Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/N1XY02qgpSJHkcXBLdv_kFt10EM.roa
File: N1XY02qgpSJHkcXBLdv_kFt10EM.roa (raw, json)
Hash identifier: ht45UdB4Mj9TotSSUsIrZaBYt3p4YWTJfhfdMbRoR6A=
Subject key identifier: 37:55:D8:D3:6A:A0:A5:22:47:91:C5:C1:2D:DB:FF:90:5B:75:D0:43
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0187755FD98DABB2337F2B6B1DF95E9410EF
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/N1XY02qgpSJHkcXBLdv_kFt10EM.roa
Signing time: Wed 12 Apr 2023 12:10:28 +0000
ROA not before: Wed 12 Apr 2023 12:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.22.135.0/24 maxlen: 24
81.22.129.0/24 maxlen: 24
81.22.130.0/24 maxlen: 24
81.22.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 18:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:5f:d9:8d:ab:b2:33:7f:2b:6b:1d:f9:5e:94:10:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 12 12:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3755d8d36aa0a5224791c5c12ddbff905b75d043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:1a:d0:0c:9c:e2:95:f3:fa:8a:3d:9a:80:
90:1a:54:43:df:25:2a:fc:3a:8d:ae:56:34:88:33:
36:1c:68:15:db:6c:c6:b6:22:64:ce:d2:0b:4e:83:
81:ef:26:dc:00:bd:cc:14:91:f9:0b:72:2d:5d:b2:
6b:ed:b1:10:e8:06:e2:b2:4b:ec:d3:18:b8:14:65:
cd:d4:ae:d6:02:e0:84:d1:f9:9b:c5:41:74:85:71:
2a:d9:44:a1:e6:9a:6b:6c:b6:59:ea:35:4f:6a:60:
a7:9b:c3:dc:27:09:9c:ab:9d:a9:71:7a:bb:1d:c1:
15:57:69:dc:59:a8:6a:1e:6b:ec:f8:a2:4e:30:77:
a0:1b:6f:f4:0d:39:25:d7:9b:22:b1:03:8f:36:08:
e7:57:c9:81:b5:38:ac:24:cc:57:ce:2c:b4:03:43:
fa:80:99:ef:39:8c:b9:5a:db:d5:fa:8a:6a:5a:af:
58:a2:9e:9b:7f:34:9e:d3:65:da:1e:08:b6:89:b8:
60:5e:64:b5:14:0a:68:d2:2e:ef:17:0e:e9:2e:4b:
02:38:44:0c:12:e0:b4:1c:71:28:ab:95:85:dc:1f:
ee:b4:91:24:83:96:37:bd:88:6d:1c:69:ef:68:e2:
3a:14:c7:a9:f4:65:40:f7:8f:57:09:fa:31:52:94:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:D8:D3:6A:A0:A5:22:47:91:C5:C1:2D:DB:FF:90:5B:75:D0:43
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/N1XY02qgpSJHkcXBLdv_kFt10EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0-81.22.131.255
81.22.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cf:e4:8e:7d:86:0e:30:ef:bd:cd:b8:20:68:26:d7:69:7d:
a9:a8:03:b4:ba:24:f5:59:5d:86:42:2a:91:d5:66:4e:4a:35:
88:27:c3:43:39:9f:c2:75:53:93:2b:27:98:0e:4b:e1:ac:32:
ed:5e:2d:ce:61:91:3c:34:a5:da:38:ff:3c:01:8b:80:a8:1e:
50:2a:cc:3f:e3:c9:77:fd:aa:16:42:04:c7:36:34:5e:0e:9b:
b5:20:5a:54:49:9e:ce:81:f4:c5:f5:28:f4:d6:43:36:5e:0d:
13:bd:c2:30:c5:63:0f:5d:66:dd:56:61:a6:8a:87:c2:e8:f5:
18:c7:c2:74:1d:e3:c6:43:74:9a:05:3b:de:a8:30:96:64:8f:
a1:20:f9:f7:ed:11:84:7b:78:28:e7:ed:82:19:ea:a4:10:23:
fa:6a:5e:19:60:5c:af:6f:43:8f:5a:5a:d1:1e:4b:c2:43:d6:
7b:a0:77:0e:ba:fa:a5:e5:17:68:93:c8:76:3b:d5:db:55:66:
ec:a8:c1:b3:e8:7a:c6:21:f3:4e:30:30:5e:62:60:8b:43:ca:
63:51:ab:e0:15:04:50:82:95:f4:b4:1f:c9:b2:ad:43:fe:9e:
1b:20:81:b3:72:58:0b:75:ad:32:b3:88:e9:be:91:3f:cd:a7:
dc:d2:7a:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org