Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/h00yAdDAYZSzocmKAkO8otMF8GA.roa
File: h00yAdDAYZSzocmKAkO8otMF8GA.roa (raw, json)
Hash identifier: LYE5mlTi65gg0B8JfyDr4zLeXgHXhp/9+z69T9uWVLY=
Subject key identifier: 87:4D:32:01:D0:C0:61:94:B3:A1:C9:8A:02:43:BC:A2:D3:05:F0:60
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018809B04F54C4B1A04CFD99CD0904BF772C
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/h00yAdDAYZSzocmKAkO8otMF8GA.roa
Signing time: Thu 11 May 2023 07:22:09 +0000
ROA not before: Thu 11 May 2023 07:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.0.0/22 maxlen: 22
81.22.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 17:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:b0:4f:54:c4:b1:a0:4c:fd:99:cd:09:04:bf:77:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 11 07:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=874d3201d0c06194b3a1c98a0243bca2d305f060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:9c:a2:07:64:88:b6:b7:de:56:cc:e2:1e:
e6:db:30:2b:9b:41:74:b1:90:51:b1:17:1f:fb:64:
ff:67:35:aa:da:2a:e1:ec:4b:1b:21:03:79:0c:24:
f5:59:88:51:d0:ec:fb:53:58:e8:9d:c3:3a:ea:fc:
ab:49:24:bf:0d:72:f2:a9:28:82:03:50:74:81:e5:
d4:66:b2:b4:61:9c:c8:18:ae:85:d4:5e:46:98:fc:
b1:06:26:98:0d:b6:60:6e:77:2f:b5:40:86:ef:3c:
a6:8c:fe:6b:61:d6:d0:a9:8d:eb:5a:38:f4:c2:9b:
3d:f3:dc:d2:dd:88:dc:1c:43:e2:ff:c3:63:41:ec:
6d:a7:d2:d9:94:15:ce:30:b7:60:f9:a6:3d:cb:27:
4a:49:bb:48:c1:f0:b4:45:eb:c6:58:a6:69:4b:9e:
4a:3b:fa:4d:81:ba:03:85:f8:98:f7:f5:8d:96:fb:
1a:f0:00:a5:29:41:b1:4b:c3:f1:e2:63:5f:4c:e2:
ac:93:4e:66:ad:6f:72:d3:c8:f8:dd:08:7b:53:4e:
1e:b9:d7:84:31:52:85:da:db:11:1a:33:d6:89:23:
8c:f1:c1:fb:fb:9a:ac:3a:a2:fa:1f:82:11:bb:51:
d7:2c:47:22:e3:98:a9:21:d6:ce:c7:60:c0:52:76:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4D:32:01:D0:C0:61:94:B3:A1:C9:8A:02:43:BC:A2:D3:05:F0:60
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/h00yAdDAYZSzocmKAkO8otMF8GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.131.0/24
89.185.0.0/22
Signature Algorithm: sha256WithRSAEncryption
92:e9:62:b8:c6:c5:45:3e:de:81:00:10:ea:d0:d2:95:e8:62:
9a:9f:b1:a6:e1:4c:88:69:7f:f0:79:44:02:15:29:ea:0f:96:
94:0c:0b:62:18:cd:0f:2f:87:b6:fb:90:8d:a6:19:a9:22:3b:
36:37:40:da:7a:c1:d8:53:86:55:60:5a:1a:78:ee:32:26:9e:
9e:58:ee:4c:f2:38:a1:9c:d1:d6:1e:15:71:23:55:3a:df:d4:
00:9b:08:02:86:cf:40:96:38:91:39:93:f2:fc:64:23:b5:a1:
38:80:9d:cc:8a:68:21:66:56:90:51:aa:4d:a6:18:06:54:89:
0b:4c:a6:59:8b:66:46:9e:c3:4d:50:85:d8:65:37:84:ea:b5:
14:97:74:c9:82:6e:59:9d:82:cc:c0:0b:42:ee:08:36:03:c6:
2c:4f:46:15:df:23:98:e0:c7:ee:7f:20:44:7a:d9:ae:e1:13:
c1:7e:38:f7:8f:0e:f2:d9:1c:b7:fa:a8:43:68:9c:bd:d1:1b:
73:f3:71:e8:d8:72:ac:bb:f7:4d:e7:7f:81:c6:5f:35:4f:d1:
3d:59:a9:84:3a:fb:2a:c9:25:a9:3f:96:d5:4d:0b:1d:a8:29:
6b:b1:ee:be:6b:26:d9:60:28:51:0f:64:8c:91:2d:48:92:be:
81:71:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org