Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/h8aT_wCv-vzo3aLFKyTQ8oOmV8I.roa
File: h8aT_wCv-vzo3aLFKyTQ8oOmV8I.roa (raw, json)
Hash identifier: hwZF9laMz1gyc+Exb50cre4/eY4eqAhWbBvFowZ1Kgs=
Subject key identifier: 87:C6:93:FF:00:AF:FA:FC:E8:DD:A2:C5:2B:24:D0:F2:83:A6:57:C2
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0187AF64A4F13FA61D77BDA7A85B1272EFD0
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/h8aT_wCv-vzo3aLFKyTQ8oOmV8I.roa
Signing time: Sun 23 Apr 2023 18:33:41 +0000
ROA not before: Sun 23 Apr 2023 18:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.22.135.0/24 maxlen: 24
89.185.24.0/22 maxlen: 24
81.22.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 08:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:af:64:a4:f1:3f:a6:1d:77:bd:a7:a8:5b:12:72:ef:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 23 18:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c693ff00affafce8dda2c52b24d0f283a657c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:e8:ba:58:5d:9d:7e:fb:be:b3:95:36:49:
1f:ac:b6:e9:fd:ed:74:40:61:a1:0c:da:ea:e3:7b:
ac:a8:74:a5:d5:f5:23:8b:bd:7d:6d:e7:3f:47:d5:
ee:37:8b:07:38:f9:d0:bf:68:fa:15:92:a7:37:b0:
99:df:4b:62:cc:04:74:8e:7b:9e:5c:f1:0f:b1:a9:
f7:e8:d1:e7:c8:37:26:a5:f6:2b:1e:32:1d:c1:ae:
12:52:f6:0b:58:fa:dd:2c:7d:88:c1:1d:5b:88:a8:
d5:78:e8:03:86:70:ad:bc:da:e1:ac:f6:fc:a3:fd:
6c:45:9f:ea:1a:07:5d:64:dd:e7:64:9a:a2:d7:70:
a8:7a:df:e2:7a:4a:e5:1d:9d:53:ba:d2:ae:76:52:
39:08:4e:42:40:38:a0:67:82:74:00:37:b5:ee:c4:
8c:b3:0a:22:40:7a:5f:a5:fd:47:c1:9e:3d:fc:9d:
44:dc:13:49:12:c0:3d:d7:bd:e8:69:2d:e6:31:b3:
55:a4:94:38:16:9d:fd:d9:59:1e:e1:3b:09:50:d6:
4a:12:00:ab:24:ce:88:d2:1a:9e:75:c2:d0:54:67:
7d:d0:d9:24:02:39:3e:c2:f6:6a:5a:02:30:49:a0:
54:30:62:cf:9b:2e:0b:c0:6a:42:20:37:f7:af:22:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:93:FF:00:AF:FA:FC:E8:DD:A2:C5:2B:24:D0:F2:83:A6:57:C2
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/h8aT_wCv-vzo3aLFKyTQ8oOmV8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/24
81.22.135.0/24
89.185.24.0/22
Signature Algorithm: sha256WithRSAEncryption
17:f7:7e:65:3c:e7:ee:51:e4:83:cd:df:2e:f9:7a:d6:4f:e4:
8d:64:c1:f3:d2:16:bb:51:41:00:7c:2b:77:d1:79:8f:32:ab:
12:e5:af:09:a8:85:f8:d0:bb:a2:0c:54:c3:b5:1f:89:db:51:
9d:46:52:da:b5:0b:85:35:83:27:e7:8d:ac:d3:74:ed:ef:fc:
d5:05:6c:bf:b5:4b:b2:d0:42:54:38:b5:34:5f:4d:fb:7e:98:
0e:13:f6:ad:15:a2:89:7b:61:64:7a:1c:39:99:a8:6d:ac:00:
62:28:76:e7:90:a9:5b:8f:6a:9b:d9:9d:ab:e5:52:c9:e3:99:
b7:6e:11:a3:93:30:64:4c:c6:e4:64:7a:c2:a4:79:50:02:13:
20:3e:61:3b:37:01:51:a5:b8:97:fe:4c:c9:94:de:3f:21:ec:
38:7c:15:33:ff:59:54:2a:53:e3:b4:17:59:2b:9e:e9:94:50:
f0:50:96:96:5f:64:e5:a4:86:9c:bf:c7:59:ac:01:24:39:f6:
8c:3a:34:83:f1:e0:8f:04:e3:55:c4:c5:22:cf:b5:3f:1c:49:
d5:6a:5e:24:b8:70:93:83:3e:0e:2d:aa:fd:0a:83:cf:a9:75:
07:b0:62:76:d8:eb:d0:ee:fc:13:de:0a:82:4f:ab:75:9d:cc:
14:17:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org