Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/X6Gsbatd9TYvhGlhCki-g6L48Fc.roa
File: X6Gsbatd9TYvhGlhCki-g6L48Fc.roa (raw, json)
Hash identifier: NsNu6a9bqOPFKKHqPK+bXsyarnjRI+Zju51lWsRF9n0=
Subject key identifier: 5F:A1:AC:6D:AB:5D:F5:36:2F:84:69:61:0A:48:BE:83:A2:F8:F0:57
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A3306840CE53B903229269B88DA4C1251
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/X6Gsbatd9TYvhGlhCki-g6L48Fc.roa
Signing time: Sat 26 Aug 2023 18:06:19 +0000
ROA not before: Sat 26 Aug 2023 18:06:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 17:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:06:84:0c:e5:3b:90:32:29:26:9b:88:da:4c:12:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 26 18:06:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa1ac6dab5df5362f8469610a48be83a2f8f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:34:92:f7:91:92:8b:99:1e:39:a2:b6:4e:
af:1a:41:18:11:e2:6b:9e:49:28:a8:4b:40:03:03:
b8:d5:16:a7:cf:02:6e:2c:54:dc:2d:23:bb:91:24:
6a:2f:97:28:56:8c:fa:8a:bc:a6:69:03:9d:b7:ba:
e0:34:9e:38:93:f0:b5:cc:fa:5c:f3:62:fa:d7:d8:
f9:64:a5:89:c4:73:01:63:c6:14:b0:c0:63:cc:cb:
42:eb:08:bd:0f:e1:09:ee:ee:6c:f4:ce:f6:6a:5d:
d5:04:40:ee:ab:b6:51:9a:bd:a4:a8:d5:5c:31:e4:
f3:ff:87:b8:44:5f:b3:00:97:a4:85:68:1a:b7:8d:
08:73:ab:61:1a:0a:aa:3e:6b:23:e0:10:b8:98:f8:
a2:3e:6b:03:6f:89:b1:78:47:ef:89:5a:24:34:34:
f9:53:60:bb:57:f1:f7:fd:05:ea:bd:5b:83:4b:6a:
9d:f9:24:4f:fe:ca:db:2a:44:e4:0a:cd:d6:f3:42:
fc:d7:63:92:73:d1:32:57:76:9f:d6:fc:4f:71:03:
06:97:d2:3a:ae:2c:b8:31:c3:ff:71:72:78:52:dc:
7e:c8:76:df:2b:f4:a5:88:d9:10:86:54:62:94:b9:
80:f4:73:20:a3:6e:c8:d6:a3:8f:8d:10:b7:c9:58:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:AC:6D:AB:5D:F5:36:2F:84:69:61:0A:48:BE:83:A2:F8:F0:57
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/X6Gsbatd9TYvhGlhCki-g6L48Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1c:5f:f8:4c:db:66:50:e9:7a:6d:ae:48:5a:15:3d:ff:39:
fe:94:fe:8b:6d:7e:a3:03:be:b4:9f:f1:d3:4a:54:dd:ca:f6:
fb:ee:ad:89:32:81:1f:33:bd:09:4c:15:c8:08:72:bf:b3:10:
87:f6:cd:43:e5:ab:6b:b7:33:14:7c:e7:f0:cb:42:d0:15:93:
f8:f0:4b:20:e9:30:7a:42:a4:b3:e9:9f:d5:bb:48:46:fa:1b:
fe:3e:3e:9a:50:ac:69:03:60:59:f9:25:96:a6:01:81:ae:6f:
60:c9:cd:fb:f1:c8:15:6d:5f:23:1f:bf:50:b6:a6:c1:d8:ab:
d2:ba:3d:dc:78:aa:8b:8e:30:b0:86:8d:b2:36:f9:d3:dd:e0:
30:c4:c2:62:77:13:d0:3d:7e:30:f0:60:7a:50:c5:a9:54:5f:
b7:3b:c5:a9:3d:8b:c6:90:5a:ec:41:58:71:94:a0:0c:3d:33:
f2:49:b1:29:df:84:12:87:40:cc:16:0a:ae:02:8a:f4:b8:49:
43:c7:dc:5d:d1:52:08:41:ab:f7:d1:ba:fe:37:88:5e:5e:cf:
4f:52:6d:6c:7f:83:a0:4a:db:7c:75:35:da:1a:f5:90:8b:c5:
06:a0:4c:69:fd:24:7a:1c:9a:95:98:d6:62:8f:4a:98:47:f5:
4a:0d:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org