Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/eEaVnUp4r1qx2RQBh4iMq5ulFZE.roa
File: eEaVnUp4r1qx2RQBh4iMq5ulFZE.roa (raw, json)
Hash identifier: /iyVEBj/tontbsiZe2Sjo2z/oo7a2Y8YIn4lxDk94XI=
Subject key identifier: 78:46:95:9D:4A:78:AF:5A:B1:D9:14:01:87:88:8C:AB:9B:A5:15:91
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018DB28A42A9B6D840D3BB35E03C662141C9
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/eEaVnUp4r1qx2RQBh4iMq5ulFZE.roa
Signing time: Fri 16 Feb 2024 15:30:21 +0000
ROA not before: Fri 16 Feb 2024 15:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
81.22.140.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 13:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:8a:42:a9:b6:d8:40:d3:bb:35:e0:3c:66:21:41:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Feb 16 15:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7846959d4a78af5ab1d9140187888cab9ba51591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:15:b1:40:de:e3:72:4a:d4:ca:ac:de:2d:
6c:f8:ee:f7:e2:73:48:ca:d4:80:ce:d1:2a:60:9e:
c6:dc:85:2a:bc:e5:cb:55:20:1e:df:5b:10:d6:6e:
db:10:c0:dd:44:d6:6d:0c:13:12:3f:25:7a:e7:e8:
f9:81:9f:cc:87:43:81:80:af:bd:c3:c3:15:60:ef:
33:6a:f9:8d:63:cc:63:17:03:60:50:00:a2:69:e3:
ed:c8:ec:4f:1a:7d:9c:f3:79:58:0c:42:9f:76:0e:
cd:52:ef:9a:fd:e9:82:3c:04:06:35:75:50:4f:dc:
49:7f:14:17:15:f8:bb:52:d1:99:85:26:ab:82:d7:
da:c9:ff:f8:81:00:01:6c:73:04:81:88:23:dd:75:
9a:de:88:b3:11:d5:09:2a:9e:00:9d:84:1f:ac:b7:
a4:e4:51:1c:0c:a5:15:0b:3d:7c:f6:70:4c:29:f2:
0f:60:e4:33:d8:98:d4:c8:e8:d3:6e:d2:37:23:76:
96:21:3e:1e:a0:24:73:10:1f:69:da:e2:6d:ad:bc:
df:85:39:fc:df:c5:e9:8c:c9:e9:1e:13:82:8a:25:
47:ad:5a:59:96:98:0b:c7:65:e8:33:ea:97:55:4d:
18:02:3f:a8:07:45:a2:61:fb:90:6d:5e:38:d6:b7:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:95:9D:4A:78:AF:5A:B1:D9:14:01:87:88:8C:AB:9B:A5:15:91
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/eEaVnUp4r1qx2RQBh4iMq5ulFZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/21
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:0f:88:e5:75:32:d1:da:28:dd:a8:1a:31:0a:7f:03:7d:56:
27:44:f1:6c:83:4e:56:e2:f8:94:32:f2:46:cf:b3:a7:e5:cd:
98:f7:53:f8:a7:a5:83:70:10:aa:68:c0:90:46:c6:c2:9b:d5:
45:ba:fa:5e:99:b8:c8:7e:13:d6:34:1c:55:0f:ba:18:dd:ce:
1f:0b:c9:b3:d7:e7:9a:4b:56:b4:43:64:0e:d3:f1:ff:5d:ae:
e1:bd:53:58:0e:a9:d7:b5:f3:10:fd:d4:50:09:dc:4f:12:c7:
86:8c:53:75:23:96:94:a4:99:e0:5c:15:b5:d0:08:fd:dc:21:
a8:04:5f:a1:0c:d6:07:89:08:52:d4:78:6c:99:cd:50:81:80:
2a:ec:0d:a4:74:0e:12:59:20:9e:8b:bd:91:91:a2:7e:61:7f:
d8:65:fe:b5:fc:5a:8a:94:a4:ab:df:48:7f:f1:93:ab:26:47:
69:73:97:68:86:84:41:0f:e9:ba:88:1c:e4:f4:6e:c5:27:95:
58:fe:4c:d6:d0:f9:8d:75:a7:ea:62:1e:7b:c6:9c:3a:64:68:
97:4b:b7:04:9a:fd:7f:67:be:8c:45:11:3e:36:e9:a6:ef:1b:
c9:d3:15:b1:f5:b2:fd:af:aa:2e:9d:77:81:a4:20:79:02:bd:
cc:e3:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org