Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OxuhJci7Os3DZpxDHJfqFPynDPY.roa
File: OxuhJci7Os3DZpxDHJfqFPynDPY.roa (raw, json)
Hash identifier: q0/HMXkXr80NoiqXJJmQu6lOZKJJPqmve1uPHmgcNZw=
Subject key identifier: 3B:1B:A1:25:C8:BB:3A:CD:C3:66:9C:43:1C:97:EA:14:FC:A7:0C:F6
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018DB28A431DCBC073F336873E240D764F38
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OxuhJci7Os3DZpxDHJfqFPynDPY.roa
Signing time: Fri 16 Feb 2024 15:30:22 +0000
ROA not before: Fri 16 Feb 2024 15:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 81.22.138.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 07:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:8a:43:1d:cb:c0:73:f3:36:87:3e:24:0d:76:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Feb 16 15:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b1ba125c8bb3acdc3669c431c97ea14fca70cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:72:71:d9:c9:bd:7b:1a:75:38:e4:cf:db:
bb:0d:d0:8e:94:fe:22:54:8d:b4:b2:ba:64:24:7c:
bf:f4:c5:69:f1:84:05:e9:ea:a5:b3:f0:50:8e:19:
3d:03:f5:fe:a1:5a:b5:a7:7f:0e:38:31:73:a8:b2:
84:5d:93:df:34:3c:19:93:9b:5f:e0:ec:40:e4:5c:
4f:79:92:bc:fc:30:e6:2a:f0:1f:98:a1:09:f3:f7:
07:8f:a6:41:6e:d7:04:fe:9b:6a:d2:4e:07:a1:15:
97:30:c1:55:5b:9e:31:cf:de:69:79:32:43:b1:85:
f8:89:2e:9f:da:b1:ec:7f:28:cd:5a:0e:95:ee:11:
46:1a:fc:3f:1b:b8:09:0c:a3:ab:60:da:73:e7:59:
a2:57:a9:0b:b2:04:ff:eb:9a:2d:8d:20:be:67:b7:
8f:50:8d:0d:33:b9:ac:e6:93:8f:c8:1f:ba:44:8e:
c1:ee:41:b6:40:a8:51:40:92:c6:73:91:af:db:0c:
69:28:a6:18:95:b2:39:08:3e:8d:50:dd:e8:3c:52:
12:ca:6a:e8:f1:29:7d:f2:ea:61:27:3c:75:6d:85:
9c:4b:e6:92:e3:1e:db:1b:85:70:60:11:51:fb:a9:
5b:ae:cf:3b:a0:cf:5c:16:f2:be:5a:42:e3:8a:ef:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1B:A1:25:C8:BB:3A:CD:C3:66:9C:43:1C:97:EA:14:FC:A7:0C:F6
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OxuhJci7Os3DZpxDHJfqFPynDPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.138.0/24
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
57:44:7a:f3:2a:b3:20:1a:a3:c7:49:9c:85:00:98:ab:06:3c:
66:60:c2:65:61:8a:f5:81:0f:56:ab:e9:19:e5:ab:0e:9c:ce:
e5:9d:6a:fe:3c:dd:f5:df:08:46:91:74:ba:b9:f4:05:9f:b2:
f6:1c:6a:2c:9d:aa:51:fa:26:f6:d3:3a:47:16:50:c9:b5:54:
da:32:1c:8f:3c:f8:41:5a:84:e9:63:26:ea:1e:ca:2d:ef:4d:
b2:35:75:0d:e7:99:e0:fd:e3:86:b4:e9:43:a6:bb:59:bb:a2:
af:03:5a:20:5f:b2:3f:22:fd:9e:cf:62:26:01:7e:fa:b0:ea:
aa:a9:97:0d:9d:9c:b9:df:6a:43:07:2f:e2:40:3f:59:c1:1e:
0b:bb:d4:c9:a6:81:97:15:55:b5:95:40:3d:76:e7:20:5f:3b:
91:9f:7e:4c:76:06:96:fb:52:f9:a8:8f:29:b9:b5:01:59:1a:
ba:2f:46:21:3b:93:2f:e1:52:8c:40:7f:34:6a:4c:22:67:34:
03:ee:8a:bd:c5:6b:d6:fc:c8:e1:22:72:53:0b:14:d3:08:7c:
d9:58:e0:2b:63:85:1a:b3:9d:85:9c:a2:2a:14:d3:d7:3b:b8:
af:68:5f:cc:8a:54:6a:81:2d:b6:68:74:d7:c3:4f:dd:0c:a2:
ca:28:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org