Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/p7sDDGaAJFpOcYzgcSuXA5p3jr4.roa
File: p7sDDGaAJFpOcYzgcSuXA5p3jr4.roa (raw, json)
Hash identifier: wRQA/VqXuCoPmQvPGcifLJ/Wa2E6JEMSnN3x6gS/MIA=
Subject key identifier: A7:BB:03:0C:66:80:24:5A:4E:71:8C:E0:71:2B:97:03:9A:77:8E:BE
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0186711C2ED21E8290D1904CBEFEE027EB12
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/p7sDDGaAJFpOcYzgcSuXA5p3jr4.roa
Signing time: Mon 20 Feb 2023 23:15:17 +0000
ROA not before: Mon 20 Feb 2023 23:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50354
IP address blocks: 81.22.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 12:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:1c:2e:d2:1e:82:90:d1:90:4c:be:fe:e0:27:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Feb 20 23:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7bb030c6680245a4e718ce0712b97039a778ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:26:56:8e:f4:8b:de:ab:a9:b3:06:37:60:
30:5f:82:3c:eb:e8:54:5b:b1:8d:2a:6f:2f:73:c1:
e7:62:dc:76:0b:5e:c6:06:3b:e0:48:17:30:a9:2f:
90:06:2e:3b:39:c1:32:52:49:5e:ba:84:ad:8b:55:
20:ec:e9:45:68:18:e9:ce:0d:a3:62:88:19:11:12:
6a:cd:80:30:a8:d7:ab:87:40:94:18:c0:2a:b0:7e:
7d:4b:d0:f3:be:0f:04:65:85:fa:4d:ed:76:fc:e0:
cb:44:30:7f:15:17:51:55:c1:77:5c:68:c8:e6:c0:
08:6f:73:54:6c:44:4c:fa:d6:40:8c:3e:ce:8e:2b:
4b:99:8e:85:95:21:6e:47:eb:ab:b2:79:ff:5c:09:
6d:b9:09:9a:9d:a8:bb:d2:3d:d9:b0:ca:12:71:70:
f5:0d:a1:a7:25:a4:c9:b1:8b:42:ee:5d:32:7e:a4:
17:1b:18:d2:bc:09:83:8d:80:ff:8c:4f:78:6a:34:
26:b1:b0:ec:e1:35:03:d2:69:ad:a1:1e:de:4a:b1:
da:45:40:90:e5:6f:35:11:15:f3:9b:0d:24:42:f6:
6a:41:21:6b:17:58:f4:c2:f7:a4:85:c3:e4:e5:71:
96:02:14:ac:1a:2a:b5:4a:c9:cd:69:c7:fd:c6:e6:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BB:03:0C:66:80:24:5A:4E:71:8C:E0:71:2B:97:03:9A:77:8E:BE
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/p7sDDGaAJFpOcYzgcSuXA5p3jr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8c:06:79:61:b1:fe:f5:9b:31:be:bf:a3:76:0c:b9:7e:a0:
3f:cc:13:fa:d5:83:a1:2e:81:a9:da:b5:b6:ce:74:51:42:b4:
f3:28:94:44:ed:27:ce:4e:78:79:7e:40:82:d4:92:35:af:33:
7d:07:e3:49:ea:49:c6:9a:a3:c8:70:7a:6b:91:bd:ac:c4:ff:
b8:08:5b:c3:71:8d:22:28:ea:53:3d:69:4d:97:ac:72:c3:48:
da:12:e6:e6:05:22:c6:7f:c9:66:85:a8:5a:1d:f4:7e:51:e0:
20:6c:51:94:62:6f:12:b5:36:86:39:50:24:69:ac:ae:4d:3e:
1f:cf:95:4f:19:39:cc:c6:f0:10:c1:74:0c:67:e1:bb:32:db:
f2:a3:da:93:7d:e2:7c:a1:4f:bd:9c:c6:51:e8:de:fc:60:7f:
7b:b4:19:36:36:e6:0c:49:78:68:e9:d7:25:b1:da:15:8f:0d:
21:1f:98:bb:a6:ee:aa:3f:ad:8a:b4:70:9f:c9:4d:c2:d0:38:
f1:a6:b6:ba:cd:d8:8a:da:1f:12:ac:ee:4a:54:cf:da:76:19:
e0:bb:af:ba:b2:17:a0:bc:e6:fe:bf:07:8f:77:f6:d0:21:a9:
7a:92:de:cd:43:a5:59:41:ed:db:31:46:84:d2:c3:58:c4:4e:
6e:51:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org