Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rVvhexRt3UTrPAmYAzlVsXkMzGs.roa
File: rVvhexRt3UTrPAmYAzlVsXkMzGs.roa (raw, json)
Hash identifier: Q4uNedYyLkRkIMNpwAI5H8k0JmQ9aouCDEQUA1VLflo=
Subject key identifier: AD:5B:E1:7B:14:6D:DD:44:EB:3C:09:98:03:39:55:B1:79:0C:CC:6B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018DA6C62CFFAD311EDCFF6DE23F57880986
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rVvhexRt3UTrPAmYAzlVsXkMzGs.roa
Signing time: Wed 14 Feb 2024 08:40:21 +0000
ROA not before: Wed 14 Feb 2024 08:40:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216058
IP address blocks: 81.22.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 21:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:c6:2c:ff:ad:31:1e:dc:ff:6d:e2:3f:57:88:09:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Feb 14 08:40:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad5be17b146ddd44eb3c0998033955b1790ccc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:48:fe:65:36:e2:ef:75:08:0f:f3:f0:0d:
cb:98:e1:76:bc:c8:13:8f:f4:b6:e9:61:26:cb:71:
d9:8d:2a:ea:19:cc:39:66:ba:eb:8b:89:9d:53:5b:
d6:c0:72:66:7c:aa:8d:8e:2f:9f:9a:fa:02:67:e6:
ac:c3:76:58:1c:7f:30:6c:14:83:35:bd:6c:22:92:
1d:c4:20:b3:0c:c0:81:e9:8a:e0:b4:b0:63:89:d4:
ce:a4:f1:86:54:bc:38:47:1b:d0:44:83:8f:d6:c4:
84:18:77:5b:b3:b7:8c:94:e4:7e:16:d0:1f:f8:ac:
4e:5e:bd:aa:4b:01:46:d0:52:3f:64:a5:42:d1:72:
f7:49:88:ee:24:61:a4:fd:1e:b8:a5:4e:17:ef:03:
fa:9b:e7:c2:a3:36:0d:72:ef:69:3e:53:86:58:95:
ce:9f:5a:86:21:04:a5:b0:db:3a:76:58:d5:5a:58:
61:43:78:1d:2a:55:3c:9c:7f:b4:a1:08:8c:89:44:
6f:54:23:b4:c9:40:2d:e8:3c:63:10:33:62:0f:8f:
0a:98:4f:d3:cc:85:3c:da:2a:a3:86:ba:c9:a4:1d:
b8:df:93:98:0e:ba:71:6d:26:18:d9:6c:9c:d4:ea:
32:4c:ec:53:8a:be:b8:37:d6:dd:25:f4:99:90:1d:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:E1:7B:14:6D:DD:44:EB:3C:09:98:03:39:55:B1:79:0C:CC:6B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rVvhexRt3UTrPAmYAzlVsXkMzGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:49:f6:ba:ee:77:70:8c:2c:01:50:e8:3d:92:c5:da:7b:d7:
5d:4a:53:28:b7:d3:cc:86:f8:b4:de:ee:9f:fe:f9:fa:4f:3e:
29:2d:fc:9a:37:4e:e1:8d:e1:e7:e1:a4:ff:87:ea:fa:e1:a0:
f4:b3:f6:7e:45:c6:fd:e3:66:d2:2c:c2:ff:8b:6f:fa:9a:a2:
28:9d:b5:a9:52:3f:eb:96:dd:99:70:11:22:2c:2a:ef:0b:22:
c4:1b:1c:29:af:29:62:62:14:e2:97:91:2a:74:7f:59:f8:10:
6b:cf:5f:77:7f:40:3c:e4:38:2e:29:d7:1d:82:ec:9e:9d:70:
f8:7f:61:ac:fb:6c:c4:d6:7c:32:1d:d8:79:09:d7:7a:34:d0:
eb:de:d3:03:fe:32:69:c8:2f:e3:4a:12:88:e7:f3:aa:f6:45:
e4:03:b6:8c:37:b0:90:8d:e9:57:a1:bb:0c:28:e0:5b:da:4a:
e0:9b:f3:50:2d:e0:3b:6e:b0:3a:ab:2e:69:f0:99:f3:6c:c9:
64:4b:0b:79:cd:41:c0:1b:3d:4f:84:c1:64:2c:44:50:68:cd:
4b:62:df:09:34:d1:c2:7c:92:fc:73:0e:0b:be:b5:ac:dd:ba:
bd:1f:a2:7a:25:3b:e2:06:12:85:35:ce:e8:89:3a:56:4d:49:
6a:b3:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org