Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qXbBTQLGbZPISkB7qOsjaXVkOFQ.roa
File: qXbBTQLGbZPISkB7qOsjaXVkOFQ.roa (raw, json)
Hash identifier: cQSVkgliWTlYfkiN3NTvh7PFCWHYeFYZBx5SxS+kDZA=
Subject key identifier: A9:76:C1:4D:02:C6:6D:93:C8:4A:40:7B:A8:EB:23:69:75:64:38:54
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185D1A490942B0189815186D1373F8CBD3A
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qXbBTQLGbZPISkB7qOsjaXVkOFQ.roa
Signing time: Sat 21 Jan 2023 00:05:01 +0000
ROA not before: Sat 21 Jan 2023 00:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50354
IP address blocks: 81.22.134.0/24 maxlen: 24
81.22.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Jan 2023 23:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d1:a4:90:94:2b:01:89:81:51:86:d1:37:3f:8c:bd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 21 00:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a976c14d02c66d93c84a407ba8eb236975643854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:45:e8:02:9a:09:06:8b:8e:53:7e:3e:04:
06:5c:4d:cf:f3:a5:2e:9b:1b:48:7f:31:17:a6:64:
89:cb:52:d5:58:e7:1c:de:16:a9:c8:5d:be:e3:07:
eb:8c:6d:30:cf:4a:04:86:3d:41:87:e6:c7:3f:e2:
6b:41:e4:72:b9:7d:5e:56:12:78:1f:80:c1:3a:eb:
c0:85:c5:b9:62:87:e3:b4:80:55:00:5c:48:89:dd:
8a:3c:68:76:57:e2:7f:d0:f8:3b:34:dd:34:f6:fd:
6c:bf:c7:69:c2:f8:2b:f2:05:89:ad:25:ac:75:70:
55:ea:8c:b0:8b:fe:7d:53:f0:9e:71:90:bc:60:d0:
99:cb:8e:69:47:4f:b2:75:7d:04:d4:fa:c3:5f:2a:
31:eb:42:52:6c:d6:81:96:6d:01:52:7f:35:7f:31:
12:cc:e6:38:c9:ab:eb:30:1c:ec:31:a3:59:a6:b9:
9f:d4:c5:21:ab:34:e0:83:d0:22:e8:c3:a8:d7:56:
26:44:06:dc:29:af:de:6a:4a:e3:99:ef:16:c0:e6:
73:4d:44:22:ad:0d:e3:f2:af:7f:09:00:69:d8:8e:
60:a0:97:b8:f5:ad:87:d5:35:0d:be:66:c7:29:ac:
18:2c:21:69:63:aa:b8:ad:66:6b:11:0a:26:8d:07:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:C1:4D:02:C6:6D:93:C8:4A:40:7B:A8:EB:23:69:75:64:38:54
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qXbBTQLGbZPISkB7qOsjaXVkOFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
81.22.134.0/24
Signature Algorithm: sha256WithRSAEncryption
46:07:3c:10:6b:cb:c2:cd:e5:d4:c6:c3:26:95:57:a6:85:38:
69:91:1e:5e:bf:32:da:e6:55:7c:6c:81:d9:37:08:78:6e:34:
96:bf:55:73:18:ea:a6:39:b5:f6:9a:44:47:dd:e6:39:d6:65:
9d:56:46:b2:9f:d1:5e:8c:4e:a1:ac:92:bb:a2:c4:2d:10:22:
5c:00:59:34:b4:dd:d6:ff:94:d0:7a:c8:72:dc:06:50:02:9c:
89:24:c2:e6:ad:b1:77:37:5c:7c:c8:8c:ab:df:bf:92:7a:d2:
d3:01:e0:52:e5:8d:0d:2e:56:25:91:47:cb:5f:74:12:e5:90:
37:d1:98:35:fb:bf:8e:73:e3:97:68:48:6f:a1:0e:0f:7b:19:
35:45:c7:c5:07:a3:a0:2e:65:bd:73:06:22:96:06:6d:c7:fa:
74:42:ec:06:d8:08:6b:27:df:1a:c0:46:a2:35:84:d8:0a:9a:
61:98:8b:c9:c4:27:a3:a6:9e:40:94:7d:36:15:52:55:8a:a4:
ec:59:56:ce:47:a9:9b:b8:bf:e8:67:4b:98:67:4c:fd:22:ab:
75:b8:56:c6:66:fa:f8:d6:f6:f2:fe:b9:c6:1d:2e:dd:19:de:
e3:4d:52:a7:6e:d6:45:9e:80:a5:dc:7b:2b:df:61:91:2b:12:
79:c1:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org