Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/UqhBSJpOl-jrVrl27wcmh5zuK5s.roa
File: UqhBSJpOl-jrVrl27wcmh5zuK5s.roa (raw, json)
Hash identifier: R/aZHXmErIRfmirGLlPD2L5VgKeU48QXMNBHYlafZPg=
Subject key identifier: 52:A8:41:48:9A:4E:97:E8:EB:56:B9:76:EF:07:26:87:9C:EE:2B:9B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018809ACA6D9E4A066BDF181D88B78A21F99
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/UqhBSJpOl-jrVrl27wcmh5zuK5s.roa
Signing time: Thu 11 May 2023 07:18:09 +0000
ROA not before: Thu 11 May 2023 07:18:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 81.22.129.0/24 maxlen: 24
81.22.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Jun 2023 10:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:ac:a6:d9:e4:a0:66:bd:f1:81:d8:8b:78:a2:1f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 11 07:18:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52a841489a4e97e8eb56b976ef0726879cee2b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:2a:59:2d:98:c5:ba:a2:0a:d5:93:4c:5f:
2e:de:a6:1e:c7:63:21:7d:13:12:67:03:ae:18:bd:
60:0e:5f:f1:a4:3f:3b:7f:38:53:93:16:2c:a6:1f:
8d:0e:a3:38:64:98:83:b4:c0:7b:75:ed:ff:7b:cd:
bb:bb:ea:f0:56:d6:15:c8:bf:e5:cb:5b:5f:4e:b6:
d7:3b:35:e1:80:fb:7a:db:a9:ea:d6:2b:15:77:ad:
68:35:ea:df:d8:36:16:eb:36:5e:68:12:10:75:9d:
75:36:82:63:40:74:f3:a4:71:cc:53:68:f2:eb:52:
e0:02:e9:88:6f:d6:8a:5d:ec:45:4f:bf:0a:c1:2b:
55:28:b9:9d:10:3a:22:0c:f0:cd:50:98:b4:74:bc:
97:92:cb:cc:f8:bd:ad:e1:c3:0e:49:86:5a:8d:40:
3a:76:fe:be:36:7b:aa:52:58:da:5b:3a:43:68:02:
0a:02:8e:18:47:4d:60:ad:8f:50:5e:5a:8c:a3:6f:
9c:2a:f0:20:ba:7f:75:6f:a9:ae:73:73:89:16:f3:
69:a2:fd:1c:cc:55:32:a1:8d:09:9b:bb:84:dc:2f:
c3:a7:35:43:bb:fc:f7:5d:76:68:d8:9e:6f:80:3b:
10:ae:6c:9c:ee:b5:55:e3:cb:f2:e4:d1:70:25:d6:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:41:48:9A:4E:97:E8:EB:56:B9:76:EF:07:26:87:9C:EE:2B:9B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/UqhBSJpOl-jrVrl27wcmh5zuK5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0-81.22.130.255
Signature Algorithm: sha256WithRSAEncryption
51:1e:15:7e:48:b7:9d:e3:95:cc:44:57:32:8e:69:52:29:9e:
08:64:48:23:13:82:00:c6:52:66:7c:96:65:6f:56:a1:70:b7:
89:3d:5d:fc:f0:db:1e:87:86:79:52:9a:ca:1a:a4:1d:e7:60:
a2:92:bb:d9:b7:c6:a4:17:ed:e6:c1:00:f3:53:b5:9d:14:17:
f6:30:34:c1:85:c8:0d:74:6d:aa:87:97:67:16:fc:36:05:d0:
ad:8f:c5:32:19:14:ea:f8:7e:3b:c8:c5:65:72:44:9a:89:5c:
b3:8f:e2:60:f9:f5:6f:73:ce:87:ec:58:a7:b5:a2:2f:a4:5a:
75:52:ef:0e:db:4c:05:b6:74:d3:95:4d:fb:4b:14:67:63:45:
a6:82:d7:eb:f2:df:a2:b3:0b:e0:e8:f8:ca:35:15:0e:74:ef:
49:c5:6c:06:b5:c5:a1:87:83:2e:c7:ea:46:1f:dd:cc:63:4f:
23:c0:53:47:8a:f9:1f:97:d6:0a:e8:06:2d:43:8c:78:eb:78:
53:bb:08:e3:46:87:92:d5:d0:ed:61:f0:ad:6f:56:e5:07:87:
54:38:9e:12:7c:6a:8b:45:ad:40:26:7c:f1:0d:ab:b9:08:a9:
34:49:75:4d:8b:c1:69:12:ee:c2:0c:48:0d:3f:4f:c9:29:23:
31:69:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org