Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/izzE4YdTfocx1ffDV5YsZMw9SJA.roa
File: izzE4YdTfocx1ffDV5YsZMw9SJA.roa (raw, json)
Hash identifier: Oo4Cksqo/BX0MFBM8FTsjM8VGLuqg22LkYhZxaG9UCI=
Subject key identifier: 8B:3C:C4:E1:87:53:7E:87:31:D5:F7:C3:57:96:2C:64:CC:3D:48:90
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01868D985143F3B688DD2C058F8BA9DE89B4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/izzE4YdTfocx1ffDV5YsZMw9SJA.roa
Signing time: Sun 26 Feb 2023 12:00:15 +0000
ROA not before: Sun 26 Feb 2023 12:00:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50354
IP address blocks: 81.22.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 20:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8d:98:51:43:f3:b6:88:dd:2c:05:8f:8b:a9:de:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Feb 26 12:00:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b3cc4e187537e8731d5f7c357962c64cc3d4890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:73:29:55:63:2f:53:5e:33:f9:9d:69:c6:
0d:b0:a5:34:54:dd:ed:67:f4:2d:95:1f:aa:ea:20:
0d:d2:a5:35:fc:a7:91:76:72:ab:e9:78:f8:9a:46:
df:c2:5c:89:57:99:d3:f7:e7:19:fe:8e:10:8c:b1:
99:32:61:82:b7:af:95:df:2b:08:30:f3:60:0d:0d:
e9:36:0b:46:ed:21:5f:34:6c:dc:28:45:da:df:ab:
10:30:31:f0:82:68:eb:3d:94:af:7f:0c:cd:97:eb:
e1:d5:b5:ae:2e:1a:64:c2:ef:c1:20:a7:4c:19:d5:
ef:4c:6a:ac:0d:97:c3:96:7d:7a:7b:b9:07:14:fa:
82:86:a6:88:ed:9d:1e:8f:43:30:7a:e6:2f:e9:88:
41:c9:86:c8:51:bc:3b:70:38:2b:4f:5d:5f:3a:b8:
e4:ae:fd:8a:3c:2c:f7:88:f6:ab:ad:58:df:dc:2f:
c1:e2:bc:f4:e3:40:93:a1:5a:14:08:44:aa:16:d2:
95:05:e2:dd:de:4d:bc:d7:7a:71:30:36:6e:d9:86:
52:cf:02:5d:88:fd:6b:cc:0b:d4:d8:cc:ae:34:02:
ad:12:c1:70:a8:02:c2:2b:38:9f:2b:ec:65:61:8c:
5a:34:03:03:aa:5a:6e:59:fc:d0:d4:b8:60:85:1a:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3C:C4:E1:87:53:7E:87:31:D5:F7:C3:57:96:2C:64:CC:3D:48:90
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/izzE4YdTfocx1ffDV5YsZMw9SJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2d:8f:2a:20:20:3f:37:a1:15:5f:92:3f:73:e2:b1:5c:df:
0a:c5:61:16:ce:80:de:d5:9f:32:43:2d:bf:6b:a4:b0:68:82:
93:3e:d8:67:0a:4b:51:da:2e:ed:61:60:f4:bf:2f:11:20:a1:
71:18:27:f0:b9:e3:0d:c0:f3:d5:e2:3a:03:88:13:c9:7b:e0:
53:62:19:3b:8f:fd:e8:b2:31:8b:68:f0:22:92:3c:77:e6:00:
0a:93:2f:96:14:8c:98:07:07:95:14:6e:aa:08:2b:de:e3:2a:
0e:3b:4d:f3:47:69:34:0f:12:e7:c5:fb:ba:f1:43:48:68:d6:
74:60:9a:b8:48:0e:e8:30:6e:8d:1b:3c:6e:63:de:2e:45:95:
04:95:38:13:51:0c:bf:40:44:1b:4d:9c:7e:46:08:bc:77:82:
2e:a7:8e:65:d0:b0:5d:8e:7c:2c:d4:8f:87:6b:41:12:b7:2f:
55:6a:49:80:0e:42:67:db:5b:ca:1c:a5:2c:bf:f7:c1:61:b7:
a7:0c:13:fe:cc:cb:49:8e:5e:ae:c3:ae:45:0e:16:53:c7:2e:
8c:ef:ad:1d:8c:2f:bd:e3:98:bf:6b:37:67:5e:5e:58:28:31:
e3:af:ae:c7:41:59:53:7c:97:65:41:c6:6c:38:0e:af:a6:93:
3d:55:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org