Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Nr-EcRdnIrGstIucOPQWXogIews.roa
File: Nr-EcRdnIrGstIucOPQWXogIews.roa (raw, json)
Hash identifier: YYCMM4FiDvtNd92TUxD5/WIW9+YhIesMEd3IQiW/ITQ=
Subject key identifier: 36:BF:84:71:17:67:22:B1:AC:B4:8B:9C:38:F4:16:5E:88:08:7B:0B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0187A4B5F7A061ABDFA3DB3C8B15D80BD4A2
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Nr-EcRdnIrGstIucOPQWXogIews.roa
Signing time: Fri 21 Apr 2023 16:46:41 +0000
ROA not before: Fri 21 Apr 2023 16:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.22.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 18:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:b5:f7:a0:61:ab:df:a3:db:3c:8b:15:d8:0b:d4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 21 16:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36bf8471176722b1acb48b9c38f4165e88087b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:40:f4:c6:5a:13:b4:6b:03:5c:12:cf:d7:
f8:93:70:f9:9b:35:d1:7c:28:96:9d:55:f2:7e:4f:
4b:e9:65:9f:17:87:f1:b8:8e:2c:26:35:66:20:c9:
61:fc:93:e4:47:19:c4:35:3f:bd:72:f6:20:29:93:
65:4a:de:33:70:17:da:2c:a3:75:9b:f5:eb:40:de:
83:2e:37:05:b7:be:d5:62:cf:b3:54:47:51:86:05:
f8:7e:c7:a4:3c:83:3a:4d:42:e1:f9:77:71:ed:cc:
73:21:3a:93:4b:4f:03:4c:f2:48:6c:2b:f6:64:0a:
33:12:66:ee:71:a8:e3:bb:5b:80:1b:1e:ff:0b:9c:
db:2d:66:01:14:7c:2e:74:12:eb:4e:63:a4:b9:ae:
b9:ed:32:26:b5:20:28:90:8c:d7:ca:bb:ed:2c:6c:
fd:e6:bc:bb:42:ee:1c:3e:df:fd:6b:2f:3b:8d:3e:
7e:d4:e6:a5:00:4b:98:d3:fb:33:4d:bc:1c:a6:40:
c0:a8:d1:ae:6b:28:c9:53:19:49:78:75:0d:98:cf:
85:8c:b3:ef:d5:8f:ea:4c:a8:5b:b0:eb:e4:9c:05:
04:45:08:56:c2:28:e5:96:77:fc:34:20:33:a8:90:
cc:e1:42:7a:1e:f7:59:d1:cc:5a:79:d2:27:53:11:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:84:71:17:67:22:B1:AC:B4:8B:9C:38:F4:16:5E:88:08:7B:0B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Nr-EcRdnIrGstIucOPQWXogIews.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ce:ac:09:4d:1a:bb:b4:a3:aa:2b:b1:be:bb:c1:84:07:79:
67:67:f0:e8:0a:7e:a0:9d:28:9d:b7:5c:69:f3:8b:b0:2f:de:
6e:9a:50:78:4a:bc:57:1a:e6:c4:dd:9f:4f:68:47:1c:e1:fe:
df:59:f4:ee:fb:5e:6f:59:9b:e9:a6:c4:51:96:ec:cf:7b:6f:
63:a2:b8:9a:31:2d:52:a7:ae:05:82:7e:f8:9b:78:ec:e0:97:
33:50:60:05:9d:e5:c0:4e:4e:1d:ea:a0:63:90:f6:b6:79:ea:
3d:89:e1:2c:87:58:36:c3:69:2a:4c:0f:40:68:55:e8:40:ff:
51:64:52:2c:62:02:5a:d1:25:82:6a:4b:34:09:39:84:9d:54:
e6:2f:7f:75:9d:fc:4f:45:d1:4d:ad:0d:22:4a:c5:5b:6d:61:
b3:3b:38:c7:02:2b:a3:6c:81:44:2d:8d:04:1c:74:48:3e:1a:
b2:83:b3:37:ee:59:c3:01:a1:b9:3e:f9:a8:55:0f:89:ec:c0:
32:5a:7a:73:4f:73:f6:55:58:10:19:f5:37:09:f6:c6:c3:03:
fc:8e:58:e7:1e:d9:04:63:47:35:60:17:17:0f:e7:2c:af:ae:
ce:91:7e:a1:24:3c:78:0f:e8:aa:34:ff:00:17:92:a8:a8:68:
74:e3:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org