Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/u6ZSkX_eC5_0vJvNsQTqSSsnn4U.roa
File: u6ZSkX_eC5_0vJvNsQTqSSsnn4U.roa (raw, json)
Hash identifier: U1rkuGjEKOWoa7r/H4VxXZa3CxJh7ke8lyMDtFFi+ok=
Subject key identifier: BB:A6:52:91:7F:DE:0B:9F:F4:BC:9B:CD:B1:04:EA:49:2B:27:9F:85
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01914DC8EA54B08971C77935C9F8238A4E5F
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/u6ZSkX_eC5_0vJvNsQTqSSsnn4U.roa
Signing time: Tue 13 Aug 2024 22:08:18 +0000
ROA not before: Tue 13 Aug 2024 22:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 81.22.129.0/24 maxlen: 24
81.22.131.0/24 maxlen: 24
81.22.138.0/24 maxlen: 24
81.22.141.0/24 maxlen: 24
89.185.0.0/24 maxlen: 24
109.72.119.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 08:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:c8:ea:54:b0:89:71:c7:79:35:c9:f8:23:8a:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 13 22:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bba652917fde0b9ff4bc9bcdb104ea492b279f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:a7:15:e6:0c:1c:4a:31:15:12:4a:ae:b4:
49:8a:e6:37:17:76:98:9e:75:57:6b:ae:03:c1:21:
72:c2:66:6b:5e:c0:5b:bb:4f:61:2f:f4:6b:a0:c6:
b5:6c:74:07:2f:80:54:aa:ec:da:9a:8b:be:00:18:
a9:d8:23:3f:07:0c:3d:be:c8:e8:10:25:a2:5a:bb:
0c:07:2c:be:72:53:77:5a:26:98:75:6a:a3:25:c6:
d3:4c:56:ac:b0:e5:cd:f2:63:38:a6:8c:1f:fa:97:
92:7e:c6:98:cd:59:28:73:c4:a8:0a:6d:b5:b1:09:
5c:ac:50:3f:aa:67:f2:54:d1:be:27:b5:9a:be:01:
f4:36:be:cd:db:a6:d0:dd:5b:eb:56:2d:f1:fd:19:
ea:1e:0c:c8:25:5f:4c:fc:52:61:86:8f:81:f8:64:
3c:f8:85:9e:33:bd:f6:ad:7f:19:d5:69:dd:ef:6d:
23:35:24:6a:30:8b:f4:54:1b:fd:9d:3b:49:7e:db:
76:a1:d6:c1:af:fa:09:3a:35:a4:d5:b2:23:df:11:
ae:d6:12:4f:72:d6:f4:41:1a:0b:c9:9c:88:8f:98:
ed:ca:69:3c:75:f4:0d:3d:d4:96:ce:2b:b9:82:4c:
84:bf:f1:92:47:99:a0:ba:7b:98:46:52:2f:5b:fd:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:52:91:7F:DE:0B:9F:F4:BC:9B:CD:B1:04:EA:49:2B:27:9F:85
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/u6ZSkX_eC5_0vJvNsQTqSSsnn4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
81.22.131.0/24
81.22.138.0/24
81.22.141.0/24
89.185.0.0/24
109.72.119.0/24
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
12:64:67:ea:ba:4e:3a:89:74:a7:ad:e8:6f:99:d4:16:aa:b8:
38:ca:84:84:4d:f1:c1:1d:10:f7:a3:d2:a7:ed:8a:77:19:b1:
7d:b6:2e:ca:28:c8:81:40:87:9a:fe:38:a5:4d:24:fd:6f:59:
84:f7:68:72:3c:80:dc:d9:df:8a:00:26:84:54:b4:53:ed:b1:
28:44:e9:f4:16:23:95:20:29:69:70:14:7f:04:e5:10:f9:2e:
2f:94:ed:a1:44:ef:06:3c:b3:38:58:f2:69:6f:a2:1e:bd:b2:
0b:ad:df:af:69:ff:1b:cf:df:e9:d9:99:26:92:1a:73:15:ea:
ee:0e:48:05:a1:6f:45:1c:01:92:8d:f8:0c:69:3c:62:bc:36:
9b:68:82:c4:2c:b1:25:c8:45:95:ac:9d:47:ef:55:fe:ce:20:
0b:fa:03:99:cf:83:a4:d9:60:3e:72:2c:3b:df:13:2a:c7:d2:
09:72:7b:16:e8:68:0a:bc:13:ae:70:28:d6:46:91:50:70:fd:
ca:09:fe:ea:b0:86:34:38:cf:da:f4:26:d6:53:26:86:36:19:
8c:c1:8d:a9:ae:4e:54:5b:a4:f9:61:a8:85:bc:b3:9d:0c:49:
f2:6e:70:3e:07:66:a9:00:b5:5e:82:54:2e:54:b6:a5:d9:50:
03:64:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 13:16:58 2024 by rpki-client on console-ams.rpki-client.org