Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S6gVB_J7ziwIbZbIIjyA4AgyGRA.roa
File: S6gVB_J7ziwIbZbIIjyA4AgyGRA.roa (raw, json)
Hash identifier: LrzeBXuXxH4jSx/kwYQvQf4yqP4WDTDH7gAHj97ibt0=
Subject key identifier: 4B:A8:15:07:F2:7B:CE:2C:08:6D:96:C8:22:3C:80:E0:08:32:19:10
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018C4ED8325019D0A6EBA18D2A6F1606ACB6
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S6gVB_J7ziwIbZbIIjyA4AgyGRA.roa
Signing time: Sat 09 Dec 2023 13:50:40 +0000
ROA not before: Sat 09 Dec 2023 13:50:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 81.22.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:d8:32:50:19:d0:a6:eb:a1:8d:2a:6f:16:06:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 9 13:50:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ba81507f27bce2c086d96c8223c80e008321910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:70:d5:7b:55:a8:15:a8:6f:ac:91:82:23:
d1:cc:7b:cb:13:48:84:94:11:ed:a3:0a:42:b1:ca:
24:3c:09:76:84:26:7c:16:90:f6:10:cc:91:88:99:
a4:85:7c:31:24:f5:72:9a:ef:f8:4d:95:6c:b7:05:
40:4c:fc:b4:7f:d5:20:d5:e3:f0:6c:2e:c1:86:cf:
a6:91:74:6c:31:b1:f1:e5:70:8d:eb:c6:eb:56:3c:
ff:15:32:b5:94:4a:f6:d0:00:8a:ee:30:88:6c:87:
5e:01:9b:cc:60:d5:a5:bb:df:d8:aa:dd:6a:e4:b3:
b9:a0:75:bc:53:30:e9:9b:5e:da:47:03:04:e2:e5:
12:6f:32:c7:34:93:74:d8:4f:5f:63:c2:84:82:ab:
ba:21:a2:37:e4:24:93:4c:56:72:e5:26:f6:31:68:
80:a2:35:72:55:5f:5b:71:84:3f:ba:a8:2a:2e:8c:
94:d5:28:4c:45:f4:2c:f6:c2:22:bf:64:36:eb:f1:
0e:d0:ab:44:12:89:bb:a4:f9:73:9d:0b:e1:09:d2:
6d:95:81:a8:7b:b7:b9:d2:d1:14:16:c4:8f:cf:45:
01:4d:4e:b9:1f:c9:ea:ce:9c:ea:54:de:1b:82:7b:
55:b1:7a:2d:80:3a:50:8c:6a:76:9d:a1:7e:37:c8:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A8:15:07:F2:7B:CE:2C:08:6D:96:C8:22:3C:80:E0:08:32:19:10
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S6gVB_J7ziwIbZbIIjyA4AgyGRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:14:f5:49:10:69:31:44:d8:ee:4a:43:98:49:80:ba:34:ef:
d9:76:03:9f:d9:b8:1f:60:c6:71:39:f1:4d:c8:9f:1a:20:a5:
3e:c2:17:0f:01:f3:43:67:e2:1e:ff:ef:e7:20:be:49:c2:71:
87:07:94:5f:aa:da:ec:05:59:7d:e7:03:51:f7:0a:2b:ff:da:
85:26:76:d4:e1:14:7b:3a:bc:b6:40:dd:46:7e:58:d8:3c:85:
f1:07:be:da:b1:e0:92:7f:99:fe:f3:32:9d:5d:32:87:d4:ee:
b9:b3:93:bc:30:38:1f:25:a3:41:1e:ae:3e:93:df:d6:e8:6c:
8a:51:1e:76:64:21:c0:94:0a:4e:15:92:e0:2c:bc:6d:6d:71:
e8:ad:5f:14:90:58:85:76:82:65:1b:e9:bd:6f:1d:86:f2:28:
b2:22:29:2c:ad:cf:0c:47:2d:e9:cc:9d:e7:45:84:68:fb:55:
73:90:49:f8:6b:b1:e1:a7:b8:6f:a7:68:fc:23:1f:cd:b2:d4:
16:a5:57:ed:8f:d1:37:19:d6:9d:9e:5e:4b:f3:74:8c:1e:4f:
ad:c4:68:d5:6d:53:36:22:15:9c:c6:76:62:74:84:07:08:1a:
1e:da:39:ca:aa:8f:ec:db:6a:4a:c8:71:bf:34:d5:d6:a4:07:
cd:f1:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org