Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/B65KL5nJbBFsLpgPY2vnb89ix78.roa
File: B65KL5nJbBFsLpgPY2vnb89ix78.roa (raw, json)
Hash identifier: +DSMZzO+wgkzD9q28RQihGOX27yqz1acMRmlLoPCGBI=
Subject key identifier: 07:AE:4A:2F:99:C9:6C:11:6C:2E:98:0F:63:6B:E7:6F:CF:62:C7:BF
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01914DC8E9F669B7600C24C308DA8011418D
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/B65KL5nJbBFsLpgPY2vnb89ix78.roa
Signing time: Tue 13 Aug 2024 22:08:18 +0000
ROA not before: Tue 13 Aug 2024 22:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
81.22.140.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 16:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:c8:e9:f6:69:b7:60:0c:24:c3:08:da:80:11:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 13 22:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ae4a2f99c96c116c2e980f636be76fcf62c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:6d:15:0e:36:bf:68:ca:22:5d:c8:99:f0:
d7:44:f4:bf:c3:f5:b4:51:a3:13:c3:e3:c6:c0:21:
76:5e:19:24:cc:1a:fb:9b:e9:09:7c:d0:75:20:70:
64:1f:48:b4:27:7e:ab:1c:8e:ff:a4:3a:66:7a:d3:
96:ee:75:42:8c:bc:e9:57:23:77:17:f4:7d:1a:32:
fe:59:e2:3a:c7:bc:02:ef:56:6e:88:b5:16:e4:01:
3b:ee:91:1f:93:5b:c8:90:68:ad:48:9e:29:0a:ed:
bb:6a:de:1a:e0:62:e0:f7:96:64:5d:56:3d:0d:ff:
57:bf:53:aa:b8:ee:02:6a:b8:cb:9f:77:37:fa:31:
0e:b4:c3:c3:e9:e0:7b:87:ad:98:bc:54:3c:dd:f9:
35:84:0c:c9:f1:17:73:27:d8:59:ea:18:4b:7e:96:
4c:7c:df:5c:d9:8b:9b:f3:b3:41:04:c0:3c:7b:20:
14:45:c8:94:0f:12:2c:72:4a:16:bd:df:09:49:50:
15:2e:1b:78:87:95:01:36:39:98:ae:fa:f2:51:50:
82:4b:5d:d0:f1:5b:b0:31:b9:d0:eb:88:1b:67:fd:
3d:a0:61:66:c8:61:0e:a5:ba:9c:d9:3b:b2:00:3c:
63:a2:c3:41:87:cb:9b:c8:5c:69:a9:19:c9:85:42:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AE:4A:2F:99:C9:6C:11:6C:2E:98:0F:63:6B:E7:6F:CF:62:C7:BF
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/B65KL5nJbBFsLpgPY2vnb89ix78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/21
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:72:f3:36:61:a1:a7:e5:cd:40:0c:8f:57:41:dd:73:51:25:
97:aa:86:a0:52:b9:9f:f3:b3:39:bd:18:9f:19:3e:08:d4:32:
73:60:bc:5e:74:96:81:6f:3c:b4:ad:22:ae:9d:68:d0:92:9c:
ef:95:96:f9:a2:b5:2a:b5:29:30:8e:df:bc:d0:c1:a7:1f:13:
b0:bf:47:8e:9d:c6:f6:40:76:e4:00:cb:fd:05:a9:4f:68:19:
e8:ad:36:91:d5:9d:07:25:34:a1:23:21:4d:6e:da:fb:d6:e7:
0d:f2:15:a3:f1:74:29:37:f9:57:b9:ba:41:91:e1:b4:32:5d:
49:6c:f4:71:d4:fc:64:70:4e:58:7a:9d:e6:62:b7:ab:63:82:
e0:70:8c:ed:8f:87:c0:db:12:58:6c:95:7c:58:92:b3:72:62:
72:83:7b:21:b2:11:f0:83:c8:78:ef:28:a2:01:b4:08:ac:30:
ae:0c:2e:77:f7:69:a3:b0:9f:be:75:2e:66:4a:c2:b9:c0:61:
6b:11:ae:e6:4f:21:6d:df:18:63:8c:3d:f9:42:b3:68:24:c0:
01:84:85:bc:8a:f2:3f:ff:7e:a1:ad:7f:13:62:66:75:54:83:
4f:c1:b1:58:0d:65:f9:6c:d7:b6:0c:e9:a5:87:c4:bb:6a:f3:
54:61:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 18:53:34 2024 by rpki-client on console-fra.rpki-client.org