Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/o0QbHxyCm9adHg8VgcyTOlPHC7M.roa
File: o0QbHxyCm9adHg8VgcyTOlPHC7M.roa (raw, json)
Hash identifier: 7eJ1UDnhfpR8Gfqwi9zKioWERjaDM6YJ3QLCE3SvEZQ=
Subject key identifier: A3:44:1B:1F:1C:82:9B:D6:9D:1E:0F:15:81:CC:93:3A:53:C7:0B:B3
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188AF3FDE3BD2DA191CDD48904C8D0E1115
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/o0QbHxyCm9adHg8VgcyTOlPHC7M.roa
Signing time: Mon 12 Jun 2023 10:56:18 +0000
ROA not before: Mon 12 Jun 2023 10:56:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 81.22.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:3f:de:3b:d2:da:19:1c:dd:48:90:4c:8d:0e:11:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 12 10:56:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3441b1f1c829bd69d1e0f1581cc933a53c70bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:58:bc:3e:ab:94:72:af:0e:13:06:d6:f2:cd:
b8:8b:11:2c:68:c3:80:df:95:4c:22:56:32:64:81:
fb:1b:39:b4:44:61:1f:b0:d7:b5:78:f0:92:91:83:
86:37:82:e0:7c:3d:48:8b:8b:7e:f5:bd:b9:fd:e6:
d6:26:b9:02:c3:ab:83:d8:2e:83:27:9d:31:b6:3a:
cc:b2:e5:c5:02:64:1a:ab:07:46:35:50:bd:87:76:
da:37:0c:9d:82:40:47:f4:93:48:5d:99:55:f8:9d:
b2:25:f1:af:70:9d:7f:00:4e:d7:d9:87:02:12:48:
93:95:a3:98:79:81:d5:46:ed:6b:3a:c3:c7:06:3f:
09:16:86:43:ff:b4:4e:cd:eb:11:11:8a:37:e0:f9:
a6:7b:d8:0f:c7:10:fb:39:3e:cb:13:ff:3d:02:6e:
be:97:11:f4:dc:3b:7c:d3:3b:25:73:6f:dc:7d:3f:
00:51:38:e5:09:ba:c4:c8:2a:97:a1:91:14:f3:d6:
09:85:5c:3b:aa:a2:ca:0f:7d:ba:2d:69:ef:a7:c4:
dc:2f:a5:85:d2:e4:8d:48:16:cb:53:ed:4f:be:05:
bb:f3:2b:93:b1:1f:bb:31:fe:3a:b9:b4:2e:12:4b:
0a:e9:b2:8a:16:52:92:eb:75:fe:43:e6:d1:05:1a:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:1B:1F:1C:82:9B:D6:9D:1E:0F:15:81:CC:93:3A:53:C7:0B:B3
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/o0QbHxyCm9adHg8VgcyTOlPHC7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
Signature Algorithm: sha256WithRSAEncryption
90:01:b8:42:64:d1:f9:07:22:82:43:6e:ce:c0:a1:46:d0:99:
5a:6b:f8:23:2e:16:0d:53:b1:fa:a9:8f:7c:59:22:63:14:37:
80:40:55:9a:cc:6a:e3:02:b1:12:91:d4:d7:22:58:8e:6c:e8:
05:63:d8:1a:69:2b:c2:db:ee:c4:fb:83:4c:8e:c9:a9:29:9e:
58:f7:88:fd:c5:9e:4a:c3:a6:5f:cf:40:7a:34:5a:6e:ad:8d:
cd:37:46:9a:32:d4:75:f3:66:f3:5c:4b:6c:e2:b3:88:e7:a9:
eb:da:05:f3:f3:f5:b5:e9:1a:b0:25:ef:c8:b4:47:89:71:4f:
47:2a:65:3f:06:e4:24:45:44:6d:e0:0e:7e:a8:9f:1e:98:e3:
a6:2b:45:aa:06:0c:92:87:f1:08:52:57:fc:fa:6c:92:f2:b9:
4a:51:8a:f0:23:14:58:cb:dd:a7:56:91:46:65:85:55:11:b2:
7b:6f:b8:e7:da:31:a8:79:ec:8d:f2:53:f1:75:ac:d5:2a:83:
67:19:ce:1e:54:06:18:22:cd:b5:db:bd:94:18:d6:15:e0:78:
d3:7e:69:7c:f5:51:ef:e6:29:0d:c7:a5:8f:57:22:d2:3d:bd:
6d:20:11:33:1e:6f:bf:bd:ca:7e:86:57:d1:91:5d:ac:3d:08:
03:94:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org