Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/b1qtKsCdfgkRdp5KsGJRVtG3YAE.roa
File: b1qtKsCdfgkRdp5KsGJRVtG3YAE.roa (raw, json)
Hash identifier: WzlvhFB8deaQVXB2L2hUPXkjmSbKikCk4WGFc/tVk2U=
Subject key identifier: 6F:5A:AD:2A:C0:9D:7E:09:11:76:9E:4A:B0:62:51:56:D1:B7:60:01
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188F799945E284B7BD11492F0279C87327C
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/b1qtKsCdfgkRdp5KsGJRVtG3YAE.roa
Signing time: Mon 26 Jun 2023 12:06:57 +0000
ROA not before: Mon 26 Jun 2023 12:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 12:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:99:94:5e:28:4b:7b:d1:14:92:f0:27:9c:87:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 26 12:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5aad2ac09d7e0911769e4ab0625156d1b76001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:21:ce:cb:73:56:21:48:58:5e:5a:49:3b:
66:64:12:73:14:67:b2:88:19:c5:08:01:a5:15:5b:
6b:8c:6b:99:71:0b:9d:1a:12:10:11:d3:e5:02:e4:
d7:fa:30:73:d0:99:db:b6:6c:d0:f4:f9:6b:9d:8e:
ac:90:80:7c:d7:b7:40:94:c1:2d:36:ac:46:92:0e:
d8:fa:fa:85:da:61:b6:05:25:02:32:06:af:0f:af:
bf:6c:da:cb:8e:31:4d:85:a5:65:b5:c0:ce:a2:52:
54:21:43:96:db:68:55:5a:cd:60:d4:c0:44:0f:95:
4c:5e:01:41:2a:84:ec:2e:ee:80:4c:8f:8b:86:e5:
99:12:d8:b4:2d:42:2f:54:d2:c5:dc:e8:19:0a:e0:
54:d8:8d:89:5c:29:d7:c7:1b:bb:e7:9a:90:dd:c4:
d7:b2:3c:1f:91:e3:9e:a7:01:0f:39:6d:ad:0b:e9:
91:87:c1:5e:73:d2:38:9d:5c:74:be:a5:44:07:04:
a8:12:43:61:96:0d:23:b8:08:fe:34:ac:a8:d9:10:
4e:59:42:2b:0c:23:b8:33:dd:12:f7:3d:f4:54:58:
83:ee:a6:3e:5f:56:59:7a:f8:4b:50:8e:e5:49:71:
54:45:34:b1:e6:d5:f1:35:23:96:46:fc:08:ac:bf:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5A:AD:2A:C0:9D:7E:09:11:76:9E:4A:B0:62:51:56:D1:B7:60:01
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/b1qtKsCdfgkRdp5KsGJRVtG3YAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2f:cf:34:63:a3:e9:cc:2c:bd:47:7c:ee:fb:ce:0b:52:dc:
f2:7f:39:2c:89:66:c0:63:33:50:ad:cf:a4:58:a7:81:39:bc:
49:f8:ae:b5:a0:60:1c:db:2e:40:11:35:18:0b:a1:d8:a0:4a:
6a:b8:b1:23:4b:0d:34:05:82:49:23:02:47:58:c2:77:46:16:
c9:3f:c1:18:79:ea:2e:88:c9:15:4e:7a:af:c5:d4:24:ca:ea:
d3:de:a4:e8:9e:10:44:b1:f9:cd:a4:ed:4f:93:f8:3a:0d:3c:
f7:61:b5:9b:15:10:98:61:e6:b5:fc:ef:91:d4:1a:99:1d:a1:
8a:44:6a:e7:e6:a1:10:a1:39:14:9f:86:78:55:26:9c:df:b6:
36:9e:7e:92:e7:e6:8a:ae:d0:91:7c:c6:6d:1b:7b:92:3b:66:
51:52:1f:6a:f9:8a:f2:74:86:25:91:a3:ff:48:fe:b2:62:3d:
95:8d:33:ce:56:ba:c0:b0:67:bf:8d:16:27:f0:52:1c:9b:35:
60:62:8e:e6:eb:a6:0b:e3:56:7b:bf:80:0b:7f:ef:cf:cf:31:
f7:03:c0:01:26:ba:0a:c0:41:e0:17:10:4b:de:bc:cf:e0:15:
4e:b5:ee:11:11:be:72:05:c5:d4:72:e3:47:df:8f:7a:13:d0:
dc:43:22:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org