Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TrjmM31m-F5RbyjUwoblgJu75hg.roa
File: TrjmM31m-F5RbyjUwoblgJu75hg.roa (raw, json)
Hash identifier: uyxvNy0X8Q6lOBLfcyQDMupFMcV/BcYQO89V5ZxbsX0=
Subject key identifier: 4E:B8:E6:33:7D:66:F8:5E:51:6F:28:D4:C2:86:E5:80:9B:BB:E6:18
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188BF8BB8894D2FD856198F999C47C6B3F6
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TrjmM31m-F5RbyjUwoblgJu75hg.roa
Signing time: Thu 15 Jun 2023 14:53:04 +0000
ROA not before: Thu 15 Jun 2023 14:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 81.22.136.0/22 maxlen: 24
109.72.116.0/24 maxlen: 24
109.72.118.0/24 maxlen: 24
109.72.117.0/24 maxlen: 24
109.72.115.0/24 maxlen: 24
109.72.114.0/24 maxlen: 24
81.22.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 12:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:8b:b8:89:4d:2f:d8:56:19:8f:99:9c:47:c6:b3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 15 14:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb8e6337d66f85e516f28d4c286e5809bbbe618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:7a:fd:a5:68:3c:9e:72:14:25:25:d5:58:
02:3d:ba:b1:c8:b5:a6:37:05:1a:fc:a0:6f:d7:99:
bd:77:38:ed:2b:7a:80:8a:6e:0f:0c:14:18:9f:b6:
54:c4:6c:6f:2e:b0:79:82:1d:61:40:c2:1d:68:15:
f3:a9:19:b8:e7:36:15:3b:76:f4:13:1e:32:2e:92:
5e:aa:ee:b7:4e:4b:23:40:b4:b2:6f:64:d3:f4:6d:
b2:2a:27:03:fd:17:42:d3:9d:00:66:46:5a:40:f8:
2e:70:93:28:d1:38:a9:8f:84:51:1d:a5:64:20:4d:
c9:9b:d7:7f:28:8a:f7:4e:3d:b5:72:a5:ac:40:09:
cb:75:5e:75:e6:8a:77:92:30:69:03:73:f3:d4:b9:
b7:e1:1d:1d:ef:b1:7e:dd:61:a2:50:21:16:e3:b4:
6b:06:41:3d:9c:c0:e7:15:6b:ed:7c:64:1f:39:9b:
b3:2b:de:2d:c8:4a:5f:98:46:23:ff:5f:86:96:5d:
4b:df:d1:f7:7b:04:23:02:54:0a:b6:82:de:5b:27:
3b:ad:63:38:a3:e5:ed:cc:cd:09:70:46:7f:ac:36:
0e:9b:7e:a2:46:05:7a:c9:19:d6:7c:2b:54:d7:40:
dc:63:d6:35:97:4b:ef:62:b8:38:e0:af:09:25:36:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:E6:33:7D:66:F8:5E:51:6F:28:D4:C2:86:E5:80:9B:BB:E6:18
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TrjmM31m-F5RbyjUwoblgJu75hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
81.22.136.0/22
109.72.114.0-109.72.118.255
Signature Algorithm: sha256WithRSAEncryption
13:bc:e7:98:03:07:79:b3:f8:75:2e:19:92:a8:bc:ad:13:c5:
7d:11:96:ee:26:ac:07:d0:cb:23:ae:c9:eb:43:59:66:b5:24:
97:95:a8:f3:4d:f1:bb:18:04:1d:99:29:c6:ae:90:4a:79:e0:
96:b5:e2:37:16:8f:74:b7:9f:1f:4e:43:36:56:a0:48:73:e7:
0e:91:59:f7:34:e8:5e:29:f7:c8:76:2d:e4:be:82:bb:3a:be:
be:c6:25:62:6c:c0:be:f6:4c:7a:ac:09:a8:55:2c:74:56:89:
2e:87:b9:1e:e0:14:d9:72:11:13:15:15:95:b0:06:1a:78:89:
40:de:83:07:91:db:03:45:3a:af:19:bc:ae:22:a9:85:22:47:
4c:e4:3a:a8:58:eb:ce:45:b4:fa:57:6c:28:97:b2:8c:5e:55:
1e:dc:ae:ab:03:68:98:f3:ee:51:e4:d5:ba:79:b8:b9:8c:ff:
97:c7:5e:a5:2b:e4:c5:5e:91:a7:ea:46:95:cd:81:b0:10:fe:
55:21:68:31:fa:31:58:8d:b4:fa:b3:aa:41:a5:8e:de:a3:52:
49:36:9a:5a:8e:18:09:7c:84:fb:cc:76:96:87:e9:8b:ac:f0:
bc:36:39:89:18:f8:0e:7f:5b:87:d4:bc:89:7e:4b:26:11:0f:
93:6c:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org