Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_dOhSW2W1ajlp5Nv9ic2Rty4uFM.roa
File: _dOhSW2W1ajlp5Nv9ic2Rty4uFM.roa (raw, json)
Hash identifier: EH6DPufOBEhwYNpsJL6apyKj/WZLmub6QPfydXRMC54=
Subject key identifier: FD:D3:A1:49:6D:96:D5:A8:E5:A7:93:6F:F6:27:36:46:DC:B8:B8:53
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185D1A49101EE890A0383F8CBDC84387E0C
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_dOhSW2W1ajlp5Nv9ic2Rty4uFM.roa
Signing time: Sat 21 Jan 2023 00:05:01 +0000
ROA not before: Sat 21 Jan 2023 00:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.22.133.0/24 maxlen: 24
89.185.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Feb 2023 09:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d1:a4:91:01:ee:89:0a:03:83:f8:cb:dc:84:38:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 21 00:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdd3a1496d96d5a8e5a7936ff6273646dcb8b853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:0c:74:55:fa:aa:ce:ad:06:f6:c8:19:c9:
3f:1a:05:b8:0d:5a:7f:e0:ec:55:4f:7f:ba:74:d2:
f4:d3:0f:eb:67:30:0b:df:56:02:ab:0d:d4:12:be:
e9:9b:f4:be:40:c5:36:28:9c:cb:da:65:6f:cb:ae:
3c:74:d4:2b:7d:d2:ea:d6:1a:9b:ac:10:85:fc:a0:
1b:8e:ca:8e:5e:f9:3c:a4:57:ba:1d:27:bf:3b:50:
3d:f1:92:64:71:7d:46:35:95:cd:92:05:2e:2f:91:
0f:b5:c9:ec:c5:75:88:d2:e3:51:76:3a:7e:d9:5e:
87:8e:ae:04:9e:2f:34:6c:46:b3:1c:e9:7f:14:7a:
c6:96:27:c0:23:63:5e:a0:bf:82:2d:8b:53:f8:9f:
54:b5:b8:5c:33:fb:b0:77:66:c1:b7:25:fe:45:70:
27:49:d3:87:c8:3d:c6:dc:de:3f:62:0d:0c:dd:dc:
71:d1:47:30:cb:7c:c0:0d:3f:ed:92:18:22:ca:8f:
cb:93:af:de:9c:72:da:bc:da:8c:4d:35:5f:77:a7:
ad:56:70:89:7c:9b:43:d8:93:67:f1:03:c1:5e:e7:
49:ef:1b:b8:f2:6e:39:3a:88:7b:d2:63:e9:5f:a8:
77:27:be:d1:d8:f4:be:70:42:5d:e9:6f:75:d2:87:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:A1:49:6D:96:D5:A8:E5:A7:93:6F:F6:27:36:46:DC:B8:B8:53
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_dOhSW2W1ajlp5Nv9ic2Rty4uFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.133.0/24
89.185.24.0/22
Signature Algorithm: sha256WithRSAEncryption
42:92:d7:ab:8b:ac:03:b1:79:47:25:c3:33:12:a7:57:f0:00:
99:18:08:e2:d6:e7:3e:8f:5d:48:db:d7:ed:71:5a:dd:b0:1f:
da:bf:22:48:dc:85:e3:88:ba:6a:77:04:ff:d9:b9:ec:73:95:
5e:f8:35:9f:59:ad:cb:33:ae:fe:32:c8:82:6a:ab:8c:06:4a:
79:05:b5:b7:04:ff:8f:93:5d:d1:96:43:0f:5d:86:06:75:81:
a9:55:19:ee:c0:53:c6:21:e9:77:c4:81:0b:2f:f5:64:99:92:
cc:0c:80:3c:b2:b4:58:04:34:9d:19:4e:4c:16:13:81:f1:a9:
de:52:ba:af:77:f6:5b:e7:5b:08:1d:8e:e4:3d:72:66:d2:ce:
cb:a6:31:21:84:31:a3:dc:c1:9d:52:ec:23:58:df:38:9f:52:
1e:53:6b:86:54:8b:09:04:c6:8c:f5:0d:3a:ae:2d:56:34:1f:
27:07:5a:cb:24:07:03:01:5b:46:be:e4:4c:fc:24:04:ed:a8:
e9:50:dc:96:83:fd:ba:b6:a5:3b:a1:95:41:2b:30:11:c7:7b:
39:71:2f:42:39:d5:c3:ee:95:ef:10:10:e5:0a:b9:25:a6:c9:
4c:48:2f:1e:4d:9e:ba:78:e7:9a:82:e4:e6:7f:f7:75:8e:2f:
79:93:1a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org