Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/D5hCnIbfgqlQpgd7KC-nrIyixBs.roa
File: D5hCnIbfgqlQpgd7KC-nrIyixBs.roa (raw, json)
Hash identifier: 39pOjBCPd6XalkAait60Ub4TeoYnZkzt7MekQZtvjg8=
Subject key identifier: 0F:98:42:9C:86:DF:82:A9:50:A6:07:7B:28:2F:A7:AC:8C:A2:C4:1B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01859AFD2401ABCE58C133C39FD1C6568728
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/D5hCnIbfgqlQpgd7KC-nrIyixBs.roa
Signing time: Tue 10 Jan 2023 09:22:39 +0000
ROA not before: Tue 10 Jan 2023 09:22:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 81.22.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 09:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:fd:24:01:ab:ce:58:c1:33:c3:9f:d1:c6:56:87:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 10 09:22:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f98429c86df82a950a6077b282fa7ac8ca2c41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:75:a6:c2:70:98:30:76:74:08:8a:db:8f:
ec:69:39:9c:08:69:45:1e:0c:48:19:91:1d:d9:19:
6d:06:c4:1d:fc:e1:8d:2e:90:44:1b:cb:41:e6:ca:
a8:9a:88:72:db:2a:76:14:cc:a5:b1:8d:da:fe:ea:
ea:5e:1d:43:43:41:83:5b:54:c7:07:1e:f6:16:b6:
05:5d:75:78:80:64:a5:e9:66:7d:33:21:0a:9e:00:
05:2c:6c:88:c3:0f:91:56:18:b3:fb:73:c1:f1:24:
b0:6c:98:0e:88:47:d2:34:e4:cb:5f:a1:c5:e2:b5:
db:af:a5:5f:2d:43:cd:bd:87:28:97:d9:67:f8:b9:
a0:33:4e:09:eb:43:eb:e7:c3:fd:6f:50:24:cc:5a:
23:b3:c1:f0:e5:06:5a:11:5e:4f:a9:26:e2:3e:d1:
35:9b:73:98:49:af:76:ac:7a:82:8d:43:4f:08:ee:
fb:c3:9b:a4:97:1a:47:c0:5e:0a:e8:da:a2:e4:6f:
35:8f:14:1a:28:a7:6c:0b:bf:25:fb:45:91:89:1f:
3a:33:65:15:d5:f9:ae:26:13:00:ad:1b:1f:38:4b:
95:a3:8a:e7:e3:1c:8b:3e:b7:01:0b:be:03:2e:86:
75:23:36:cd:1a:98:e6:55:3c:4d:45:f5:63:d0:d3:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:42:9C:86:DF:82:A9:50:A6:07:7B:28:2F:A7:AC:8C:A2:C4:1B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/D5hCnIbfgqlQpgd7KC-nrIyixBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
45:4a:a0:e4:fa:af:f2:1a:55:bb:9c:62:e6:a4:39:35:f0:e5:
29:9c:03:38:28:96:6e:9c:f8:40:bb:40:27:2b:e9:0d:9b:40:
10:26:93:07:bb:8c:57:ea:4e:02:52:dd:56:59:c2:1d:48:94:
b7:51:9e:32:4f:7b:bb:24:4f:b5:cb:57:52:7a:2e:e6:89:dd:
ba:87:ea:8a:c5:0c:e2:b4:e7:db:a2:da:b3:96:17:66:ce:c0:
3e:cb:56:09:ef:50:c0:70:e2:c9:5f:38:bb:a0:8a:8a:04:9c:
b7:1e:78:17:22:e9:fd:d6:51:05:a5:4a:50:48:41:c1:f2:ef:
d8:e8:a0:a6:c4:db:cb:61:0b:18:2b:c2:9c:12:7e:0c:44:4f:
d9:36:b9:cf:63:33:25:98:ef:ba:0d:72:a4:98:39:51:8b:5e:
17:52:19:cb:74:21:9a:52:be:4f:17:89:b1:da:9c:1a:2a:ed:
56:f6:10:89:61:08:0f:eb:3e:8e:06:2a:73:ae:db:6b:02:fd:
7e:79:ba:f2:0f:8d:c4:39:d6:61:4e:b1:95:73:00:c8:1d:27:
c3:1b:6e:55:ea:79:10:22:9a:06:62:b1:84:87:5e:f7:8a:c6:
e5:ce:2b:81:bf:f1:02:9f:f3:56:9c:f6:7d:60:6a:95:7d:c7:
07:1f:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org