Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/XVrEzYNLifHzUSoYQJQST_JqWP8.roa
File: XVrEzYNLifHzUSoYQJQST_JqWP8.roa (raw, json)
Hash identifier: VfeVBWvM9o1DexXcCTf1hFHUbU1Jce5WUmF8WRY+a7U=
Subject key identifier: 5D:5A:C4:CD:83:4B:89:F1:F3:51:2A:18:40:94:12:4F:F2:6A:58:FF
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01859AFD2477D707C70892FBBE04123B2B36
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/XVrEzYNLifHzUSoYQJQST_JqWP8.roa
Signing time: Tue 10 Jan 2023 09:22:39 +0000
ROA not before: Tue 10 Jan 2023 09:22:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 81.22.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 09:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:fd:24:77:d7:07:c7:08:92:fb:be:04:12:3b:2b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 10 09:22:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d5ac4cd834b89f1f3512a184094124ff26a58ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:83:74:dc:28:c6:a3:2b:ef:bf:bb:f0:24:
95:17:f9:90:f1:0f:e7:f4:e0:7f:0b:6a:86:8e:78:
eb:9c:25:f5:a5:6b:c0:68:74:57:68:db:4b:ce:72:
1c:7b:ce:72:59:7f:b6:b9:41:89:09:23:57:63:ed:
f3:ef:d1:11:6f:d1:9f:df:a4:7e:cd:ac:16:d3:ec:
a2:7b:1b:c4:27:5c:c5:7b:f1:4e:dc:c2:a4:25:9e:
df:cd:c0:46:d9:54:5a:28:34:01:0e:62:87:8a:67:
e5:e2:f6:84:96:50:04:a6:6e:4c:47:da:d0:c4:57:
47:f3:1d:60:05:7c:ad:30:b8:e7:bb:79:5c:26:48:
2c:9c:67:61:94:e4:64:53:b5:3d:f0:13:0c:d7:41:
47:82:91:91:d5:80:17:a2:72:ca:26:c1:e2:f3:f6:
97:7c:88:f5:ce:c2:71:60:42:ff:a1:5d:0b:3c:88:
be:51:20:6e:09:84:64:af:0e:da:42:3c:19:ce:e7:
ce:3a:8d:b6:7a:e1:47:10:61:92:5e:99:f5:ba:46:
f4:38:17:3e:04:9c:f9:02:57:53:e7:fe:ef:cd:16:
af:27:ad:a9:50:89:aa:1b:2e:d1:43:17:b0:12:02:
5d:76:b6:fd:3f:53:e5:20:bd:a7:2c:68:83:bb:40:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5A:C4:CD:83:4B:89:F1:F3:51:2A:18:40:94:12:4F:F2:6A:58:FF
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/XVrEzYNLifHzUSoYQJQST_JqWP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ed:62:82:72:21:24:d7:6c:ba:a3:4c:d0:7d:55:0f:ec:a5:
73:fe:4a:be:70:d2:00:36:51:22:41:2f:3d:c5:86:57:9b:82:
46:88:49:99:48:2a:b9:12:a0:fc:62:e8:23:6c:97:4c:17:fc:
49:2d:84:23:ee:54:be:fb:3f:40:76:9f:d1:fc:7c:1c:29:ba:
a7:53:5b:23:4b:d7:7c:76:79:1c:37:9c:07:fb:9a:2e:4d:7c:
05:12:04:b7:00:4b:57:6e:18:f7:b3:b7:71:8e:6b:23:6c:29:
dc:a4:5b:7c:fe:72:88:ce:74:76:63:8f:93:1f:39:2a:47:8f:
ce:1e:13:f7:d9:51:98:db:83:d5:e5:fa:f7:36:2f:5b:f6:82:
c7:1e:20:00:61:97:6d:44:ae:c8:8c:85:60:d4:e1:53:15:d8:
f8:c6:86:89:d8:41:9c:00:8c:7d:29:d7:7d:d9:14:31:24:b0:
02:24:fc:5a:96:7b:aa:43:bf:e1:9a:9a:2e:48:b7:b0:fe:24:
bd:6b:1b:2f:5a:1b:1b:4f:ee:7a:b1:71:4a:5d:f9:c6:95:a4:
2c:e7:bd:d6:53:b9:c7:7d:cb:5f:ab:e4:fa:e6:e1:32:71:e4:
25:9b:fe:f8:91:46:ec:ce:13:33:f4:25:6d:ec:60:ff:6f:9a:
4c:40:92:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWa/SR31wfHCJL7vgQSOys2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMTEwMDkyMjM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDVhYzRjZDgzNGI4OWYxZjM1MTJhMTg0MDk0MTI0ZmYyNmE1OGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH2DdNwoxqMr77+78CSVF/mQ8Q/n
9OB/C2qGjnjrnCX1pWvAaHRXaNtLznIce85yWX+2uUGJCSNXY+3z79ERb9Gf36R+
zawW0+yiexvEJ1zFe/FO3MKkJZ7fzcBG2VRaKDQBDmKHimfl4vaEllAEpm5MR9rQ
xFdH8x1gBXytMLjnu3lcJkgsnGdhlORkU7U98BMM10FHgpGR1YAXonLKJsHi8/aX
fIj1zsJxYEL/oV0LPIi+USBuCYRkrw7aQjwZzufOOo22euFHEGGSXpn1ukb0OBc+
BJz5AldT5/7vzRavJ62pUImqGy7RQxewEgJddrb9P1PlIL2nLGiDu0C1/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1axM2DS4nx81EqGECUEk/yalj/MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvWFZyRXpZTkxpZkh6VVNvWVFKUVNUX0pxV1A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCURaMMA0G
CSqGSIb3DQEBCwUAA4IBAQAh7WKCciEk12y6o0zQfVUP7KVz/kq+cNIANlEiQS89
xYZXm4JGiEmZSCq5EqD8YugjbJdMF/xJLYQj7lS++z9Adp/R/HwcKbqnU1sjS9d8
dnkcN5wH+5ouTXwFEgS3AEtXbhj3s7dxjmsjbCncpFt8/nKIznR2Y4+THzkqR4/O
HhP32VGY24PV5fr3Ni9b9oLHHiAAYZdtRK7IjIVg1OFTFdj4xoaJ2EGcAIx9Kdd9
2RQxJLACJPxalnuqQ7/hmpouSLew/iS9axsvWhsbT+56sXFKXfnGlaQs573WU7nH
fctfq+T65uEyceQlm/74kUbszhMz9CVt7GD/b5pMQJIy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org