:de:e2:a2:
57:e0:67:1b:34:cf:1f:be:29:31:1f:c7:8c:5f:cd:
ff:b7:f2:a3:ec:ee:16:18:b0:be:43:1e:21:45:00:
b4:39:b3:c9:0a:d0:bc:79:f6:47:dc:cc:ef:e6:b8:
b3:b8:bf:f1:9d:d0:56:7c:67:7f:1b:7a:36:30:c6:
ba:1a:0a:20:a9:41:7e:81:b6:86:2a:71:1f:85:69:
cd:5a:82:39:41:77:2c:5d:b2:bb:80:03:5b:9f:cc:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:07:F1:A8:EF:D4:DF:B6:3F:7B:0F:0C:B0:BC:90:2A:58:C4:81
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Av0H8ajv1N-2P3sPDLC8kCpYxIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0-81.22.130.255
89.185.1.0/24
89.185.3.0/24
109.72.117.0/24
109.72.120.0/24
109.72.127.0/24
Signature Algorithm: sha256WithRSAEncryption
89:45:94:62:60:69:5d:8f:02:a0:65:65:3a:bc:a3:b8:39:11:
51:8f:f8:f1:24:9f:be:78:cf:a6:f1:82:67:e9:e7:0c:50:67:
c0:75:03:c0:0d:49:38:91:4f:f4:0c:02:d8:e8:68:3d:5b:59:
28:25:bc:b5:0f:97:5c:72:93:c9:4a:e3:d8:d3:3f:84:76:c8:
2f:17:71:67:fe:c3:0f:7e:c3:67:f9:8a:10:bc:26:8f:a4:ca:
43:19:9c:e0:1d:c0:6f:3f:55:ac:d8:c8:ad:d3:47:59:3f:a3:
47:c0:93:0c:40:9d:fc:b7:51:77:c8:1e:99:9c:a8:c7:4a:fe:
4e:60:82:2b:8f:8a:a2:db:bf:f9:9f:b8:25:2f:fa:f8:2f:88:
4d:1a:50:0d:fe:b9:84:a8:1c:62:f6:d6:ff:b9:2f:8a:a7:32:
93:97:e5:ec:14:54:69:b2:30:18:d7:81:ce:6c:15:04:8f:98:
7f:69:3d:d9:bb:be:c3:1a:29:c5:ef:6d:cf:77:80:e8:4a:da:
a2:a8:cb:be:29:ac:7e:97:45:7f:29:48:54:54:59:31:a4:81:
5f:94:de:6c:dd:29:39:2a:82:23:ba:e8:c4:0b:df:9d:ed:b1:
00:7c:16:9c:8e:ee:3e:39:6e:8b:0f:38:96:7e:d9:5c:22:3c:
28:25:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org