Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/bTu-4vZz4d5PWzkR-ZsO4gAgtrU.roa
File: bTu-4vZz4d5PWzkR-ZsO4gAgtrU.roa (raw, json)
Hash identifier: DYaNYCgSNYoDse4Sk3hDx7ZX1XG8+8TLooy7iT6sCdI=
Subject key identifier: 6D:3B:BE:E2:F6:73:E1:DE:4F:5B:39:11:F9:9B:0E:E2:00:20:B6:B5
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0191666CF7133B5B37F6340735BF39A4E470
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/bTu-4vZz4d5PWzkR-ZsO4gAgtrU.roa
Signing time: Sun 18 Aug 2024 16:58:22 +0000
ROA not before: Sun 18 Aug 2024 16:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
81.22.140.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
109.72.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 08:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:66:6c:f7:13:3b:5b:37:f6:34:07:35:bf:39:a4:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 18 16:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d3bbee2f673e1de4f5b3911f99b0ee20020b6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:1d:db:4b:df:90:b4:11:64:16:2c:b2:f6:
a8:0c:7e:3b:c3:34:86:15:05:59:fb:20:aa:2a:4f:
ea:70:b8:d4:69:f0:3a:c7:68:55:51:a5:62:1a:4f:
ad:07:c2:37:fb:68:32:e0:4d:9c:cf:fa:cb:02:09:
f6:bf:c5:6c:70:e9:4d:56:30:51:15:e6:65:f9:a3:
9b:63:ef:0a:6a:0c:29:20:98:0b:d5:85:d6:4c:3b:
ce:72:f6:39:68:87:90:1f:49:1e:21:2b:1a:3a:51:
77:85:ef:7b:1c:4a:58:06:cb:40:1a:25:ff:4b:27:
d5:a4:83:0b:2b:8c:6f:26:56:95:27:c5:fd:ea:eb:
7b:0c:1b:e4:de:b8:ae:bb:e2:f6:e5:65:b6:c5:85:
ae:99:48:19:7c:6a:e1:b8:53:db:4c:7a:67:20:90:
14:87:3e:3f:f3:b1:06:08:63:e3:24:c4:d0:00:48:
2c:03:60:15:ff:11:7f:30:36:2a:a7:65:94:58:83:
e5:a9:50:44:8f:a8:15:7a:d9:22:f6:8e:4b:74:90:
4d:66:95:c1:ae:98:cf:2b:8a:4f:03:c1:d2:11:75:
d6:5f:38:dc:f1:49:1e:41:7a:cd:a2:ee:84:1c:4e:
0a:fc:ad:55:0f:e9:4f:ad:53:ef:f7:ca:08:40:dd:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3B:BE:E2:F6:73:E1:DE:4F:5B:39:11:F9:9B:0E:E2:00:20:B6:B5
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/bTu-4vZz4d5PWzkR-ZsO4gAgtrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/21
89.185.0.0/22
109.72.116.0/22
109.72.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8f:43:be:87:4e:ba:61:9b:7e:e2:98:3b:1d:f2:81:c7:94:
e1:7b:99:d5:b2:18:39:5c:8e:e4:7d:3c:15:86:ef:83:ba:ed:
d6:ce:d7:c2:70:bc:cf:e2:1f:d3:7f:a8:a1:ab:04:ba:f5:73:
67:63:da:ad:ca:ed:46:f7:af:da:e8:27:19:12:c9:d4:1f:b9:
9f:bb:12:23:18:2c:dc:6e:d6:a4:16:84:cc:91:32:6e:22:d8:
19:d7:86:9b:55:33:9b:74:d1:6f:27:7e:db:dd:f6:32:f8:d0:
94:e2:57:85:d2:21:77:af:7c:a9:38:d6:04:22:72:07:06:87:
70:f4:95:67:76:a3:c3:ed:21:e2:cc:29:bb:07:7a:0f:e2:2f:
af:28:d7:6f:3d:33:0b:bf:bb:0c:02:32:44:a4:74:2c:41:00:
fd:69:2d:3b:8c:65:cb:b5:9b:c4:3c:97:7a:2b:12:9d:3c:5a:
a0:73:54:78:e2:4a:61:69:34:f8:32:58:40:52:d6:71:02:ed:
1c:27:ad:b5:8e:75:ff:e1:49:b4:7a:04:21:be:83:77:39:75:
e5:6b:97:f5:f3:e6:3f:e6:96:f1:99:2a:96:64:9a:9c:fa:ca:
0d:b3:6a:40:fa:80:7a:78:9f:c3:f9:fb:6f:45:ca:77:c3:5c:
83:99:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 13:16:58 2024 by rpki-client on console-ams.rpki-client.org