Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Kw1us0fUf_A2W7BMWejtEGUUtuw.roa
File: Kw1us0fUf_A2W7BMWejtEGUUtuw.roa (raw, json)
Hash identifier: 9NJR7KxVU4/otqPseoSF+9YIhafuw0Asnnad+R40iNs=
Subject key identifier: 2B:0D:6E:B3:47:D4:7F:F0:36:5B:B0:4C:59:E8:ED:10:65:14:B6:EC
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CA0D4EDF76748034A9C561AD0584F39BC
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Kw1us0fUf_A2W7BMWejtEGUUtuw.roa
Signing time: Mon 25 Dec 2023 11:55:58 +0000
ROA not before: Mon 25 Dec 2023 11:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 24
81.22.140.0/22 maxlen: 24
109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
81.22.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Dec 2023 09:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:d4:ed:f7:67:48:03:4a:9c:56:1a:d0:58:4f:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 25 11:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b0d6eb347d47ff0365bb04c59e8ed106514b6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e8:3b:78:53:c3:22:1f:34:b1:1c:3b:63:72:
19:d3:33:15:f3:c3:a2:df:a2:77:bd:de:57:de:d2:
86:f9:44:31:11:d8:07:d8:46:e8:db:d2:8f:f6:3d:
63:8e:a0:f3:0b:04:d3:37:03:d8:78:ae:ed:1f:62:
91:60:a9:92:4a:1f:58:24:99:f3:47:92:b2:37:d3:
49:92:b2:78:ff:db:04:84:ee:8a:b1:f6:e5:b6:38:
f2:bc:11:71:6a:8d:84:22:26:8b:c3:c0:b6:d0:f5:
69:5e:23:15:09:e0:ba:04:8c:00:4f:e3:98:26:06:
84:c5:38:ae:2b:83:89:50:61:7f:e3:bd:1d:05:62:
62:47:12:de:e3:db:a6:7d:de:2e:3f:17:3b:a1:32:
81:80:56:c5:7e:82:18:d8:65:39:fd:f3:18:48:19:
5f:6e:2d:86:e5:30:da:c9:27:27:e3:34:13:3b:2c:
6c:3f:af:bb:29:77:e6:84:e8:fe:cb:d1:a1:b3:72:
06:2b:a8:52:74:aa:fb:43:78:33:00:0b:95:e0:50:
4d:6d:a5:06:96:61:bc:23:8f:71:a2:2f:d6:b9:03:
99:54:8a:a5:cc:93:e5:61:63:5c:b2:b6:ab:84:a4:
ec:86:18:56:6c:13:24:97:25:e1:38:52:39:1a:fe:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0D:6E:B3:47:D4:7F:F0:36:5B:B0:4C:59:E8:ED:10:65:14:B6:EC
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Kw1us0fUf_A2W7BMWejtEGUUtuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/24
81.22.136.0/21
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
75:45:2b:62:8a:77:54:58:9f:0b:09:55:66:21:6b:b7:57:08:
cb:16:fd:99:80:0c:80:78:54:85:81:5d:77:b3:b7:92:51:67:
de:3d:66:35:96:82:70:6c:6e:e2:da:bb:ab:23:04:08:45:e7:
36:38:2a:bb:10:0b:fb:1e:ec:7b:da:e6:c0:ae:e2:be:09:1e:
00:64:4a:07:7a:22:d5:83:d5:f7:8e:72:57:e1:50:0c:8b:14:
da:13:c7:9c:82:2a:c3:ef:b2:06:1d:23:69:82:71:09:e9:af:
e6:42:7a:13:ad:a6:72:d8:05:b3:e3:e8:f1:f0:38:3d:a3:2e:
05:8d:c8:32:8f:b2:aa:bb:61:ac:bc:fc:c9:7c:5e:79:f0:9e:
53:fb:67:c0:90:8b:67:48:4d:ce:3b:5a:23:1f:37:a3:d6:03:
18:14:ef:10:00:5b:56:1d:e4:dc:23:df:27:a1:75:38:d7:48:
ca:53:c5:95:63:48:ff:27:b2:5d:08:5d:0e:66:61:80:eb:d5:
4d:1a:3f:43:68:d7:41:47:67:15:5f:31:20:8c:04:16:ad:59:
6d:85:5f:cd:1a:72:9e:49:f1:27:7e:68:a7:34:eb:1c:7a:f4:
e6:d4:61:b5:00:83:79:f2:dd:d1:4c:d9:af:fa:f8:2c:a1:4f:
e5:66:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org