Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/BeVohlDOiuzDuLtpZzBBDLqoi7k.roa
File: BeVohlDOiuzDuLtpZzBBDLqoi7k.roa (raw, json)
Hash identifier: sElvDkt/bDOZ6ACd1fYH3veYhZ15xTxpIDNeZqTEa5Y=
Subject key identifier: 05:E5:68:86:50:CE:8A:EC:C3:B8:BB:69:67:30:41:0C:BA:A8:8B:B9
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188543CB647016CA5BD6442B23D59FCEF05
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/BeVohlDOiuzDuLtpZzBBDLqoi7k.roa
Signing time: Thu 25 May 2023 18:47:24 +0000
ROA not before: Thu 25 May 2023 18:47:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.22.135.0/24 maxlen: 24
89.185.24.0/22 maxlen: 24
109.72.127.0/24 maxlen: 24
81.22.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 07:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:3c:b6:47:01:6c:a5:bd:64:42:b2:3d:59:fc:ef:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 25 18:47:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05e5688650ce8aecc3b8bb696730410cbaa88bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:ba:6e:cf:50:c9:32:39:a6:91:ab:28:79:
fd:58:06:b3:55:13:11:60:6d:47:54:02:76:a9:11:
78:18:7b:4d:72:32:52:da:40:45:42:80:03:ce:a7:
72:09:a9:2f:38:11:08:52:1e:36:bb:f0:4d:02:f8:
85:dc:d0:e5:17:2d:fb:05:6e:80:76:e3:3a:9b:31:
dd:b2:b7:42:e6:5c:1e:65:fd:36:1b:80:1a:24:54:
cb:52:7e:6a:1c:51:9b:88:1c:49:0a:65:d8:28:43:
2f:93:5c:1d:1a:5e:42:57:c9:d3:fd:ad:ca:b1:d1:
ee:63:e3:9a:3f:1d:bb:12:26:bd:4a:1c:26:12:85:
fe:65:d5:08:9a:11:e6:95:42:17:2f:63:c8:04:f1:
ea:12:fa:7c:ca:a3:1b:5e:fc:9d:4c:ac:21:ae:37:
2d:30:48:da:db:22:d4:00:b7:bc:85:d8:e2:be:aa:
b7:ed:74:21:b1:78:88:a6:78:b7:0b:fd:8c:9d:dc:
0a:da:33:b8:ed:a6:fb:74:24:6f:a0:33:ef:ac:ac:
1b:60:d6:f8:90:f3:7f:10:c0:6f:11:95:ef:6c:99:
b1:e8:39:4d:ee:43:be:67:34:6c:d8:ce:65:7c:a5:
f2:76:ac:5c:2c:a9:23:9b:a7:e1:49:d6:ea:69:51:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:68:86:50:CE:8A:EC:C3:B8:BB:69:67:30:41:0C:BA:A8:8B:B9
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/BeVohlDOiuzDuLtpZzBBDLqoi7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/24
81.22.135.0/24
89.185.24.0/22
109.72.127.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7a:7d:9d:85:7b:d4:73:fd:54:92:92:21:8d:d0:5f:d2:79:
8f:be:31:06:7a:32:93:4a:f6:66:9d:16:18:11:dd:0e:61:7d:
8e:e4:67:f8:e2:20:04:dd:b3:80:4e:88:ab:2e:11:15:43:f6:
66:dc:a7:7f:b1:46:49:a4:e7:b2:e4:8c:6b:c1:d1:44:fb:18:
bf:00:9b:46:64:38:cb:d0:34:ea:bc:3d:14:a6:2c:4c:05:3e:
01:7f:95:49:c3:c3:c3:60:ed:2e:2f:81:b2:e5:58:c9:74:3b:
5c:5c:dc:6d:85:61:17:74:61:cb:21:e9:c3:2d:03:f2:cd:7b:
86:19:65:5c:6f:e0:4a:94:54:6b:69:0a:41:c7:46:6c:cf:5d:
80:2d:88:1b:29:ab:0a:34:8e:14:7f:b6:ca:e5:aa:a5:ce:44:
06:8d:47:a9:1d:b4:b1:99:45:4d:53:25:a6:c1:81:3d:3f:a9:
20:c6:cd:72:02:0b:d9:8c:e9:02:d0:a2:6b:f9:23:82:13:53:
91:b4:0e:ee:63:91:fd:1c:69:66:75:48:6e:05:0f:03:ea:9e:
98:9e:41:1d:9c:0a:6a:51:79:f8:3f:a8:ed:e7:06:80:5d:aa:
73:71:19:7c:98:82:ec:af:eb:67:d2:ac:5d:4c:b0:82:2b:17:
3a:a0:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org