Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Uy6A3IWJV_ASVy5Hch_WNyVGASg.roa
File: Uy6A3IWJV_ASVy5Hch_WNyVGASg.roa (raw, json)
Hash identifier: gI9CfSvDxN11+9Jqg41gNG6REZz+Tuh7HuNLv4hCzkE=
Subject key identifier: 53:2E:80:DC:85:89:57:F0:12:57:2E:47:72:1F:D6:37:25:46:01:28
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018C537AB8638928B8C35D5924E2A50DAE97
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Uy6A3IWJV_ASVy5Hch_WNyVGASg.roa
Signing time: Sun 10 Dec 2023 11:26:40 +0000
ROA not before: Sun 10 Dec 2023 11:26:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 81.22.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:7a:b8:63:89:28:b8:c3:5d:59:24:e2:a5:0d:ae:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 10 11:26:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=532e80dc858957f012572e47721fd63725460128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:00:8a:88:a7:e9:04:a4:a7:10:7a:96:48:f9:
bf:6e:a2:f7:d9:c7:b0:dc:58:e4:43:51:bd:6f:ef:
33:e5:a2:31:6f:3e:82:e6:18:fb:03:95:e0:62:a9:
fd:67:62:51:1a:e9:94:06:c0:68:07:1d:9d:24:9a:
15:a9:03:46:1d:12:0e:1d:86:48:73:da:6a:5d:90:
84:0c:73:12:29:7c:a9:67:97:f3:34:90:1a:62:ce:
d7:89:2f:b3:86:19:82:e7:7f:1a:54:13:08:7f:ed:
d1:49:52:c2:60:6d:a9:79:d2:3f:6b:63:fe:29:1d:
73:40:48:db:d9:bb:36:68:d4:f7:49:bc:a2:ee:43:
48:ad:dd:ab:d9:30:0a:20:ac:14:28:75:e9:97:a6:
3e:06:c3:1a:d1:a2:b4:57:36:b5:95:c5:8e:2f:6a:
6a:6d:b4:1d:d7:3b:9b:3c:f9:fe:54:a5:1a:0d:7c:
70:cb:34:64:50:e6:75:2e:8e:1b:13:4b:da:2e:71:
fe:d4:db:67:9d:cf:94:52:fc:f7:68:bf:0c:65:b3:
46:f5:78:da:2a:3e:f6:04:af:12:31:54:bd:b4:19:
ee:6a:ee:2b:af:9d:36:20:77:14:14:38:58:6c:94:
bd:48:fc:14:bf:0f:3b:72:b9:57:57:5b:cf:6b:64:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:80:DC:85:89:57:F0:12:57:2E:47:72:1F:D6:37:25:46:01:28
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Uy6A3IWJV_ASVy5Hch_WNyVGASg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.142.0/23
Signature Algorithm: sha256WithRSAEncryption
57:c8:15:52:8b:28:d1:8a:53:a8:b6:6c:51:61:5d:d5:bd:03:
63:6d:bd:60:4c:90:af:13:a1:64:b8:72:75:df:ef:da:df:cb:
db:71:45:b1:c4:9b:e8:29:87:b2:e0:e0:ac:d6:ec:a0:be:7b:
cc:c1:b0:4f:0b:05:8c:d0:51:82:ba:60:d1:99:94:59:71:a3:
ad:c0:4a:88:eb:ea:01:b4:a3:ba:b8:e4:fc:d8:14:f1:b0:ef:
47:a3:27:69:5b:72:6e:9c:1e:95:25:b0:4e:22:f6:03:10:88:
37:54:c8:2a:68:41:8a:83:05:5e:36:26:63:32:d4:b4:05:30:
66:17:b5:b7:80:a4:61:96:db:a7:8f:9c:15:b0:4b:e0:9b:78:
8b:40:6f:0b:30:6e:b0:36:38:3f:5c:d2:42:25:6e:db:d2:d5:
0a:c3:52:68:17:e5:41:2d:d3:78:7b:50:ef:27:eb:c7:5f:f3:
dd:4f:30:27:74:6e:09:48:53:51:07:85:7d:42:5f:9e:e3:49:
eb:04:13:ea:d9:81:c7:23:65:b4:37:ad:42:a6:bb:c9:c0:04:
e3:8b:55:ad:09:41:b2:b0:aa:66:19:2e:5f:a3:0c:d9:b9:53:
93:36:c4:59:5f:90:77:83:17:23:ea:80:eb:0d:6a:9d:c3:9c:
40:c5:36:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxTerhjiSi4w11ZJOKlDa6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMxMjEwMTEyNjQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzJlODBkYzg1ODk1N2YwMTI1NzJlNDc3MjFmZDYzNzI1NDYwMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhACKiKfpBKSnEHqWSPm/bqL32cew
3FjkQ1G9b+8z5aIxbz6C5hj7A5XgYqn9Z2JRGumUBsBoBx2dJJoVqQNGHRIOHYZI
c9pqXZCEDHMSKXypZ5fzNJAaYs7XiS+zhhmC538aVBMIf+3RSVLCYG2pedI/a2P+
KR1zQEjb2bs2aNT3Sbyi7kNIrd2r2TAKIKwUKHXpl6Y+BsMa0aK0Vza1lcWOL2pq
bbQd1zubPPn+VKUaDXxwyzRkUOZ1Lo4bE0vaLnH+1Ntnnc+UUvz3aL8MZbNG9Xja
Kj72BK8SMVS9tBnuau4rr502IHcUFDhYbJS9SPwUvw87crlXV1vPa2Qr1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMugNyFiVfwElcuR3If1jclRgEoMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvVXk2QTNJV0pWX0FTVnk1SGNoX1dOeVZHQVNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBURaOMA0G
CSqGSIb3DQEBCwUAA4IBAQBXyBVSiyjRilOotmxRYV3VvQNjbb1gTJCvE6FkuHJ1
3+/a38vbcUWxxJvoKYey4OCs1uygvnvMwbBPCwWM0FGCumDRmZRZcaOtwEqI6+oB
tKO6uOT82BTxsO9HoydpW3JunB6VJbBOIvYDEIg3VMgqaEGKgwVeNiZjMtS0BTBm
F7W3gKRhltunj5wVsEvgm3iLQG8LMG6wNjg/XNJCJW7b0tUKw1JoF+VBLdN4e1Dv
J+vHX/PdTzAndG4JSFNRB4V9Ql+e40nrBBPq2YHHI2W0N61CprvJwATji1WtCUGy
sKpmGS5fowzZuVOTNsRZX5B3gxcj6oDrDWqdw5xAxTYh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org