Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/e92XriMgy66D46pMiOsFpDfHA80.roa
File: e92XriMgy66D46pMiOsFpDfHA80.roa (raw, json)
Hash identifier: lfQVnd1f6hsfNC+sVhlIH2BWUliMMm1Q+K2Q0Ru+i7U=
Subject key identifier: 7B:DD:97:AE:23:20:CB:AE:83:E3:AA:4C:88:EB:05:A4:37:C7:03:CD
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018E2DB0CC46718B28E6F08BA7E82A3FF463
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/e92XriMgy66D46pMiOsFpDfHA80.roa
Signing time: Mon 11 Mar 2024 13:25:45 +0000
ROA not before: Mon 11 Mar 2024 13:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
81.22.140.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 08:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:b0:cc:46:71:8b:28:e6:f0:8b:a7:e8:2a:3f:f4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 11 13:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bdd97ae2320cbae83e3aa4c88eb05a437c703cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:38:76:ba:1e:ba:2e:08:65:16:8f:76:15:
3e:0a:7c:62:46:ce:c1:f8:1a:80:3b:8e:d7:d1:7b:
95:97:64:22:d8:aa:23:0a:93:6c:33:21:92:b5:57:
29:97:fa:d3:35:cd:72:3e:f4:83:e9:11:4d:12:66:
6e:6d:05:3c:93:01:06:ae:17:13:06:4b:7c:a9:79:
bd:41:37:6e:3f:de:c9:3c:c3:e6:0c:b8:ba:35:ea:
c7:83:aa:71:10:41:04:d5:cc:e4:f1:3a:f2:7b:20:
69:25:d3:f7:fc:61:88:78:a5:40:84:3d:1d:6e:38:
b7:35:a9:47:c7:bf:74:3b:ae:ce:a1:fc:77:8b:db:
a9:8d:83:a5:5e:96:21:1b:e1:85:26:ad:b0:c1:68:
e6:8d:92:a1:ff:26:d1:d5:9b:b9:f2:a8:d2:ce:b3:
a4:b5:10:c6:63:fb:74:d6:da:cc:05:db:a6:07:d0:
70:59:da:80:7a:12:bb:d3:b4:05:9f:9f:18:b0:e0:
29:66:cb:3b:57:b5:da:bf:97:be:72:4f:ad:c1:d8:
d2:b3:e7:ce:e8:c8:1e:87:05:27:6d:82:73:0c:9a:
e7:2a:56:94:ef:ea:7b:3d:ac:6e:4e:ec:0b:43:1b:
33:73:1a:78:56:02:d9:3a:4e:4b:30:9a:b3:c3:c1:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:97:AE:23:20:CB:AE:83:E3:AA:4C:88:EB:05:A4:37:C7:03:CD
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/e92XriMgy66D46pMiOsFpDfHA80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/21
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
83:1f:bf:2b:be:19:25:dc:a6:39:61:6e:9e:e0:24:b8:a1:11:
38:97:dd:71:50:32:35:58:38:f4:e5:9e:7b:1f:7f:08:97:a8:
21:3e:8a:8d:7b:0f:47:e1:1e:fd:b6:c8:a3:d1:df:9f:1d:f2:
1f:ab:6a:f1:8a:c2:f5:02:0b:d0:fb:16:bc:ac:97:83:bc:e2:
70:fc:a3:f4:ec:4e:db:fc:83:f4:57:cd:90:b1:1d:e1:11:cb:
4b:68:62:93:2b:2d:18:16:43:16:bf:a3:8f:bd:be:b8:c1:7c:
6f:bd:de:94:e8:1c:e2:fa:c8:53:44:e1:97:ba:3c:2e:88:09:
27:bc:4a:d0:6f:e0:cc:97:ce:49:00:b8:3f:12:26:bc:3f:b1:
f5:40:a1:df:fc:09:d7:a3:a6:b6:3e:87:49:0d:e3:f3:ad:cd:
a2:9f:da:af:2e:bd:7e:b4:bb:59:0a:31:be:80:d4:61:69:d7:
45:d7:92:b0:4d:1e:6f:6f:c0:14:24:aa:b7:5a:bd:21:fc:f3:
03:1e:f2:7c:2c:c5:44:57:d7:75:9f:07:8e:d3:6e:7f:c1:7e:
0c:ef:13:ab:89:ba:1f:33:ba:d6:40:5a:0a:dd:6d:68:43:c9:
76:3a:01:ff:82:06:25:29:de:16:7c:4d:d8:db:57:0f:11:ff:
f9:b6:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org