Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/EcCRJg55-eTMCoi1mtqy7pzsKm8.roa
File: EcCRJg55-eTMCoi1mtqy7pzsKm8.roa (raw, json)
Hash identifier: UMpgPc8oSHkwSHH7nkScITI9r1BbYgOm9whKJdgorHY=
Subject key identifier: 11:C0:91:26:0E:79:F9:E4:CC:0A:88:B5:9A:DA:B2:EE:9C:EC:2A:6F
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CC649C62ABCB6BA97F258A836384D5214
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/EcCRJg55-eTMCoi1mtqy7pzsKm8.roa
Signing time: Mon 01 Jan 2024 18:29:32 +0000
ROA not before: Mon 01 Jan 2024 18:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 81.22.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 09:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:c6:2a:bc:b6:ba:97:f2:58:a8:36:38:4d:52:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 18:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c091260e79f9e4cc0a88b59adab2ee9cec2a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:30:af:50:b6:b7:b3:92:00:2d:a7:b3:dc:
37:4b:c0:a0:cd:06:ba:fb:db:57:5a:d9:28:10:fc:
97:a6:f7:be:16:2a:8f:ae:c6:94:c2:a7:52:24:b1:
70:a8:bf:43:5f:98:a9:fa:36:51:d2:b3:a7:80:fc:
65:8f:7e:39:ad:61:50:24:89:ba:08:48:49:6b:33:
d5:48:aa:f2:b2:ee:b3:d7:b1:90:b9:0a:55:41:c7:
b0:b5:8c:6e:c6:9f:70:85:07:3e:9b:15:ce:d5:4d:
c4:a8:cb:d3:14:ef:35:a2:9c:72:97:38:d7:93:13:
3c:aa:58:aa:7f:92:4e:b1:cd:84:b7:2b:10:12:9c:
98:f5:f1:e8:a6:d6:2f:e8:5d:1c:c7:6c:20:41:9b:
5d:3e:8b:86:0e:ec:7f:67:55:44:41:ac:09:c3:a1:
84:46:9b:90:0f:da:99:d8:24:f3:39:a0:ce:e0:b4:
77:42:b9:3b:0e:43:31:fe:ee:ca:49:19:c8:45:f6:
8f:12:9a:0c:5b:2f:18:41:41:13:dd:d5:e2:c2:72:
bc:a5:81:8c:b1:3f:30:eb:ca:6b:95:a0:b9:77:4e:
99:f6:9d:75:e0:3c:c6:c5:64:41:51:d9:29:f3:c4:
ea:f3:63:37:6c:93:0d:49:b9:b6:21:47:2b:2a:92:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:91:26:0E:79:F9:E4:CC:0A:88:B5:9A:DA:B2:EE:9C:EC:2A:6F
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/EcCRJg55-eTMCoi1mtqy7pzsKm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dd:ce:1a:25:92:90:8c:d4:8a:5e:e7:10:63:77:0a:51:cc:
73:8c:28:bf:43:93:e4:d7:be:5a:32:75:cf:62:60:cb:41:e5:
d8:ac:05:03:5e:86:7a:cc:cf:8a:07:9e:fc:98:4a:dd:ac:00:
61:f2:1c:0a:7d:db:97:b9:bc:8e:e5:94:63:ce:3e:eb:cc:b0:
c0:6b:f8:94:52:d5:4a:25:2e:29:ac:8c:37:72:ad:0a:82:5c:
53:b4:f0:fc:f3:5a:cf:41:ef:6f:82:cf:9c:fc:35:8f:c0:ec:
d9:a3:fa:05:f9:4a:98:29:5b:76:30:61:7c:69:db:37:5b:0a:
ad:c0:d2:f1:c1:0d:58:93:c3:72:7e:b9:1a:f2:83:b3:42:64:
7c:76:41:ad:62:f5:4a:87:02:5a:e3:c6:6d:c4:3f:0b:8e:4e:
a2:dc:70:6b:ab:61:0f:e1:ed:78:b0:43:5c:3e:d5:c8:fa:08:
f3:10:06:40:9a:9a:44:56:fd:b1:df:df:08:95:66:45:d9:e0:
0e:b1:4c:7b:e4:78:b3:63:3f:4e:91:bb:71:f7:61:53:2f:5e:
9a:52:81:a6:28:92:69:86:6f:08:60:26:92:df:a3:ea:2b:a8:
ed:3b:ae:30:0d:08:91:c7:01:57:9e:47:b9:80:71:13:b0:8a:
54:eb:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org