Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/YxcPXt3TQMJ8Q78piAUmdFmE8rc.roa
File: YxcPXt3TQMJ8Q78piAUmdFmE8rc.roa (raw, json)
Hash identifier: pCxXSfmslOSFLiU+2xbTFfVIw9uwdmczNi0wdGbuuZk=
Subject key identifier: 63:17:0F:5E:DD:D3:40:C2:7C:43:BF:29:88:05:26:74:59:84:F2:B7
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188887421F5EE680C871A5778ABD218A511
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/YxcPXt3TQMJ8Q78piAUmdFmE8rc.roa
Signing time: Sun 04 Jun 2023 22:08:12 +0000
ROA not before: Sun 04 Jun 2023 22:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 81.22.134.0/24 maxlen: 24
81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 19:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:88:74:21:f5:ee:68:0c:87:1a:57:78:ab:d2:18:a5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 4 22:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63170f5eddd340c27c43bf29880526745984f2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:6e:9f:90:83:c0:49:ad:ab:ea:8b:83:d2:
0f:2e:ca:61:8b:0f:5d:a3:68:f6:91:5b:cc:68:ed:
83:51:af:d7:a8:b5:67:99:02:e1:46:1a:c4:c1:f2:
b8:85:34:1c:ad:86:21:11:3d:aa:e5:c1:45:cf:a4:
a9:aa:1e:cf:95:39:03:46:4f:ad:87:41:82:96:7e:
bb:84:26:ce:1e:84:87:a3:c1:b7:4f:b3:18:b0:ea:
03:c5:85:e7:0d:68:7d:b9:d4:96:4b:86:27:57:b2:
2b:ea:bb:ba:78:bc:d0:c6:6b:fc:a8:a4:0a:34:85:
07:03:d4:d4:f4:58:2e:65:7e:ad:c9:13:56:b8:63:
d6:09:7a:fa:e8:2c:90:4f:7e:e2:66:32:b0:e5:7c:
a3:a9:48:f8:f0:a6:f8:ae:66:81:9b:1c:ef:12:ca:
2f:1b:78:68:17:c6:f7:47:27:16:fc:d5:c2:49:87:
ab:42:cb:ef:89:08:89:a8:6d:3e:73:4c:bb:9a:cf:
16:72:f7:1b:c8:85:8c:f9:9e:a1:4a:58:14:35:e8:
b9:8a:6f:72:b9:d9:33:2c:59:5c:88:71:5c:1a:5e:
ec:95:ff:cc:af:8f:4b:c0:95:9e:44:be:dc:6c:b1:
a2:2b:df:06:78:b8:50:e8:b4:4b:71:fe:e5:09:d7:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:0F:5E:DD:D3:40:C2:7C:43:BF:29:88:05:26:74:59:84:F2:B7
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/YxcPXt3TQMJ8Q78piAUmdFmE8rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
81.22.134.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0b:3c:27:32:47:e0:58:3e:5b:03:94:b3:60:9d:88:f7:33:
fd:57:3c:1b:68:a3:8d:5f:42:ed:ac:e0:da:2c:15:d7:35:d3:
0d:60:67:9f:ec:83:e7:08:74:28:61:86:5d:4d:aa:99:8a:f8:
9f:85:9e:13:14:ed:fa:7a:ad:12:12:9c:ef:53:4b:9d:6d:e0:
62:09:35:39:0f:ac:2b:14:ce:f5:09:ec:4e:14:d0:da:02:ac:
ad:57:34:5b:0c:d9:fa:f2:f2:19:7a:69:d8:48:63:4a:ab:1a:
6e:9e:3a:5c:ee:d1:30:a7:0a:5f:d8:13:1f:c5:4e:83:7e:a7:
95:10:d7:7c:44:6d:c7:cf:9a:7d:5d:3c:75:56:4e:ba:23:4c:
8a:65:64:8f:21:ab:58:70:3b:40:0c:dd:b0:57:b6:10:2a:e9:
0a:8c:ac:b8:b2:80:9a:80:8b:4c:60:61:8b:c8:6b:e8:09:a8:
88:f4:c0:da:c8:53:a0:ab:45:df:88:d6:f7:33:b9:25:ce:78:
02:5e:3c:d9:af:2a:9c:4d:f6:21:6b:da:72:e9:e6:b7:78:d4:
30:4d:a0:ef:03:cf:d0:8b:2b:95:f2:19:66:f8:f3:24:7c:92:
b2:df:23:99:ef:c9:b8:37:24:53:50:da:38:5b:bb:c1:2b:74:
b9:63:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org