Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Y96QGvLKYd0L6GxTUXrvAOT5_nk.roa
File: Y96QGvLKYd0L6GxTUXrvAOT5_nk.roa (raw, json)
Hash identifier: ctdQVI4nrL0qpsq6MAxaTbIAvg1xddo7XDxsXe4Hbrg=
Subject key identifier: 63:DE:90:1A:F2:CA:61:DD:0B:E8:6C:53:51:7A:EF:00:E4:F9:FE:79
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01876BED3CE5DA4AE4243F1D1CD46D2FEEB5
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Y96QGvLKYd0L6GxTUXrvAOT5_nk.roa
Signing time: Mon 10 Apr 2023 16:08:42 +0000
ROA not before: Mon 10 Apr 2023 16:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 81.22.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 16:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:ed:3c:e5:da:4a:e4:24:3f:1d:1c:d4:6d:2f:ee:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 10 16:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63de901af2ca61dd0be86c53517aef00e4f9fe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:84:6e:d8:64:01:b3:b9:8b:8c:c1:1f:a1:
3f:c2:a0:5b:e2:5c:3e:4e:a7:18:1e:67:bb:b6:2a:
d4:31:8c:5d:e3:cd:a7:25:7e:ad:20:05:01:46:84:
7a:50:18:af:a8:af:d4:08:90:f0:72:72:f6:6f:62:
8e:9c:5b:ae:7c:aa:7e:6c:61:4f:7c:53:2a:68:0d:
2b:aa:19:c0:6a:c2:8e:37:8b:1f:1c:9e:7f:8d:9e:
f5:ba:2f:8f:b7:fa:ec:b3:48:9c:83:9d:57:c9:0f:
06:68:66:de:96:d6:4e:33:3c:6a:1d:84:51:65:9c:
85:29:f0:ea:63:16:b0:89:6f:e7:41:c0:c6:97:04:
40:7d:f4:2e:be:d7:91:c5:c1:80:9e:3a:f4:de:a0:
65:18:70:1b:1d:c7:0c:9e:73:d3:4b:4c:30:41:d9:
54:d1:9c:55:51:6b:21:f5:e5:7e:40:7c:00:d3:ad:
7f:6b:49:5a:41:ad:3a:c1:6d:33:d1:3e:b5:64:c6:
90:3a:72:e5:e4:ed:2f:e9:e0:9e:f3:4b:64:8b:22:
47:37:d8:13:21:7e:a2:fb:0f:df:43:37:f2:c9:9d:
e1:16:0f:19:b5:5d:36:cd:e1:53:fe:ed:51:c4:d8:
60:2e:11:93:83:48:72:b4:51:c7:1b:d9:9a:c9:fe:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DE:90:1A:F2:CA:61:DD:0B:E8:6C:53:51:7A:EF:00:E4:F9:FE:79
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Y96QGvLKYd0L6GxTUXrvAOT5_nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b5:52:df:5f:ed:42:94:64:f0:f4:3e:e3:00:0f:2d:a8:15:
78:50:8d:3f:2b:02:ff:08:af:de:28:fd:e6:b8:27:79:4f:97:
45:4f:30:fb:46:12:bb:a0:88:90:c5:cd:e2:c7:a6:a4:60:3a:
8a:d9:dd:a9:30:77:a3:16:bb:e4:f8:b8:5b:97:77:8c:b1:ca:
8a:43:9a:b7:7d:c1:ee:11:f0:ff:46:7e:d4:d1:0c:cf:80:ca:
c0:61:c3:6a:93:d0:b2:6e:ef:1a:74:1b:ae:df:32:83:14:36:
57:6a:96:58:7f:76:05:77:cd:1d:85:29:c7:71:26:37:0d:44:
a3:a1:13:aa:ce:b9:09:1d:2c:df:37:eb:3e:d9:02:d1:53:39:
cc:02:4b:de:bc:27:49:f3:eb:3e:ba:3d:25:3a:9b:1a:df:62:
47:35:60:1f:64:61:1c:86:bb:8b:13:98:a9:55:56:c8:da:85:
a3:88:74:ed:ef:33:22:50:43:1d:a3:d2:69:25:1c:7c:13:b0:
4c:1c:77:45:78:f2:05:b7:53:99:57:77:ec:b7:57:20:a3:f2:
85:c4:32:f4:15:dd:98:96:f3:29:6c:14:58:3a:ea:2e:5d:bc:
0c:2a:96:1c:f0:77:ac:e1:d8:25:bb:16:63:89:f5:4c:81:53:
e2:57:d5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org