Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Fhf503MU9CyYHm_uBwml1F_4NZI.roa
File: Fhf503MU9CyYHm_uBwml1F_4NZI.roa (raw, json)
Hash identifier: bVs4bRxr1GstqsYQ1p7PfBplXzyeolE8a28JKXFhW3I=
Subject key identifier: 16:17:F9:D3:73:14:F4:2C:98:1E:6F:EE:07:09:A5:D4:5F:F8:35:92
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01871CD2C1029EB2B103411752D4733DA6D8
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Fhf503MU9CyYHm_uBwml1F_4NZI.roa
Signing time: Sun 26 Mar 2023 07:29:46 +0000
ROA not before: Sun 26 Mar 2023 07:29:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150670
IP address blocks: 81.22.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 08:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1c:d2:c1:02:9e:b2:b1:03:41:17:52:d4:73:3d:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 26 07:29:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1617f9d37314f42c981e6fee0709a5d45ff83592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:05:fc:18:60:7b:a7:7e:ab:25:5a:f4:09:
51:66:df:07:6b:63:af:2a:0d:7c:36:5a:41:49:58:
83:84:12:20:5e:ac:18:e1:f0:2f:3c:a5:c2:16:d7:
31:23:ad:b1:46:80:80:30:e8:c9:a6:58:37:0d:1e:
46:d9:31:23:f9:b2:4d:68:23:d2:43:14:54:78:ae:
0d:ac:35:ab:e6:01:08:b8:81:db:27:d5:fb:52:8f:
cb:1c:5f:65:f5:07:33:e1:ee:c3:c3:1c:f0:1e:58:
7a:c2:f3:3f:3d:f2:7a:db:d5:88:e1:01:30:6b:a6:
33:2e:94:3a:52:37:f1:15:3a:8c:f9:94:d9:4c:52:
5f:a2:c6:97:44:ef:23:79:24:eb:c3:80:48:17:8f:
da:e4:06:c2:8e:e1:87:5f:81:dd:71:c9:78:ad:08:
dd:41:37:eb:6f:0f:db:3e:2c:d4:a1:31:d2:18:40:
de:93:4f:08:50:23:6a:37:2b:c7:61:97:4e:34:3b:
47:b6:2d:82:2d:37:a5:bc:e8:37:ca:a0:6a:0d:6f:
85:91:d3:35:84:c4:01:fe:a2:0a:1f:1f:42:3f:95:
d0:52:6a:bb:06:08:e5:5c:9b:fb:95:da:a0:e5:5f:
d0:0a:60:02:ff:8f:eb:0f:4c:e3:00:ef:d9:cb:27:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:F9:D3:73:14:F4:2C:98:1E:6F:EE:07:09:A5:D4:5F:F8:35:92
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Fhf503MU9CyYHm_uBwml1F_4NZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:36:45:c9:73:2d:24:e2:16:2a:0c:1a:c8:44:6b:c9:45:14:
59:f3:95:36:40:58:6d:40:aa:02:05:87:9c:c2:b2:d5:13:bf:
58:4f:2f:ce:13:59:c0:12:0c:ed:5f:1d:c3:38:5d:01:ea:da:
38:4c:bc:93:aa:57:e7:9c:e7:a0:65:ba:41:54:e6:39:f9:e5:
b6:d0:cf:27:cb:eb:1d:2f:69:49:98:7e:1c:dd:b9:89:2a:27:
99:8f:16:50:7d:30:fb:8f:c7:69:3f:45:48:2f:ca:53:35:dd:
4d:86:f6:7c:99:c9:78:9f:fb:35:c2:ec:6a:40:ef:ca:3b:bd:
8a:7b:e1:55:13:11:14:31:d4:05:3a:c8:31:90:ba:1e:8d:6d:
90:cc:23:f7:49:9a:4a:88:5e:ff:e4:c9:5b:f5:b3:bd:4f:88:
8e:c9:0d:d6:2e:12:02:12:0e:93:1e:3f:98:23:4c:4c:13:8b:
26:d1:0f:75:10:72:04:42:ce:6d:33:86:96:3b:c7:17:74:e0:
a9:c4:3d:b2:8e:ba:67:85:72:1b:b2:34:f1:c1:5b:11:f7:67:
a1:8f:cc:b4:f1:3c:42:55:27:48:39:8a:3a:0a:27:c1:77:06:
48:a1:ee:73:86:ab:84:55:d7:b6:56:28:61:b0:9e:83:c6:09:
87:95:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org