Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TqxkEaFoYzQixyPozzoPLWxAKac.roa
File: TqxkEaFoYzQixyPozzoPLWxAKac.roa (raw, json)
Hash identifier: 1uuj5LtYBshQgHljB/WNGxqgLkprkbXzqDECIVh7OKs=
Subject key identifier: 4E:AC:64:11:A1:68:63:34:22:C7:23:E8:CF:3A:0F:2D:6C:40:29:A7
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018D45384618E1B64A64264D7DA69203ACDB
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TqxkEaFoYzQixyPozzoPLWxAKac.roa
Signing time: Fri 26 Jan 2024 10:02:12 +0000
ROA not before: Fri 26 Jan 2024 10:02:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 81.22.137.0/24 maxlen: 24
81.22.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 09:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:38:46:18:e1:b6:4a:64:26:4d:7d:a6:92:03:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 26 10:02:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eac6411a168633422c723e8cf3a0f2d6c4029a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:de:2e:f5:cb:0c:48:4e:15:64:fe:1e:41:
59:1a:5c:ad:a7:f9:0c:14:bc:ab:61:f4:a6:c3:ff:
8f:8a:bf:4a:31:bd:ac:c0:15:c4:98:d5:ee:7d:bf:
ef:0a:06:8b:cf:04:b9:6f:01:2c:5c:f6:48:cb:14:
b1:6c:d9:61:72:31:23:8e:dc:a2:2a:de:b5:fd:35:
34:f6:21:dc:04:fc:6b:81:c5:3e:3d:cc:6f:9a:47:
2d:34:50:05:5e:ae:48:a3:88:21:07:d1:a3:2b:bd:
9d:eb:67:85:bc:e1:ec:30:e0:8d:1c:49:41:ae:48:
45:c9:b2:75:4c:38:30:b7:6e:48:7f:e5:04:96:9b:
dc:cc:4a:ff:c8:21:b8:71:e7:30:ed:d3:09:fe:06:
3c:a3:9e:fa:01:11:79:89:28:de:c7:b1:4b:62:7f:
1c:22:76:4d:86:c4:d1:66:e7:0c:65:79:3d:04:2d:
5a:64:92:29:2c:44:65:17:b3:aa:04:6d:7e:5f:75:
9d:3a:a7:ca:b8:86:68:6c:66:7e:eb:73:79:b9:c0:
1e:94:91:fb:f1:ad:0f:e8:2f:f3:82:4f:3b:b5:5d:
27:2f:a1:65:e7:18:be:68:e9:d6:bc:27:69:92:2f:
d4:1a:07:a9:7f:17:11:4d:c8:5b:eb:d9:4f:0f:2d:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:64:11:A1:68:63:34:22:C7:23:E8:CF:3A:0F:2D:6C:40:29:A7
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TqxkEaFoYzQixyPozzoPLWxAKac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.137.0-81.22.138.255
Signature Algorithm: sha256WithRSAEncryption
90:3c:7e:e2:00:c7:71:a6:40:d8:fa:6e:b9:3e:37:8a:83:e1:
f1:f5:c4:b2:93:1d:9f:ad:2b:93:9d:a0:07:78:d7:cd:9a:60:
4a:46:1d:0d:2c:eb:5b:4d:a1:03:c7:19:84:2e:6b:43:5a:ef:
3c:c0:46:2d:5f:ed:f1:d5:7c:d6:73:45:7b:63:2c:5e:5e:70:
38:76:47:e2:7c:9c:af:b0:c9:71:56:53:63:aa:22:5f:22:c9:
bc:a0:ca:c7:7f:0c:0d:88:47:52:7b:d5:b9:6c:16:99:f1:d6:
f5:4c:8b:be:93:30:fb:26:b8:52:62:23:ac:aa:22:cd:98:2d:
42:40:d7:9d:d1:83:dc:07:f5:78:ee:e2:5f:6e:8c:53:36:8a:
e2:df:42:93:a5:64:d8:b0:0e:0b:a1:b4:41:84:ed:cf:58:d7:
a1:d5:c7:25:84:20:13:0f:52:07:ee:b0:5b:e5:d6:8b:d2:a7:
09:31:de:23:23:a1:93:36:36:b9:ed:87:68:c0:e6:2c:10:86:
de:40:9a:69:c7:11:36:0a:80:56:4f:cd:95:b5:d5:a5:dd:85:
06:01:8a:2f:f5:e3:a1:4d:41:ea:5d:81:d4:c5:26:d0:07:d1:
1f:97:de:c7:7e:2d:e6:af:2f:3d:0e:41:38:68:1c:78:32:8d:
96:a0:5b:8a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY1FOEYY4bZKZCZNfaaSA6zbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjQwMTI2MTAwMjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWFjNjQxMWExNjg2MzM0MjJjNzIzZThjZjNhMGYyZDZjNDAyOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9TeLvXLDEhOFWT+HkFZGlytp/kM
FLyrYfSmw/+Pir9KMb2swBXEmNXufb/vCgaLzwS5bwEsXPZIyxSxbNlhcjEjjtyi
Kt61/TU09iHcBPxrgcU+PcxvmkctNFAFXq5Io4ghB9GjK72d62eFvOHsMOCNHElB
rkhFybJ1TDgwt25If+UElpvczEr/yCG4cecw7dMJ/gY8o576ARF5iSjex7FLYn8c
InZNhsTRZucMZXk9BC1aZJIpLERlF7OqBG1+X3WdOqfKuIZobGZ+63N5ucAelJH7
8a0P6C/zgk87tV0nL6Fl5xi+aOnWvCdpki/UGgepfxcRTchb69lPDy32AQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE6sZBGhaGM0Iscj6M86Dy1sQCmnMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvVHF4a0VhRm9ZelFpeHlQb3p6b1BMV3hBS2FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABRFokD
BABRFoowDQYJKoZIhvcNAQELBQADggEBAJA8fuIAx3GmQNj6brk+N4qD4fH1xLKT
HZ+tK5OdoAd4182aYEpGHQ0s61tNoQPHGYQua0Na7zzARi1f7fHVfNZzRXtjLF5e
cDh2R+J8nK+wyXFWU2OqIl8iybygysd/DA2IR1J71blsFpnx1vVMi76TMPsmuFJi
I6yqIs2YLUJA153Rg9wH9Xju4l9ujFM2iuLfQpOlZNiwDguhtEGE7c9Y16HVxyWE
IBMPUgfusFvl1ovSpwkx3iMjoZM2Nrnth2jA5iwQht5AmmnHETYKgFZPzZW11aXd
hQYBii/146FNQepdgdTFJtAH0R+X3sd+LeavLz0OQThoHHgyjZagW4o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org