Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QxVLm0IvDbXgxYdVyaodF9GBQkE.roa
File: QxVLm0IvDbXgxYdVyaodF9GBQkE.roa (raw, json)
Hash identifier: zd7xw+AZjMHrKYX34kPPayGXXneCHuA9DE2Ht/y2bk8=
Subject key identifier: 43:15:4B:9B:42:2F:0D:B5:E0:C5:87:55:C9:AA:1D:17:D1:81:42:41
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185DBDCCAD9A5C17D53C6D93790D55E9AC4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QxVLm0IvDbXgxYdVyaodF9GBQkE.roa
Signing time: Sun 22 Jan 2023 23:42:38 +0000
ROA not before: Sun 22 Jan 2023 23:42:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50354
IP address blocks: 81.22.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 11:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:db:dc:ca:d9:a5:c1:7d:53:c6:d9:37:90:d5:5e:9a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 22 23:42:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43154b9b422f0db5e0c58755c9aa1d17d1814241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:d7:d3:80:c2:d5:72:ec:e1:10:1b:60:22:
1a:14:49:62:b0:b6:57:ea:bb:27:cd:4e:0b:02:41:
1d:0a:05:15:6e:21:50:1b:29:63:37:24:34:97:ec:
a9:67:12:6a:a4:6a:88:61:c9:67:4f:aa:bd:24:d1:
bb:7d:30:e7:cd:b4:ec:dc:6a:da:07:51:dd:51:d8:
f0:d4:bd:f9:dc:01:a1:eb:e7:e4:9d:72:62:c5:bc:
76:b7:81:6c:69:62:05:94:97:b8:df:df:87:f8:c9:
ab:e9:df:4e:8d:02:70:4c:61:45:94:06:af:e4:25:
dd:1c:4e:9b:51:da:86:10:2d:3c:58:7f:b7:09:64:
16:c2:f1:a5:c5:97:9a:4d:80:f6:b7:e5:97:48:93:
ae:86:35:9f:c2:5e:2e:e6:19:f2:f1:b6:08:85:f6:
a6:8a:f0:ce:89:29:2f:6a:ee:b7:32:88:bf:e8:63:
3e:a7:0d:bc:33:ad:bb:c1:e6:69:f2:82:a3:ab:51:
8b:83:a6:79:d5:23:6f:1f:42:c6:23:6b:34:6d:12:
4e:3e:ed:fd:a1:77:de:dc:8c:65:a5:4b:0f:87:f5:
cc:9f:cd:c6:4c:06:f9:78:34:35:38:1c:75:98:82:
3e:c7:d5:9d:17:56:cd:a2:79:7e:85:bc:b9:d0:a8:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:15:4B:9B:42:2F:0D:B5:E0:C5:87:55:C9:AA:1D:17:D1:81:42:41
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QxVLm0IvDbXgxYdVyaodF9GBQkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.134.0/24
Signature Algorithm: sha256WithRSAEncryption
97:96:2c:ca:07:73:85:e4:0a:eb:65:cf:59:02:b9:e7:82:08:
99:69:90:57:75:4f:e9:32:34:4a:25:d7:e3:8d:70:87:e0:1f:
b0:18:c7:4a:d3:c7:c3:9e:f1:7d:2c:34:d4:3e:81:de:9c:6b:
58:d1:57:2a:be:a3:a3:a5:bb:77:eb:f6:f5:46:2e:47:60:90:
21:39:97:3a:e6:16:5c:d8:28:2e:77:dd:f2:f3:cb:f4:5b:e1:
9c:d2:23:61:fb:d7:d9:ff:88:8a:a4:a2:ec:d6:93:59:56:21:
54:5d:70:8f:14:4a:37:77:13:4a:a7:7b:54:42:23:ec:35:99:
9f:08:91:79:94:7a:d2:9b:b5:56:23:35:b1:fd:31:6a:c0:5a:
ae:a8:cc:e9:94:11:fa:0a:fd:c7:0f:54:c4:b3:2a:df:a2:e9:
04:4c:3f:9b:96:9f:94:1c:29:dd:31:1c:67:a4:14:0e:c8:11:
25:b5:52:3d:ca:7a:0d:2c:bb:13:d9:94:cb:8b:c4:fb:dd:2c:
fb:5d:4b:b6:59:eb:84:0b:55:9d:ba:02:d9:ba:47:6f:e2:f1:
0d:c6:d6:aa:4b:f5:c4:6e:a8:b0:41:7f:00:d0:68:27:64:e3:
9e:d8:eb:58:c1:56:15:b6:ed:3e:9c:23:57:72:14:10:6d:13:
6c:93:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org