Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/XJuELybBiGubTIzWdPCaACseuro.roa
File: XJuELybBiGubTIzWdPCaACseuro.roa (raw, json)
Hash identifier: ZSl7tRfqAg2qusmWJ9hJXaXeT7Chll23tBaS5s0XlBM=
Subject key identifier: 5C:9B:84:2F:26:C1:88:6B:9B:4C:8C:D6:74:F0:9A:00:2B:1E:BA:BA
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185DE7CC7620D68DC9808582C9FD658DB64
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/XJuELybBiGubTIzWdPCaACseuro.roa
Signing time: Mon 23 Jan 2023 11:56:37 +0000
ROA not before: Mon 23 Jan 2023 11:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50354
IP address blocks: 81.22.134.0/24 maxlen: 24
89.185.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 25 Jan 2023 17:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:7c:c7:62:0d:68:dc:98:08:58:2c:9f:d6:58:db:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 23 11:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c9b842f26c1886b9b4c8cd674f09a002b1ebaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:84:96:e3:8c:4e:6b:87:2a:a6:00:bf:dc:
aa:bb:50:14:31:a2:54:a6:74:27:91:89:e6:ac:82:
85:dd:07:98:c6:9e:e7:84:d2:63:d3:46:81:ca:4c:
d2:f9:7a:07:bf:1a:11:ae:57:df:cf:43:4c:2e:5e:
1d:70:f6:79:84:cd:de:1e:1b:fb:0e:5b:2c:f4:c0:
fe:1a:5b:0a:92:aa:82:12:63:37:a4:e5:0a:cc:3c:
0f:67:f2:f1:0c:f9:23:45:8d:bb:57:b2:39:7f:c7:
7b:ab:91:17:44:e2:1e:65:c2:13:7f:b1:b1:dd:67:
ea:9c:17:57:0b:1d:d3:06:d6:bc:8e:46:10:63:15:
c3:be:26:8c:d9:19:0d:77:cc:7c:d8:fa:f5:41:87:
e1:8f:79:35:f6:93:4b:c1:23:96:03:f4:b1:1d:ae:
74:46:ef:bb:eb:6e:f5:73:b3:84:bc:48:b1:82:de:
ba:9e:f2:a5:42:37:b0:2d:ab:dc:c0:cc:54:46:85:
3b:4a:0a:f1:3b:1e:cb:bd:97:39:68:42:a1:43:c8:
f3:63:67:16:ce:5b:92:76:24:74:9c:29:21:6f:01:
cd:3a:6b:af:4b:d9:56:45:a9:50:37:d2:9a:e5:13:
85:dc:30:6e:88:9c:c2:0b:e5:ec:43:db:fb:cf:8b:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:84:2F:26:C1:88:6B:9B:4C:8C:D6:74:F0:9A:00:2B:1E:BA:BA
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/XJuELybBiGubTIzWdPCaACseuro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.134.0/24
89.185.28.0/22
Signature Algorithm: sha256WithRSAEncryption
57:f8:b0:bc:5b:e6:7b:fa:92:53:55:cf:93:e3:dc:63:14:b1:
78:b9:f6:63:a8:f3:bf:76:df:2d:15:2f:73:10:74:b4:e1:9f:
00:9a:f3:71:d3:3b:02:74:28:c9:10:40:e6:d5:18:41:20:05:
e6:52:32:80:22:76:61:44:1c:65:de:c6:eb:fe:29:7f:77:be:
a2:3c:f6:fd:d7:dd:98:06:28:28:9b:23:27:04:61:ce:37:b5:
d4:ea:4b:ce:07:82:81:10:f6:d5:dc:4d:01:e7:05:0e:0f:2a:
42:ed:d3:2f:10:8a:13:72:a3:da:11:31:46:84:57:98:f9:b9:
b8:60:5c:ae:34:a7:ca:8b:06:06:37:2e:5e:66:1b:aa:49:81:
eb:b3:5a:9d:ca:01:a0:15:04:d1:4c:6c:a9:eb:07:26:49:ed:
27:97:bf:00:bf:07:28:85:e0:d4:63:11:ed:22:e3:6b:d7:8d:
3f:1a:69:2d:fb:7c:58:4b:c6:36:e5:d6:8d:3b:be:3a:cf:62:
29:8c:07:49:85:1a:7b:dc:1b:60:5e:dc:eb:5d:cb:7f:78:69:
1a:d2:fc:7e:48:7f:dc:fe:e3:15:93:d3:b0:8f:bd:76:31:b7:
42:16:12:7f:28:f0:5f:aa:8e:9c:f8:00:70:3e:7a:37:57:e2:
3b:dd:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org