Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/r7npV9YgNHepFuOHOfjZ424K_Ts.roa
File: r7npV9YgNHepFuOHOfjZ424K_Ts.roa (raw, json)
Hash identifier: RHB4Zk6sc2psaLESygaixH1VX3XYZT8QVNzFd34Rk+8=
Subject key identifier: AF:B9:E9:57:D6:20:34:77:A9:16:E3:87:39:F8:D9:E3:6E:0A:FD:3B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01875188D3BE2852384E531F419F47145DB2
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/r7npV9YgNHepFuOHOfjZ424K_Ts.roa
Signing time: Wed 05 Apr 2023 13:08:54 +0000
ROA not before: Wed 05 Apr 2023 13:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.22.135.0/24 maxlen: 24
109.72.125.0/24 maxlen: 24
81.22.128.0/24 maxlen: 24
81.22.129.0/24 maxlen: 24
81.22.130.0/24 maxlen: 24
81.22.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 16:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:88:d3:be:28:52:38:4e:53:1f:41:9f:47:14:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 5 13:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afb9e957d6203477a916e38739f8d9e36e0afd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:c4:54:fd:3c:52:aa:c7:d1:07:e0:3e:01:
30:71:0e:9d:f7:b6:91:2f:0f:f1:f0:71:89:cc:cd:
ee:64:f9:ba:90:bb:6b:1f:d5:ae:4f:95:ed:b3:08:
ff:2d:dc:c7:a1:f8:c9:e1:5a:a5:c5:52:9d:78:52:
52:26:dc:41:5b:4d:12:a8:be:81:09:66:7b:39:3a:
0e:64:a4:20:d9:92:d3:23:5f:93:13:47:1f:7a:a7:
92:c3:ff:4a:6c:7d:e5:8b:40:28:fc:27:85:f0:88:
0c:36:ad:34:8f:11:94:aa:62:d1:fd:71:4c:f3:4e:
eb:c6:a2:46:54:f8:05:a3:26:e0:eb:46:04:81:e7:
6c:16:e6:f5:6b:16:73:82:11:2a:4f:3c:59:bc:d7:
f8:b9:4d:9b:23:ed:d2:11:8d:1d:c1:93:29:20:d3:
89:61:fc:ef:ea:87:7a:d5:7d:f6:49:1e:49:31:7a:
84:a9:cf:76:3b:e8:86:3b:2e:ed:ae:5b:ff:2d:b7:
6e:90:51:91:ad:45:9d:60:98:df:c0:4a:72:77:9c:
c6:ea:74:56:59:fb:cc:eb:77:0a:de:58:27:46:da:
f2:34:d9:9f:06:e8:df:f1:1e:bc:8d:b8:e3:7d:54:
3f:5a:03:39:f2:f5:42:2c:17:b5:a3:54:3f:70:42:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B9:E9:57:D6:20:34:77:A9:16:E3:87:39:F8:D9:E3:6E:0A:FD:3B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/r7npV9YgNHepFuOHOfjZ424K_Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/22
81.22.135.0/24
109.72.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f7:76:e6:38:0f:ff:e6:1f:37:db:20:af:e6:ba:04:ed:dc:
86:91:6f:f8:5e:dc:c3:79:18:d2:3f:02:62:dc:71:9a:65:96:
f6:d6:ef:0e:b2:e1:d6:c6:c5:6f:7b:64:a2:cf:05:16:c7:3c:
4f:9c:5a:7e:4a:9d:8c:d9:b3:51:61:8e:e4:31:14:19:9e:ce:
28:85:73:44:89:58:05:79:42:fc:4d:8b:d0:00:07:cb:51:29:
6c:82:d1:86:81:80:61:0f:90:d2:1f:a2:5a:d1:80:43:aa:c3:
2c:38:90:28:bd:4e:f8:ad:53:e0:6e:c8:7f:85:4b:7f:8f:b0:
43:29:2a:38:f7:a0:e5:e3:1c:16:73:42:22:2c:4e:bc:8e:0d:
74:16:4a:22:f1:a3:ef:dc:51:a9:f9:2d:03:18:11:4a:03:2e:
8e:92:e6:5a:77:69:e5:a5:c0:ed:ec:9c:bb:3b:10:e9:a7:e8:
4a:91:a0:b6:1d:b2:db:9a:d0:91:86:3f:65:29:71:e5:8e:5a:
e4:22:9e:1e:9a:75:46:86:cc:67:50:47:56:68:47:ed:88:30:
73:0a:21:e0:b1:61:05:f9:c6:55:ac:1c:e6:e9:3d:b3:2b:a6:
d4:6a:f7:0a:a6:a0:ae:34:7d:81:1e:e2:b4:0c:af:f8:59:56:
57:ef:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org