Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Yk_w5tQE-_ZD8HXCUu0uZoOZiT8.roa
File: Yk_w5tQE-_ZD8HXCUu0uZoOZiT8.roa (raw, json)
Hash identifier: KF86iG21eVJ1YXvVGT1O078MTwFLmquaXKuxJLXw6w4=
Subject key identifier: 62:4F:F0:E6:D4:04:FB:F6:43:F0:75:C2:52:ED:2E:66:83:99:89:3F
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185706728DE588E57B3958EEF558DF0DD5E
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Yk_w5tQE-_ZD8HXCUu0uZoOZiT8.roa
Signing time: Mon 02 Jan 2023 02:54:46 +0000
ROA not before: Mon 02 Jan 2023 02:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 12:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:28:de:58:8e:57:b3:95:8e:ef:55:8d:f0:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 2 02:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=624ff0e6d404fbf643f075c252ed2e668399893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:0f:ec:81:d8:11:f5:d4:79:94:27:a2:fc:
4c:a4:55:69:d1:db:1f:97:3a:c9:f1:89:9a:bd:93:
2c:ab:ba:61:e7:66:be:8b:a4:12:13:2e:14:e8:2d:
2c:83:9c:cc:3f:1e:3a:ee:7f:46:a1:80:5c:3a:5b:
2a:99:07:b4:4f:2f:d8:8c:4b:88:6e:b7:43:7b:b9:
eb:eb:fd:64:5f:80:bc:2e:9b:a9:b5:98:05:31:54:
10:22:a8:ae:ba:1e:80:a8:7c:c0:2a:43:b8:90:ec:
5a:75:54:54:53:37:60:40:cf:57:de:5d:be:41:1d:
3f:cf:3a:aa:a1:ff:34:41:f9:0d:58:d6:ce:95:79:
4c:ee:3a:f7:af:fd:e1:1e:8e:6c:86:19:85:4a:53:
bb:e2:92:44:7c:c6:d1:b7:99:1f:ab:5f:16:43:b7:
07:67:74:74:36:16:44:9f:04:88:22:83:28:c7:dc:
fe:ee:cd:66:a2:03:e3:51:29:b5:ed:ec:a6:ba:b1:
58:bb:94:bf:e0:23:fa:cd:e2:62:ca:64:ee:8a:38:
c8:ec:ec:c5:3a:f0:be:4e:78:8d:30:de:0f:84:94:
bc:38:9c:0b:7f:28:d8:aa:07:c0:68:91:85:5c:f4:
10:a5:89:b1:09:22:93:04:30:a8:3d:6d:77:7b:72:
2b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4F:F0:E6:D4:04:FB:F6:43:F0:75:C2:52:ED:2E:66:83:99:89:3F
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Yk_w5tQE-_ZD8HXCUu0uZoOZiT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c6:80:7f:5b:df:c7:d3:00:04:a2:59:77:57:27:ed:16:d3:
fc:bf:d6:7c:c3:b7:1d:b3:66:73:aa:39:a9:75:19:5b:9f:53:
c7:9d:89:19:72:aa:b6:75:bc:70:1c:ec:4e:e6:e3:80:61:af:
bd:53:07:ce:4c:74:91:62:1e:75:e2:be:7c:0c:3e:72:a7:46:
85:b7:b3:95:ef:e1:a8:a4:1b:90:3a:2a:dd:20:bc:ae:80:0b:
ed:d6:e0:50:60:46:f6:a7:56:f3:3a:56:c2:6d:47:1c:d3:0a:
13:f1:c2:a4:42:09:b5:b9:d0:44:cb:d3:48:b9:a9:38:19:fa:
04:1b:6c:a5:a2:ef:b7:2b:39:35:69:57:8d:6f:9d:44:bd:d4:
40:7a:14:64:4c:ab:8b:99:0b:70:a3:c6:cc:ed:17:74:78:af:
ca:74:8c:ee:4a:00:af:9d:85:32:09:3f:a9:17:6a:88:a1:4d:
e8:a0:97:15:5b:24:de:db:38:f3:0d:08:ac:41:49:95:6d:e3:
b4:01:7e:d7:ae:85:48:27:9a:9f:ce:9b:1e:5c:37:da:4e:02:
c0:ca:62:57:04:e2:8a:68:d9:f1:bf:bf:74:3c:21:47:d8:1f:
9c:6c:90:cb:d2:36:0e:43:76:12:ce:c8:db:2f:98:4b:65:9e:
bf:cc:59:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZyjeWI5Xs5WO71WN8N1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMTAyMDI1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjRmZjBlNmQ0MDRmYmY2NDNmMDc1YzI1MmVkMmU2NjgzOTk4OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyEP7IHYEfXUeZQnovxMpFVp0dsf
lzrJ8YmavZMsq7ph52a+i6QSEy4U6C0sg5zMPx467n9GoYBcOlsqmQe0Ty/YjEuI
brdDe7nr6/1kX4C8LpuptZgFMVQQIqiuuh6AqHzAKkO4kOxadVRUUzdgQM9X3l2+
QR0/zzqqof80QfkNWNbOlXlM7jr3r/3hHo5shhmFSlO74pJEfMbRt5kfq18WQ7cH
Z3R0NhZEnwSIIoMox9z+7s1mogPjUSm17eymurFYu5S/4CP6zeJiymTuijjI7OzF
OvC+TniNMN4PhJS8OJwLfyjYqgfAaJGFXPQQpYmxCSKTBDCoPW13e3IrPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGJP8ObUBPv2Q/B1wlLtLmaDmYk/MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvWWtfdzV0UUUtX1pEOEhYQ1V1MHVab09aaVQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaEMA0G
CSqGSIb3DQEBCwUAA4IBAQCLxoB/W9/H0wAEoll3VyftFtP8v9Z8w7cds2Zzqjmp
dRlbn1PHnYkZcqq2dbxwHOxO5uOAYa+9UwfOTHSRYh514r58DD5yp0aFt7OV7+Go
pBuQOirdILyugAvt1uBQYEb2p1bzOlbCbUcc0woT8cKkQgm1udBEy9NIuak4GfoE
G2ylou+3Kzk1aVeNb51EvdRAehRkTKuLmQtwo8bM7Rd0eK/KdIzuSgCvnYUyCT+p
F2qIoU3ooJcVWyTe2zjzDQisQUmVbeO0AX7XroVIJ5qfzpseXDfaTgLAymJXBOKK
aNnxv790PCFH2B+cbJDL0jYOQ3YSzsjbL5hLZZ6/zFle
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org