Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Qn0HkhHAthEC0hrvUUQ_2yiqgXQ.roa
File: Qn0HkhHAthEC0hrvUUQ_2yiqgXQ.roa (raw, json)
Hash identifier: H5OPK2kxk4P8qA8ezCBHvREsnkWkKNHaKXc/MkYEpMw=
Subject key identifier: 42:7D:07:92:11:C0:B6:11:02:D2:1A:EF:51:44:3F:DB:28:AA:81:74
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01929BDBF794F8EAC4D65E4F5CD174104E87
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Qn0HkhHAthEC0hrvUUQ_2yiqgXQ.roa
Signing time: Thu 17 Oct 2024 19:02:16 +0000
ROA not before: Thu 17 Oct 2024 19:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
81.22.140.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 21:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:db:f7:94:f8:ea:c4:d6:5e:4f:5c:d1:74:10:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 17 19:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=427d079211c0b61102d21aef51443fdb28aa8174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:56:89:2c:77:8e:bf:45:df:ed:72:2c:1f:
de:ef:e6:aa:c0:0b:de:71:2d:9e:87:31:a4:fc:75:
2f:00:91:0a:d7:d2:96:7a:40:04:37:f7:f6:63:c1:
80:12:ae:5d:92:f9:a2:23:dd:7e:44:45:e4:e5:1a:
ce:97:89:f7:c0:7c:95:f6:24:54:9e:c5:b3:fc:b8:
4c:8d:5c:ed:df:0d:54:65:d1:1b:b1:98:7a:56:a5:
8d:a1:63:20:e8:ed:c1:6d:8a:1e:75:81:37:0c:28:
3f:0e:68:0d:c1:cf:d2:9e:08:fb:e9:d6:7e:18:eb:
f8:78:bc:95:be:77:18:c6:56:ac:51:50:43:52:c7:
84:ee:3d:69:42:e1:16:47:74:e4:f4:6c:bf:94:25:
f3:d9:07:aa:8b:71:15:83:1a:e8:4b:24:b0:68:fb:
5f:5c:b7:af:8b:fa:08:83:c9:e4:11:96:0d:cd:4b:
87:b4:02:85:d7:96:84:ba:7d:9a:cf:1c:6a:33:a0:
b6:85:ed:29:d0:de:68:cf:58:52:18:b2:a1:11:b6:
31:e0:4f:aa:05:be:01:fc:cd:6b:93:fa:6d:d6:ed:
6b:fd:f5:e8:d4:d1:c5:19:e7:e0:5f:a4:f5:8f:76:
7c:b4:fa:6a:71:d1:89:7a:9b:fe:32:dc:4a:84:6e:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7D:07:92:11:C0:B6:11:02:D2:1A:EF:51:44:3F:DB:28:AA:81:74
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Qn0HkhHAthEC0hrvUUQ_2yiqgXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/21
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:94:0b:ee:73:08:b9:d7:8a:cb:c7:12:1e:3c:6c:32:ec:17:
52:0d:a9:57:74:42:84:a5:d7:02:d0:2f:0c:b0:37:13:28:7f:
06:72:4c:fa:c9:d6:13:c1:cf:c5:ce:a3:77:6e:74:39:60:31:
8c:94:b2:4c:95:a6:de:65:f0:13:f9:9a:97:78:5b:bf:ab:e4:
ff:14:9c:68:c5:ea:44:d9:55:c7:f2:24:99:24:ed:48:02:ae:
87:da:11:3f:40:bc:2d:c4:df:14:3c:a5:a3:8a:fc:d4:86:ca:
10:a2:e1:a4:6c:ce:69:94:d5:17:28:be:0b:20:1a:0f:91:4c:
0d:5e:7b:66:4d:27:cd:1a:10:82:cf:17:00:27:c1:32:2d:92:
be:1c:d5:3c:d5:3f:61:67:41:5e:85:d3:d2:c1:78:9a:fc:9d:
d2:12:95:39:2d:aa:e4:13:e3:7b:a8:9d:00:ce:28:d1:5d:19:
00:70:42:20:ca:59:66:76:f5:a4:1a:bb:08:32:4f:2f:b7:0c:
e5:54:71:c0:f3:e8:1d:26:fa:f8:c8:1e:a7:ab:e9:d5:ed:02:
b8:ab:a0:45:36:62:9f:bb:a0:38:e8:89:ac:19:5c:5e:fe:51:
e4:74:a6:e9:5b:2e:a3:59:60:c6:34:cf:49:d4:7d:2d:76:17:
4a:50:9e:b9
-----BEGIN CERTIFICATE-----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 at Thu Nov 7 00:35:32 2024 by rpki-client on console-fra.rpki-client.org