Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CTBp0xX7yEcVYivQz_DrreaQpBI.roa
File: CTBp0xX7yEcVYivQz_DrreaQpBI.roa (raw, json)
Hash identifier: wujoEUEzXHvXGp9l7p0GFzfJ6vCMQrkLzMdFWH/v2MQ=
Subject key identifier: 09:30:69:D3:15:FB:C8:47:15:62:2B:D0:CF:F0:EB:AD:E6:90:A4:12
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188A9EBA33AA2672773F6D757B21CD2A100
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CTBp0xX7yEcVYivQz_DrreaQpBI.roa
Signing time: Sun 11 Jun 2023 10:06:12 +0000
ROA not before: Sun 11 Jun 2023 10:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 81.22.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 08:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:eb:a3:3a:a2:67:27:73:f6:d7:57:b2:1c:d2:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 11 10:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=093069d315fbc84715622bd0cff0ebade690a412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:3f:4c:58:9d:4c:09:9f:bf:65:08:67:5b:
ef:c6:df:16:48:72:43:ea:89:06:64:24:5a:38:74:
fe:a5:1d:70:b0:e8:6e:b1:92:70:b6:dc:c1:0b:98:
24:b0:cf:69:04:3a:09:42:2b:f5:ae:a9:db:ff:21:
1d:00:e2:75:0e:64:6e:3b:20:a3:f7:c6:21:3a:fb:
f9:14:d0:70:5f:3b:5f:5a:4d:a8:a2:98:4a:d2:59:
bc:f8:c7:fa:93:01:57:ab:f8:b5:2a:69:24:d4:34:
5f:9a:37:d8:e1:2f:0e:13:81:cd:55:b9:6b:aa:5b:
fd:39:5c:65:fc:86:f1:9d:76:a7:c4:4f:e1:56:f7:
9c:60:10:fc:e5:64:15:ed:56:eb:ea:2c:ae:b0:71:
42:b5:a1:f7:eb:7d:98:0c:57:44:81:b9:65:a0:bd:
c4:06:87:be:56:1b:25:8a:6d:d1:df:ba:8c:8d:32:
c8:81:92:bf:78:89:1f:d9:a8:e8:06:b2:dc:0a:c5:
78:7c:8d:52:b2:12:b0:96:c1:f9:da:a2:64:8b:39:
17:3f:d9:44:22:64:7b:41:91:a9:57:fe:c3:95:5a:
57:9c:f0:8f:26:4b:f4:46:9c:09:c4:69:f6:c6:eb:
6e:a1:7d:78:eb:3e:44:6f:92:10:bc:30:da:3f:86:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:30:69:D3:15:FB:C8:47:15:62:2B:D0:CF:F0:EB:AD:E6:90:A4:12
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CTBp0xX7yEcVYivQz_DrreaQpBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:91:90:07:cd:9f:0e:af:94:35:4b:dd:2a:1a:f1:e6:25:9e:
15:79:21:65:cc:70:bc:0e:7d:64:4d:70:5e:6f:7d:3e:08:9b:
96:ea:26:63:c7:43:a7:e0:69:d8:4c:16:8a:8f:25:16:98:d8:
79:5f:68:e9:bf:64:7f:59:d9:09:48:e2:62:7f:3a:0c:0b:71:
61:c7:bf:40:15:25:e2:8c:d5:c2:a6:0b:76:e2:94:c3:4e:36:
db:f6:dc:cc:f8:ea:97:05:44:eb:db:3d:59:40:da:32:60:57:
a1:8a:f6:8b:d6:2f:7c:b5:9e:f9:de:2e:43:4d:77:ca:cd:f9:
99:c2:a7:69:22:ad:9c:f3:11:28:dd:15:ed:5e:59:97:b0:cb:
1f:a1:f9:81:11:1f:c4:ae:a2:63:f6:84:4f:08:20:c5:f3:f3:
7a:79:65:b6:1f:b7:de:59:8b:d9:bb:86:f7:58:41:a4:84:17:
17:98:fa:d7:e5:56:b2:7b:91:a8:c7:6e:1a:67:87:e9:a0:6a:
f6:5d:28:f2:36:85:d7:69:fb:89:84:15:88:34:1b:1c:0d:80:
bd:78:bc:88:c1:c9:67:a1:9f:bd:75:ae:2c:f4:5a:a1:b7:52:
d9:ce:a8:c5:5c:68:c6:43:06:93:0b:4d:e7:b1:2e:d6:9f:6f:
9b:a4:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org