Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/miA8kWcV6hTGr2L5ueLD1FHFA0E.roa
File: miA8kWcV6hTGr2L5ueLD1FHFA0E.roa (raw, json)
Hash identifier: a/Vrw5DvFowZPORDm0o/ASA66H/CjZB6jKfsQ4e3B2s=
Subject key identifier: 9A:20:3C:91:67:15:EA:14:C6:AF:62:F9:B9:E2:C3:D4:51:C5:03:41
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01928529F3DCE7B790BA1BC78F013D59425B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/miA8kWcV6hTGr2L5ueLD1FHFA0E.roa
Signing time: Sun 13 Oct 2024 09:16:12 +0000
ROA not before: Sun 13 Oct 2024 09:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 81.22.129.0/24 maxlen: 24
81.22.131.0/24 maxlen: 24
81.22.138.0/24 maxlen: 24
81.22.141.0/24 maxlen: 24
89.185.0.0/24 maxlen: 24
109.72.121.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 09:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:85:29:f3:dc:e7:b7:90:ba:1b:c7:8f:01:3d:59:42:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 13 09:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a203c916715ea14c6af62f9b9e2c3d451c50341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:a6:23:f9:6e:32:88:e9:c0:85:69:83:ce:
3b:2b:ae:8f:36:0b:96:b3:9f:f0:60:1b:c4:31:44:
a5:0b:5f:86:df:a7:9a:81:66:73:69:40:d5:e2:e7:
df:25:ef:a7:3b:df:03:14:23:67:77:4b:c4:5d:30:
02:b3:99:89:89:d2:87:ea:75:73:46:cf:0e:0a:90:
12:a1:d6:8e:a0:3c:42:2f:f4:b3:a6:51:c5:8d:b7:
89:de:d0:6d:6f:e1:24:41:f6:c8:af:e4:d7:48:43:
2f:0e:a7:72:5a:47:c4:b6:a6:66:60:6f:9a:84:15:
c5:98:52:fe:64:10:eb:03:63:6b:18:f5:ad:09:9e:
7b:2e:86:19:9a:92:04:cf:7c:94:de:c2:e5:47:02:
e0:1b:b7:95:f0:c6:5a:34:38:4d:50:30:7d:bc:98:
35:ef:ef:97:85:e0:8b:40:e8:34:2d:1b:9f:a7:a0:
be:0b:ab:9c:e2:42:4a:f6:f5:8f:db:d0:82:c4:51:
69:7f:75:28:be:ae:f9:0c:67:db:00:2f:bd:04:a7:
4f:b2:f4:53:90:18:ff:9b:4c:96:99:2a:f1:cd:01:
13:d0:91:16:a4:8a:59:73:ed:90:7e:97:9d:b1:1c:
8c:1d:f7:f8:93:cc:86:31:2e:44:b9:be:43:7f:3a:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:20:3C:91:67:15:EA:14:C6:AF:62:F9:B9:E2:C3:D4:51:C5:03:41
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/miA8kWcV6hTGr2L5ueLD1FHFA0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
81.22.131.0/24
81.22.138.0/24
81.22.141.0/24
89.185.0.0/24
109.72.121.0/24
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
24:69:9e:6d:cc:6e:26:26:b7:32:5b:ed:9f:e3:1e:32:32:98:
4f:75:51:4e:cd:75:15:7c:ac:ac:39:1c:71:9e:bf:6c:f8:44:
d9:b4:e2:91:54:4b:69:47:f9:2b:ba:a3:23:bf:cb:50:58:8c:
12:43:ab:1b:a2:a4:5d:f8:64:c6:db:ee:69:8c:8e:f6:df:86:
42:b3:16:3c:09:e3:70:23:f8:66:5c:df:5b:73:b8:10:df:ac:
25:37:ce:25:0b:8e:f6:87:09:2e:74:30:85:cc:ae:85:de:3e:
b0:c7:0c:01:fd:6f:49:af:4b:01:d4:8a:a1:ee:37:4b:f8:96:
c4:a5:a5:c1:39:29:aa:51:67:03:a5:a6:e8:a3:f9:f9:4e:d9:
8f:0b:2f:2c:37:fc:48:82:8c:19:6d:c0:d7:31:77:94:ec:f6:
75:c5:8a:e8:fa:3c:d0:c5:b0:4d:32:96:72:48:67:34:0a:94:
6a:55:a0:b4:1c:d2:06:79:45:35:1c:ad:38:c3:5d:77:ae:71:
66:08:1b:2c:c4:78:db:a3:79:73:0e:57:ed:ac:f9:7d:19:fc:
a3:1d:14:18:61:2d:03:f4:04:41:2d:18:bb:d2:5a:26:14:71:
ca:34:64:2d:17:f1:02:c9:45:e4:42:f1:e9:e0:71:c8:1b:63:
f3:14:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 13:01:08 2024 by rpki-client on console-fra.rpki-client.org