Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rs3eReojJeWj4wNg-F860GgvK6k.roa
File: rs3eReojJeWj4wNg-F860GgvK6k.roa (raw, json)
Hash identifier: cd9gG21bAWjK6MB1LYSi5RUAEaolcRxCmhEsVnKnHvQ=
Subject key identifier: AE:CD:DE:45:EA:23:25:E5:A3:E3:03:60:F8:5F:3A:D0:68:2F:2B:A9
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01932F013C16B7655765D18164FB3F1BA4D4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rs3eReojJeWj4wNg-F860GgvK6k.roa
Signing time: Fri 15 Nov 2024 08:47:10 +0000
ROA not before: Fri 15 Nov 2024 08:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
89.185.0.0/22 maxlen: 22
109.72.113.0/24 maxlen: 24
109.72.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 10:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:01:3c:16:b7:65:57:65:d1:81:64:fb:3f:1b:a4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Nov 15 08:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aecdde45ea2325e5a3e30360f85f3ad0682f2ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:84:12:ae:cb:d7:78:b5:8b:68:1d:a1:a9:
60:08:44:7c:6e:cc:52:b7:4f:5c:10:38:3c:ac:1d:
2b:75:32:d5:e7:e7:6a:ce:aa:8f:41:e0:b5:61:45:
fc:38:42:b5:97:01:6e:fc:3a:b7:5f:76:3a:6b:02:
f7:70:40:11:53:d5:ed:cc:a4:c3:af:cf:55:63:fe:
e8:a6:6e:2f:6d:45:d7:4e:46:04:48:bb:50:e5:4d:
f4:36:89:f7:c8:e1:ec:b5:58:16:03:0d:ba:7c:27:
38:77:61:74:b3:5e:36:55:b2:81:b1:9c:7e:a3:65:
da:90:c1:90:ff:b4:b9:a2:0e:04:dd:39:c4:91:1b:
2d:75:b6:46:19:b0:5a:cc:c4:eb:b4:4d:2a:39:ad:
25:9b:ba:1a:b2:f1:71:91:e5:69:22:8c:1c:63:29:
40:e1:4f:1f:3c:cd:f9:9a:9c:86:71:32:75:54:a7:
6d:7f:0b:af:cf:15:bf:0d:9c:25:5c:59:67:05:51:
03:ad:61:94:7f:c1:09:0f:27:25:8a:6e:30:c7:7c:
7c:75:d8:96:7f:f4:d2:cb:bb:23:21:62:05:2d:88:
3c:e7:9c:21:aa:59:8c:c8:ae:64:f2:ed:05:5c:b8:
80:18:f3:c5:b3:82:fa:75:b0:c8:c5:32:1d:d4:c9:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:DE:45:EA:23:25:E5:A3:E3:03:60:F8:5F:3A:D0:68:2F:2B:A9
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rs3eReojJeWj4wNg-F860GgvK6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/22
89.185.0.0/22
109.72.113.0/24
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:05:f6:71:be:e8:eb:6c:4c:f2:86:09:d1:c6:96:b7:7d:a0:
d3:e7:87:c5:dc:56:81:7e:9e:59:1d:26:f3:3f:e8:8e:9a:a6:
01:3e:6b:11:6e:6b:ae:27:e5:24:a2:ba:3e:3b:e5:bd:a8:15:
ff:45:b8:f0:b6:01:50:a1:4c:0b:ed:b4:f0:4f:4f:79:52:ea:
42:75:b7:af:a6:09:e4:6b:84:1c:8a:6d:8d:f5:8f:b8:7a:ae:
5a:69:49:d9:96:1a:39:61:ed:fd:c7:e5:c7:dd:c8:8c:5c:e2:
64:97:46:4d:af:dc:04:ca:4c:53:64:e1:63:0c:67:95:9f:ec:
80:97:08:ca:dd:47:42:0f:b2:59:a7:29:af:42:f7:bd:f0:3f:
0a:3b:c8:c4:7e:d2:99:ad:14:20:c3:1f:4d:6a:c8:b2:91:2d:
aa:7c:14:35:15:88:03:b2:ac:5f:8d:48:cf:ef:33:ea:2a:a8:
10:e9:b4:86:db:ac:17:a3:7f:0a:86:88:cd:4a:31:9b:2a:6a:
12:2b:73:dd:16:e8:c8:c5:9d:56:56:48:44:58:8a:2d:80:c9:
c4:97:2b:61:7f:d0:b4:5f:02:3a:4b:5a:72:1c:f4:08:83:fc:
d6:f6:23:f6:1d:cb:50:19:97:1b:54:bd:61:e8:ca:7a:61:b2:
eb:dc:15:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:48:23 2024 by rpki-client on console-ams.rpki-client.org