Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IfAyAQsy78SZd2GJKSRi_3rGWak.roa
File: IfAyAQsy78SZd2GJKSRi_3rGWak.roa (raw, json)
Hash identifier: tkZDQeiwORRCv6vqFde3oblbmgQgkb19zb/ZFRBE43s=
Subject key identifier: 21:F0:32:01:0B:32:EF:C4:99:77:61:89:29:24:62:FF:7A:C6:59:A9
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018D5EC8286FFCF28457447E6F3398E4DC4F
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IfAyAQsy78SZd2GJKSRi_3rGWak.roa
Signing time: Wed 31 Jan 2024 09:09:52 +0000
ROA not before: Wed 31 Jan 2024 09:09:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 81.22.128.0/24 maxlen: 24
81.22.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 13:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c8:28:6f:fc:f2:84:57:44:7e:6f:33:98:e4:dc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 31 09:09:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21f032010b32efc499776189292462ff7ac659a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:0a:b2:62:13:e7:96:1b:86:af:68:11:d4:
f2:04:b0:7e:83:84:e4:e7:5c:de:5b:be:30:ff:22:
54:53:b7:87:d2:f2:39:75:1b:13:f3:28:ee:45:19:
d1:46:dc:46:18:50:73:7c:51:79:02:8a:73:fa:a6:
4a:34:db:e2:76:c6:67:fe:9a:7a:05:60:5d:37:d5:
30:48:7e:59:21:ca:9d:28:b6:5e:a6:72:c4:5d:eb:
43:99:03:76:b1:78:30:f1:74:a3:65:e6:bc:1b:f7:
1a:2d:85:07:2b:f5:35:29:71:d6:3f:ff:32:6e:72:
74:93:76:5b:33:84:6b:17:a4:3d:40:a1:d0:31:57:
10:08:d5:c0:ed:69:2a:e4:c5:fb:db:42:10:0a:1c:
a9:61:6f:de:e7:96:6c:0d:b0:5f:13:52:6b:2b:20:
9a:2e:e8:47:bb:28:49:74:d9:52:4a:7a:71:79:1f:
2a:79:2e:78:c1:c5:18:02:a4:40:24:9d:85:81:c1:
46:d6:0a:c9:26:5b:18:8b:20:c0:36:72:7f:fb:b0:
64:41:5a:28:36:27:ea:87:b7:9e:ba:d3:c0:75:eb:
aa:39:ba:3d:94:ce:c6:21:4b:c1:54:d2:d9:8b:8a:
0c:cc:43:ea:5b:19:ff:f1:df:38:31:9b:c5:4a:29:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:32:01:0B:32:EF:C4:99:77:61:89:29:24:62:FF:7A:C6:59:A9
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IfAyAQsy78SZd2GJKSRi_3rGWak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/24
81.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d5:50:2e:af:3b:d8:16:37:5f:8f:1d:d8:42:2a:45:b4:bc:
b9:64:86:ec:6b:2d:c5:98:ce:c5:4f:3a:1f:7a:84:0d:aa:1a:
c0:33:59:11:35:93:dd:7f:ef:71:ce:c0:31:61:2f:de:83:5e:
5d:30:a8:8e:ff:74:f2:f3:64:8a:ba:f3:06:77:0c:8a:ca:c4:
8a:0c:ae:03:59:da:bb:78:cd:45:4e:25:c9:98:fb:fd:29:f0:
c1:d2:a4:28:9f:5d:9d:08:27:28:46:fd:64:3b:cc:cd:f5:1e:
cf:04:f2:1c:5d:b6:22:50:70:88:7c:83:e5:91:a1:13:86:3d:
a1:ed:31:a8:a7:8b:de:0b:33:11:98:b8:91:1f:ce:99:f9:77:
79:22:89:a5:92:b4:2c:df:08:0f:d1:2f:6c:83:44:68:36:24:
fd:a6:29:c6:ef:90:aa:77:58:76:34:40:cb:8d:8a:09:7f:82:
4e:e4:1d:73:ba:7b:e7:64:48:24:db:15:83:04:ba:f9:90:20:
68:71:33:59:aa:92:07:bf:09:a5:46:a6:7b:d4:0d:a4:76:a5:
58:3d:4c:20:e4:2c:d8:43:6d:da:19:19:42:51:1c:39:1a:17:
4e:a3:16:d1:8e:35:04:66:50:2c:9c:75:e8:9a:9b:99:49:a5:
15:2c:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org