Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mAdbBgYhX_i1JNT4aUFXCLzyQ8U.roa
File: mAdbBgYhX_i1JNT4aUFXCLzyQ8U.roa (raw, json)
Hash identifier: LuHH3LMQhNAVDyqsgiy5ea4zrsXQ2EdtOZUBYoRxppE=
Subject key identifier: 98:07:5B:06:06:21:5F:F8:B5:24:D4:F8:69:41:57:08:BC:F2:43:C5
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A11757504F105E50548B37D31AEC4E480
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mAdbBgYhX_i1JNT4aUFXCLzyQ8U.roa
Signing time: Sun 20 Aug 2023 05:40:24 +0000
ROA not before: Sun 20 Aug 2023 05:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 81.22.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:75:75:04:f1:05:e5:05:48:b3:7d:31:ae:c4:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 20 05:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98075b0606215ff8b524d4f869415708bcf243c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:02:9b:4f:95:44:de:0c:d5:fb:55:93:51:
dc:7f:b0:14:5f:e3:28:0b:c3:ff:24:db:91:55:8b:
9b:b7:90:d3:f8:cf:14:4c:fd:b8:f6:68:69:8e:7b:
bd:c9:4e:1e:7d:80:f9:f7:22:f2:2e:32:3f:d1:65:
6e:93:a3:0a:8d:22:22:75:90:4a:11:06:dc:ff:64:
e8:13:5b:90:90:71:2d:0c:e7:12:88:06:09:6f:fd:
86:24:86:59:34:d6:90:b6:9b:96:78:51:61:4a:6c:
ab:ac:1a:df:fd:9a:d4:d3:de:7b:8d:3a:42:e5:0e:
19:19:e5:28:4a:a4:b1:73:61:68:1a:6c:bf:85:57:
12:73:97:7a:6b:66:3f:6c:8b:9b:38:25:37:ac:65:
8a:69:03:3d:65:ea:d7:46:f6:3b:72:b3:cb:30:74:
f5:8e:e3:fb:38:6b:97:c7:ac:ad:bf:d9:91:af:66:
05:9e:cb:17:46:4e:0a:64:d4:f2:aa:84:d4:62:aa:
9a:4f:ec:7a:dd:7c:95:ed:3c:a7:68:be:e2:e9:27:
80:90:44:86:f1:ce:84:48:da:4e:6d:4f:50:0a:76:
6a:d0:44:27:4c:69:df:00:93:69:c8:35:21:bb:2a:
11:15:77:cb:e7:4d:22:4c:a1:74:f6:ab:02:e1:40:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:07:5B:06:06:21:5F:F8:B5:24:D4:F8:69:41:57:08:BC:F2:43:C5
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mAdbBgYhX_i1JNT4aUFXCLzyQ8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.134.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2a:b2:c0:91:24:fc:b2:ba:c5:5c:e6:74:5c:02:68:5c:e5:
12:84:1a:3f:26:b1:a6:65:ce:2e:79:82:25:5b:c2:7b:bd:64:
24:70:0c:e7:95:c4:bd:10:3a:60:de:1c:e7:c5:55:64:9b:75:
96:1a:42:30:e4:f2:47:55:36:18:33:ba:b9:f6:0a:67:a5:27:
cc:d4:39:09:6a:b4:c6:20:4b:64:0a:16:9f:01:aa:31:c2:5a:
1d:a6:1a:f5:91:d4:8b:d8:7a:67:f1:9c:57:05:64:65:3c:a6:
f7:66:1c:e2:80:7d:00:8a:75:5d:e3:6b:9e:04:ce:7a:61:10:
69:99:a0:48:68:53:49:fa:49:65:8e:b1:2b:ca:f5:90:51:c4:
b9:f0:be:2b:df:91:e8:b7:a3:d1:91:8f:78:48:3f:c9:7b:83:
a2:e0:03:66:2e:49:53:f8:29:96:08:a3:53:8a:e0:d7:fb:83:
d4:fa:8a:d0:3e:9a:b5:c9:99:b6:68:cd:a8:6d:37:73:61:6e:
7e:0b:59:b4:e3:ac:d7:66:35:d0:75:f2:4b:eb:65:d5:70:be:
48:ff:6c:9b:f0:2e:63:c0:6f:37:82:03:56:fc:b0:5f:07:d4:
cd:96:da:f3:2b:f0:1b:64:7e:77:cc:b9:67:5c:5c:a8:ed:d2:
c8:c7:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org