Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/m3WajFsUHq7wvirSR6fHhrXllvs.roa
File: m3WajFsUHq7wvirSR6fHhrXllvs.roa (raw, json)
Hash identifier: VAq1pxPhdKccwN7cynVQkom+Yj5xgzEFc+lkeF+5BM0=
Subject key identifier: 9B:75:9A:8C:5B:14:1E:AE:F0:BE:2A:D2:47:A7:C7:86:B5:E5:96:FB
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018D5FFC23F7DBCF9125BCED8A07ADA7D4A3
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/m3WajFsUHq7wvirSR6fHhrXllvs.roa
Signing time: Wed 31 Jan 2024 14:46:16 +0000
ROA not before: Wed 31 Jan 2024 14:46:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 81.22.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 18:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:fc:23:f7:db:cf:91:25:bc:ed:8a:07:ad:a7:d4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 31 14:46:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b759a8c5b141eaef0be2ad247a7c786b5e596fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:3c:f7:3e:78:d8:55:ea:91:18:cc:29:0c:
13:3e:6d:de:79:17:b9:64:ea:e5:71:61:2e:d3:04:
63:83:af:a9:38:98:9f:be:5c:d4:5a:7a:38:31:6d:
a6:66:9c:52:85:a9:82:6b:d2:22:66:eb:60:e9:60:
4a:16:e8:90:1d:50:82:e5:87:8c:2b:74:a4:86:c9:
89:b5:df:e0:50:d9:87:c4:54:ab:8e:45:2e:fd:5f:
db:d6:98:e8:5d:14:67:0c:e3:e8:8e:e7:33:e7:e4:
34:39:cd:b0:96:1b:5c:17:9c:6e:02:b5:76:11:03:
b1:9d:65:46:c1:b0:d3:f6:9e:cc:ad:fe:48:c8:a1:
a5:44:4d:19:ae:37:7c:43:46:08:5f:a2:9f:31:85:
30:10:de:39:0f:fe:7f:f1:f4:66:92:d6:66:8d:7f:
b5:a8:99:fa:e1:ae:c8:07:41:8d:8c:bb:b6:75:c8:
e7:41:27:72:17:67:99:2a:e6:22:25:e8:64:dd:33:
c6:c6:dd:e3:fb:c3:7a:78:dc:52:bf:f4:98:d0:38:
62:a9:59:9e:6b:4f:53:60:14:74:9c:fc:68:0e:31:
2f:9c:11:0d:c6:65:55:9e:9b:49:66:72:6e:56:1c:
0f:4a:d9:52:60:74:df:81:85:bb:14:f8:35:31:a7:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:75:9A:8C:5B:14:1E:AE:F0:BE:2A:D2:47:A7:C7:86:B5:E5:96:FB
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/m3WajFsUHq7wvirSR6fHhrXllvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4d:9b:f1:07:00:cd:ff:dc:27:c1:b9:98:74:62:a5:b8:f1:
f6:99:3c:bc:26:13:4d:9d:c4:e1:bb:fd:ad:44:33:7d:26:1e:
ce:1b:44:f3:a6:29:fa:0b:ea:8a:4a:a1:50:63:e1:5f:00:9a:
3f:1d:9c:f6:65:4c:53:b7:64:0c:11:a0:03:56:ff:af:79:9f:
ab:ba:a4:74:f8:5e:73:50:fb:c1:18:49:ba:1c:05:60:c6:e3:
b1:db:da:8d:d8:0c:8a:c4:3e:60:f1:5f:4e:03:50:75:a0:17:
82:d1:f4:5d:03:fb:56:06:8e:ee:89:d2:dc:18:5b:e5:dc:cf:
b9:32:7a:f6:1f:52:f7:e6:c4:43:ff:ad:1d:15:7e:08:19:1f:
9d:99:af:8e:6b:0d:77:df:3a:79:00:ad:68:d7:ed:2e:b5:54:
35:0a:70:a3:c3:dc:29:66:a2:ee:c4:22:9e:54:22:f9:36:1d:
6e:c3:bf:05:21:2a:01:fe:e0:0b:80:04:90:51:e3:64:21:be:
aa:61:96:3c:89:44:ce:64:8d:e7:83:da:85:ec:e1:e3:e7:e6:
8e:79:9c:66:ac:ec:f2:ec:16:18:37:69:dd:e7:d7:c4:8b:88:
b9:93:aa:9b:19:44:a7:9e:8f:7e:dd:89:92:7e:92:e1:47:e0:
0d:d1:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org