Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZMD-OH1xwadYR39mB_jolJSh1kw.roa
File: ZMD-OH1xwadYR39mB_jolJSh1kw.roa (raw, json)
Hash identifier: tIzpgj0B/oewWRg4uuGlVu7miNYyI0aQ/4cld2HwM28=
Subject key identifier: 64:C0:FE:38:7D:71:C1:A7:58:47:7F:66:07:F8:E8:94:94:A1:D6:4C
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A117574C359BFF4201FAAE3FBB9883638
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZMD-OH1xwadYR39mB_jolJSh1kw.roa
Signing time: Sun 20 Aug 2023 05:40:24 +0000
ROA not before: Sun 20 Aug 2023 05:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.22.140.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
109.72.120.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Aug 2023 21:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:75:74:c3:59:bf:f4:20:1f:aa:e3:fb:b9:88:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 20 05:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c0fe387d71c1a758477f6607f8e89494a1d64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:a0:d7:7a:25:77:c2:5b:90:1e:e7:47:5d:
0f:e0:f9:1a:11:57:5e:a2:70:cf:a5:83:ad:17:d1:
8c:d4:0c:be:ff:96:93:12:76:be:bb:7b:e6:7f:16:
5f:80:bc:7a:10:c9:1a:16:ce:66:84:fd:6f:a5:e8:
cc:d0:32:2c:22:6e:2f:33:ae:40:fe:9e:0a:c7:17:
9d:1b:77:cd:92:57:6f:ba:e5:6f:7c:f5:72:c1:4f:
32:39:2f:f1:24:6b:70:d7:f1:30:bd:75:85:be:3f:
42:01:de:4b:13:5a:e5:74:73:4f:c9:40:81:10:a8:
70:7c:97:a0:e1:18:61:cf:db:73:01:fa:09:3e:72:
16:a9:f5:05:4d:95:b2:51:92:b0:46:86:85:6f:4b:
82:1c:e7:48:33:47:72:26:1e:31:0c:fd:88:4c:74:
95:ac:8e:39:52:e9:f2:5e:b1:67:e6:1e:34:79:a5:
88:e4:11:3b:a9:e9:89:ea:85:c5:5a:72:92:bc:da:
d1:14:11:64:78:4c:f5:e7:22:0a:af:8c:ac:4d:77:
c6:4d:32:2f:c2:7c:8b:a0:58:58:fe:c7:c8:de:dc:
2c:f3:c9:60:11:3e:0f:da:61:d4:1c:d7:c1:60:8b:
ad:82:85:97:f1:be:92:b1:34:4c:3d:21:dc:a7:b0:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C0:FE:38:7D:71:C1:A7:58:47:7F:66:07:F8:E8:94:94:A1:D6:4C
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZMD-OH1xwadYR39mB_jolJSh1kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
81.22.140.0/22
89.185.0.0/22
109.72.116.0-109.72.120.255
Signature Algorithm: sha256WithRSAEncryption
33:e1:f0:39:53:a9:45:98:a5:24:ff:b1:46:86:97:84:30:89:
98:c2:cc:a3:00:72:b9:bb:f2:80:08:50:4f:31:c2:27:07:a8:
02:de:9a:9e:c0:96:7d:62:2a:6c:fa:2a:d3:67:52:f1:ea:72:
1a:d2:7c:76:28:02:de:82:77:cd:7b:e0:ad:3d:80:a3:b1:6e:
1b:b6:83:17:fd:b6:58:c9:4d:ed:7c:c2:91:a3:ec:9d:54:d5:
65:16:66:bb:81:90:40:01:7e:37:f6:cd:a3:8d:d4:fa:07:60:
d4:99:6f:88:08:6e:c4:89:7a:63:ba:75:11:58:91:bd:79:5b:
77:6f:e4:ec:6e:dc:38:16:2f:80:78:b2:af:f6:99:2f:5d:3a:
d4:84:b7:3f:b4:a4:c2:d5:3c:08:27:43:21:72:a4:9d:e2:e1:
f1:21:1b:c7:58:10:e2:d0:68:8a:3c:ab:9b:f1:d0:10:0b:63:
db:5a:88:22:62:28:22:ab:ad:24:1d:b9:73:06:5f:43:a7:61:
bc:13:db:72:1e:7a:b4:0f:1a:b1:4a:84:be:ff:9e:ef:d4:49:
ac:b4:04:c7:ad:99:30:cc:50:9a:80:ba:d3:7c:a0:4e:d9:41:
a6:06:7f:4c:38:2c:6a:47:67:11:55:6d:e4:09:95:2b:08:45:
72:ae:da:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org