Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/b6jmsYW5ZyIHY3B-iJAYpAWoAgo.roa
File: b6jmsYW5ZyIHY3B-iJAYpAWoAgo.roa (raw, json)
Hash identifier: Yh4D6Cft7LmUyy1RZUXo0nHapzGfagg0SFA4GwNa9M4=
Subject key identifier: 6F:A8:E6:B1:85:B9:67:22:07:63:70:7E:88:90:18:A4:05:A8:02:0A
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0189AD85DEFCE1D4B4E3EBDE8A6375815C75
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/b6jmsYW5ZyIHY3B-iJAYpAWoAgo.roa
Signing time: Mon 31 Jul 2023 19:56:18 +0000
ROA not before: Mon 31 Jul 2023 19:56:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.24.0/22 maxlen: 24
109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
89.185.2.0/24 maxlen: 24
81.22.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:85:de:fc:e1:d4:b4:e3:eb:de:8a:63:75:81:5c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jul 31 19:56:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa8e6b185b967220763707e889018a405a8020a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:9d:65:d5:fd:d7:ca:86:00:3e:7b:af:4f:
92:80:ea:41:1d:9d:3d:7c:44:82:18:c3:08:6a:c6:
bd:d0:b6:e4:15:0b:5e:a4:54:0a:5e:f0:50:83:d5:
36:61:05:f5:65:fc:fe:08:05:9f:a3:16:4e:91:25:
5e:a5:fd:8c:03:a8:b8:ea:7c:42:a8:42:c5:0b:b0:
b5:14:48:2c:e5:20:3f:1f:54:39:00:cb:6e:c8:ad:
3f:34:52:82:e2:c9:21:00:48:f2:a5:c1:0f:b3:aa:
a5:a1:b0:3e:b7:5c:b9:08:b6:a8:19:05:f8:07:e2:
23:ad:b2:cd:69:21:f4:4b:b4:c5:76:23:ab:5b:f9:
93:e8:65:83:03:0a:40:e5:39:67:ee:0c:e7:c0:01:
2c:cc:53:a5:dd:60:b4:36:1e:8a:cb:5a:79:f8:66:
c8:fe:ab:99:f0:f2:ed:66:83:62:47:09:aa:51:6f:
85:7b:52:c5:ab:01:5d:54:2c:af:dd:c9:6c:c7:9c:
a7:0c:3e:7d:fb:df:55:34:8c:ea:28:5b:20:e7:ae:
f2:c4:37:d9:c9:5f:6b:0a:7e:63:e8:e4:59:49:c8:
af:91:8b:bc:aa:93:5c:cf:1d:11:8a:4b:a8:42:74:
1d:f6:93:81:4f:8f:4c:7c:19:fc:87:4a:92:32:07:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:E6:B1:85:B9:67:22:07:63:70:7E:88:90:18:A4:05:A8:02:0A
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/b6jmsYW5ZyIHY3B-iJAYpAWoAgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.131.0/24
89.185.0.0/22
89.185.24.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:3e:bc:8b:42:ca:a7:28:fb:14:0f:6f:48:d2:0e:51:05:40:
54:68:ef:b5:6c:c4:72:d8:de:ab:4f:55:9c:18:4b:76:ad:e7:
38:5b:c3:9f:44:70:39:16:2b:53:49:4b:7e:34:75:5a:68:5c:
5b:ba:37:2c:d8:3a:18:5b:7e:61:a3:3f:b7:2a:d0:10:ea:ae:
fb:4f:38:42:e8:92:1f:a0:b9:bd:49:c3:92:f1:0f:d6:57:b4:
b9:ce:79:f9:8f:65:90:78:e2:b6:9e:9e:ba:19:48:66:b1:1a:
82:29:f6:92:af:73:0d:a7:59:3b:70:e9:c5:4e:e3:14:4f:13:
f0:05:de:41:c8:df:40:c6:86:c5:cd:5c:44:6f:f9:94:ae:07:
ed:78:b0:91:b7:7f:eb:35:6b:28:c9:cb:55:03:22:02:4e:1a:
90:e0:26:ee:f0:48:c2:a3:13:36:47:dd:45:56:04:02:70:e4:
51:d9:e4:7b:4e:14:b2:55:eb:10:8f:31:4e:25:35:65:b6:8d:
84:cd:df:d1:1b:e0:17:ed:2d:e0:8a:d8:6f:17:3b:59:cd:fb:
bf:5b:0d:f9:78:6e:61:ed:8e:27:8d:99:96:a6:42:70:7f:38:
d7:fe:30:67:88:06:d5:e9:81:02:90:6b:9a:c2:1d:b4:22:4c:
8e:b1:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org