Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pirNdL8ciiQ9oG6lRS-gGqzDVME.roa
File: pirNdL8ciiQ9oG6lRS-gGqzDVME.roa (raw, json)
Hash identifier: SR+wB/HgRj7iGGyoYwAuYEkuQKfaH+sFDrSuGp+vmFo=
Subject key identifier: A6:2A:CD:74:BF:1C:8A:24:3D:A0:6E:A5:45:2F:A0:1A:AC:C3:54:C1
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A1C5CAB44710D4B8FA2161AB81B669DA4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pirNdL8ciiQ9oG6lRS-gGqzDVME.roa
Signing time: Tue 22 Aug 2023 08:29:09 +0000
ROA not before: Tue 22 Aug 2023 08:29:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 07:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:5c:ab:44:71:0d:4b:8f:a2:16:1a:b8:1b:66:9d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 22 08:29:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a62acd74bf1c8a243da06ea5452fa01aacc354c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:a8:ae:a5:74:4f:82:b0:7c:4f:ab:d8:68:
27:74:58:5f:99:7d:84:7f:d9:92:24:d8:a2:a6:c4:
37:bd:34:96:41:fd:a5:75:32:3d:46:4a:86:80:e3:
6f:46:ba:2b:a7:44:d0:f7:88:2c:23:3c:62:26:61:
be:9e:a6:b0:37:38:f0:1d:31:96:f2:51:bc:79:db:
82:c0:1d:16:f9:df:60:1b:75:fa:73:53:13:c1:65:
54:c3:a0:21:bc:d6:07:d2:35:08:ad:d7:02:c0:cc:
9b:95:c1:e2:77:ce:86:ae:5a:0b:ab:15:e0:ae:e5:
b8:b0:ed:f0:76:bb:c7:94:b5:73:8c:4b:be:0e:e1:
17:a2:b8:71:fc:d7:15:de:65:67:11:95:f6:04:2c:
d1:aa:1d:07:5e:c8:0c:26:7f:f3:1e:f3:78:88:24:
49:78:5d:ff:e5:1c:72:19:18:35:37:fa:a5:9c:7e:
df:f3:f2:0c:d4:dd:ea:95:0b:75:3c:0e:37:7a:87:
e0:cd:9b:98:81:7e:96:91:16:5f:29:99:f6:3f:ca:
ad:3a:2b:f7:38:7d:cc:1e:b0:51:89:66:aa:02:04:
19:6b:80:ad:3c:1d:6b:9a:c0:80:a9:fc:ba:31:cf:
84:ac:f7:94:77:d5:7f:ca:bc:d0:47:c8:44:56:f1:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2A:CD:74:BF:1C:8A:24:3D:A0:6E:A5:45:2F:A0:1A:AC:C3:54:C1
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pirNdL8ciiQ9oG6lRS-gGqzDVME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0f:8b:38:7b:db:7b:0a:10:70:f9:b1:14:5a:b2:56:87:a0:
f6:79:92:03:48:79:59:b3:c4:6f:48:18:07:42:58:a9:61:6d:
36:20:cd:f2:15:02:60:a3:1c:3c:9a:33:0a:5d:b4:16:e5:c0:
92:b7:ec:39:a7:19:c4:f1:9f:89:17:40:4c:c0:83:d3:09:a9:
c0:1a:cd:50:b3:df:b7:63:8d:7b:cd:40:32:da:d2:ba:19:1d:
b5:75:e2:23:01:ba:1a:3f:95:19:39:e2:3c:7d:ce:a2:22:d2:
9a:1b:b1:26:b8:f5:f0:a6:41:b1:27:ca:79:3f:bc:c9:f3:54:
e3:2c:63:c6:85:d3:55:1d:8f:ba:99:c4:6a:de:ee:e3:b3:96:
b2:f5:c8:7e:a4:22:1f:ec:ae:b9:88:b4:6b:ae:68:9d:c1:b5:
70:19:51:bc:d1:e8:39:70:22:dd:41:15:76:f9:e8:9a:9c:58:
14:c3:88:c0:db:2f:04:f0:29:5c:3a:dc:8a:d4:5a:e1:31:b0:
70:ef:45:ba:f9:d8:5c:1e:75:b7:b3:ab:8c:a1:8d:72:32:be:
e4:a0:d6:c4:62:87:ae:2a:3b:c0:29:05:aa:f7:ba:d4:93:9c:
50:f7:ea:b8:27:60:8c:cb:58:5d:4a:cc:10:b1:c6:d8:20:08:
fe:33:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org