Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/dhwHNcQbPTq8xenoZ-ynLOMZejQ.roa
File: dhwHNcQbPTq8xenoZ-ynLOMZejQ.roa (raw, json)
Hash identifier: j4kpqHktphMqTJoau7I/3leDsu+bNbHckLDjuJVm6OE=
Subject key identifier: 76:1C:07:35:C4:1B:3D:3A:BC:C5:E9:E8:67:EC:A7:2C:E3:19:7A:34
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018ACC47E1344C02237A6AADE24081A32DE1
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/dhwHNcQbPTq8xenoZ-ynLOMZejQ.roa
Signing time: Mon 25 Sep 2023 12:19:37 +0000
ROA not before: Mon 25 Sep 2023 12:19:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199058
IP address blocks: 81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:47:e1:34:4c:02:23:7a:6a:ad:e2:40:81:a3:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 25 12:19:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=761c0735c41b3d3abcc5e9e867eca72ce3197a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:e7:46:26:ee:3b:80:1a:b1:f4:06:5a:2f:
70:c9:71:21:77:9f:53:58:91:39:b5:e1:4a:be:0a:
1f:1e:a4:d8:7b:89:c5:6c:42:14:a4:aa:b1:3d:c4:
0c:e7:4c:91:05:0d:ba:c4:ef:6d:4b:3c:7b:74:ea:
9f:1c:f0:19:fc:5e:5c:ec:ab:5e:5d:e0:50:91:11:
1c:82:e8:eb:23:85:23:31:f5:1e:19:09:4f:92:c5:
46:ac:a8:5b:67:77:16:1e:b4:9a:ee:dd:2c:41:e6:
5c:a4:c9:80:78:61:5f:42:13:64:31:c8:25:21:c1:
c2:89:e2:1d:99:fe:32:2b:b7:79:a0:c9:11:c6:8a:
4c:9a:11:c7:2f:00:b9:73:43:45:de:31:e8:bf:a3:
3d:1c:13:07:32:ab:46:52:11:e3:2d:ce:91:cc:b5:
8e:f5:7a:d4:fa:37:91:e3:5e:a1:d5:67:af:6f:36:
e3:cc:4c:21:e7:65:b0:90:e8:b1:d2:a0:27:11:b5:
f1:6b:77:f2:2b:71:0f:bc:8d:aa:3d:87:54:d2:ca:
fe:49:59:f7:19:a9:96:b5:68:a1:1a:32:c5:2c:14:
ed:19:19:41:c7:65:4f:31:34:b9:23:90:4a:c3:cc:
98:15:96:8d:af:9d:cd:4b:cc:eb:7d:00:59:db:c7:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:07:35:C4:1B:3D:3A:BC:C5:E9:E8:67:EC:A7:2C:E3:19:7A:34
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/dhwHNcQbPTq8xenoZ-ynLOMZejQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5b:a5:c5:70:af:30:d8:b7:61:5a:cb:8d:fd:7e:70:24:84:
8e:ae:d2:74:d2:e9:92:87:3f:b3:3d:58:61:08:40:ff:57:b6:
b1:6e:d8:bf:e0:0c:94:ec:15:18:4c:7e:d1:83:51:5f:4e:2b:
90:ea:26:19:c9:0a:c3:70:ad:d6:42:b7:f7:43:dc:24:da:4c:
e0:95:0e:88:24:90:1e:c9:d7:3e:93:88:66:58:74:1e:8b:1b:
68:70:ca:be:42:00:5b:82:a2:74:49:d9:e2:f7:a2:1b:d6:58:
ff:9b:26:59:80:7f:aa:bc:04:8b:29:e4:77:28:ed:fd:51:31:
00:ed:ff:0b:14:49:f3:cc:94:f7:e5:79:31:5b:d9:25:ed:69:
6b:8d:e7:ee:aa:2b:34:32:c1:81:5b:73:63:3a:da:ea:f5:12:
d4:db:a5:51:62:33:56:5c:e6:41:0d:a8:6a:e6:2f:30:75:45:
70:65:fd:4d:2a:73:fa:09:10:54:f2:80:98:01:ab:ba:ee:59:
95:89:eb:0d:63:03:c9:32:7f:ba:07:74:a6:8e:3e:91:ff:d8:
62:ba:bf:20:d8:13:78:02:82:d7:9c:6e:bf:5c:63:5b:d5:c5:
b1:b2:24:ee:73:fa:fc:74:a2:81:f3:4f:73:22:f7:69:5f:7b:
01:7b:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org