Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oAh0YCs0ZjZAPw7dZsxDPx-f4cQ.roa
File: oAh0YCs0ZjZAPw7dZsxDPx-f4cQ.roa (raw, json)
Hash identifier: HOxSsDDB630rQVzC0nlYIbvUHI4jIy/oZHU4UzfU/yU=
Subject key identifier: A0:08:74:60:2B:34:66:36:40:3F:0E:DD:66:CC:43:3F:1F:9F:E1:C4
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0189FE6A450A9031641F12B2A9C0E9EF2696
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oAh0YCs0ZjZAPw7dZsxDPx-f4cQ.roa
Signing time: Wed 16 Aug 2023 12:55:24 +0000
ROA not before: Wed 16 Aug 2023 12:55:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.22.135.0/24 maxlen: 24
109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 07:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:6a:45:0a:90:31:64:1f:12:b2:a9:c0:e9:ef:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 16 12:55:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00874602b346636403f0edd66cc433f1f9fe1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:17:2f:a1:c5:b5:52:c4:12:c6:18:1a:d0:
89:cd:ac:76:94:a3:a1:7a:e2:4b:41:46:74:c0:4a:
bc:c1:b4:9c:da:d9:93:37:f2:8b:9e:d6:b8:b5:4b:
c6:22:fa:6c:3b:50:ca:7e:9d:1b:48:2d:aa:92:64:
e7:57:c2:31:86:f5:31:e6:aa:15:4c:16:18:dd:b8:
4a:56:f7:58:3a:c3:bd:e4:d9:77:3a:1b:ae:6c:ee:
84:5d:c8:a6:4a:04:5c:15:0e:49:74:a1:53:f8:ba:
5e:e8:88:d6:f8:9a:19:9c:f4:48:a8:0b:cb:dc:da:
31:82:3c:c9:4c:a2:4a:8d:f3:83:ec:27:af:a3:50:
56:e8:2a:b1:1d:60:84:2f:31:0a:78:09:86:32:44:
50:cc:f7:b2:5a:7b:f4:d0:5a:9f:41:e2:2f:42:d8:
17:0e:4d:29:2b:9e:5f:62:67:d0:7c:99:80:2e:1b:
1a:41:38:18:e5:32:12:fd:17:2a:25:ae:3d:cd:c7:
0f:a1:50:ac:33:88:10:c6:c2:d7:e1:ff:88:5a:35:
64:4f:c9:ba:8d:a6:f0:dd:98:1c:9a:d9:91:7e:e5:
c7:6a:22:42:df:88:43:1e:50:81:69:f2:d5:52:dc:
7f:5d:3c:6d:90:0d:9a:c3:95:f0:91:bc:af:34:f9:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:74:60:2B:34:66:36:40:3F:0E:DD:66:CC:43:3F:1F:9F:E1:C4
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oAh0YCs0ZjZAPw7dZsxDPx-f4cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
81.22.135.0/24
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
62:66:a7:78:1a:fd:1c:d7:5f:0f:07:77:10:e0:d5:54:a5:52:
64:e3:11:16:f6:04:4f:a3:89:7a:38:51:3b:7d:38:4e:ec:38:
a2:4d:f2:da:4e:36:1c:2f:41:42:69:2b:61:ba:34:ba:29:61:
06:ad:33:91:69:40:53:33:8a:77:71:ef:04:b3:57:27:2a:16:
ff:8e:c6:c5:70:59:11:7c:b8:30:c9:f7:aa:ea:73:cc:68:73:
99:6f:70:ad:d1:97:5c:2d:af:39:eb:5a:06:96:cc:d3:9a:68:
20:4a:4a:16:7b:a6:28:02:66:fe:f3:c7:4c:1f:c2:8d:ba:bf:
e5:a1:9d:9f:5e:54:ab:99:64:ab:72:08:a2:66:9b:87:ac:7c:
99:01:da:a1:09:5b:ca:7e:ed:ce:dc:08:29:2e:09:de:8c:ce:
64:6e:cc:fb:d7:89:aa:cf:b3:ee:17:14:ec:26:ca:73:f2:f5:
40:a3:1c:ab:ef:ad:96:ec:61:37:85:05:37:c3:14:70:80:26:
5d:be:c5:b8:ba:a9:ab:72:8a:12:71:4a:fa:79:3a:db:94:bc:
02:91:b0:0d:c6:15:39:2c:2d:fe:b5:f5:29:38:12:17:4b:49:
b1:12:3f:fc:a7:5c:a3:34:db:da:dd:f1:94:50:4f:09:ee:62:
c9:71:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org