Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mruqx2jFYwEub-j5mPwwjSZMTDQ.roa
File: mruqx2jFYwEub-j5mPwwjSZMTDQ.roa (raw, json)
Hash identifier: o+I2rcuLTKrCutFwKvnkfe1QwJ9o3blCKOvIPxdI+IY=
Subject key identifier: 9A:BB:AA:C7:68:C5:63:01:2E:6F:E8:F9:98:FC:30:8D:26:4C:4C:34
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CEFD67EB9A00B83F70680E0B4B30D21CA
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mruqx2jFYwEub-j5mPwwjSZMTDQ.roa
Signing time: Tue 09 Jan 2024 20:07:40 +0000
ROA not before: Tue 09 Jan 2024 20:07:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 81.22.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 08:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:d6:7e:b9:a0:0b:83:f7:06:80:e0:b4:b3:0d:21:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 9 20:07:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9abbaac768c563012e6fe8f998fc308d264c4c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:27:4d:cc:54:30:e6:ce:96:9f:a2:c5:ae:
e9:87:0f:35:22:f9:04:c2:e1:5e:16:19:b4:97:91:
2b:5b:19:cf:24:d5:5c:b6:f3:02:bd:0d:04:20:2e:
d5:a4:1c:18:96:9b:d8:ec:3c:7e:96:a6:d2:fb:28:
61:51:fa:b5:a9:c7:9c:02:cb:e3:c9:b0:90:d6:f4:
53:31:db:3a:9f:55:d4:c5:c3:06:42:d3:2f:95:c9:
ab:f0:b0:7a:62:c7:81:8a:d4:20:ea:6c:88:ec:4c:
af:69:ff:88:bc:08:e3:eb:54:09:38:26:c5:e1:25:
4f:fb:12:fd:3e:ce:25:92:3c:39:57:67:c3:38:5b:
57:44:58:43:e3:75:f6:2a:c3:de:a6:f8:e1:6c:2c:
6e:e0:cd:d2:e6:e4:3c:38:9d:e1:53:47:84:e2:a0:
f2:c5:40:af:5a:c3:c3:92:43:90:0d:a1:7e:13:32:
30:c9:30:08:c9:f6:30:1f:f0:07:3c:d8:96:3f:d1:
b4:ee:97:bb:f0:a5:cd:68:8b:5a:2d:85:eb:c3:5a:
32:31:8f:ed:f6:75:dd:23:e7:8d:59:85:73:8c:ef:
96:47:f1:4c:2c:59:3d:e2:11:cf:d9:c9:f0:69:cf:
f3:a1:af:fc:5c:31:32:cf:01:e6:3f:97:c3:e4:ff:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:AA:C7:68:C5:63:01:2E:6F:E8:F9:98:FC:30:8D:26:4C:4C:34
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mruqx2jFYwEub-j5mPwwjSZMTDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2c:83:46:2e:ba:02:c9:4a:b5:93:cd:78:c0:84:9b:98:db:
a0:bb:e0:85:4f:15:69:bf:12:43:c3:59:c3:b3:1d:17:c6:fb:
1c:f6:de:d8:25:6f:8e:82:24:7a:c4:68:4a:82:09:59:91:36:
f2:7a:65:a7:ed:8b:a3:cf:c3:1c:1d:54:2b:40:a3:54:83:3f:
7b:6c:e8:1f:df:fc:c6:31:b2:4d:c6:a4:20:34:d1:eb:a3:54:
02:97:e4:dc:4d:2a:27:fb:bb:9b:8b:bf:94:95:1d:ca:33:ce:
85:7f:bd:71:b7:60:8d:6a:3b:d9:2f:67:90:81:01:21:5c:f7:
14:b4:f4:4d:53:23:a1:7e:1a:06:d0:2c:bd:36:79:36:0a:55:
f6:22:c1:e0:f6:36:bb:d8:e2:05:e5:85:f1:b6:fb:63:27:22:
28:a0:cd:aa:76:ae:89:0f:2d:be:87:68:77:4b:dc:a8:28:0b:
ce:63:4c:c0:3f:62:55:73:24:8c:21:b7:20:e4:cf:ad:4a:22:
ce:ff:a8:00:b2:db:07:ec:7b:4a:77:fa:9c:23:1f:a6:ec:5d:
7f:f8:11:f2:ce:c8:15:1b:9e:9c:d3:00:72:43:9d:71:fa:9b:
c6:35:ec:8c:ed:96:86:ed:72:ae:35:9c:1a:f4:97:b8:e7:5c:
b8:43:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org