Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/uKP6aFT_hy46CKoC1SagLGve0MQ.roa
File: uKP6aFT_hy46CKoC1SagLGve0MQ.roa (raw, json)
Hash identifier: mkFHdVgLWXOFsQGuP5yrdvfnM7QcCkP1Qt/Ll5OBmzE=
Subject key identifier: B8:A3:FA:68:54:FF:87:2E:3A:08:AA:02:D5:26:A0:2C:6B:DE:D0:C4
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018B3D4CD1DEA445E9AB32B99E82BDF97F06
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/uKP6aFT_hy46CKoC1SagLGve0MQ.roa
Signing time: Tue 17 Oct 2023 11:02:06 +0000
ROA not before: Tue 17 Oct 2023 11:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.22.135.0/24 maxlen: 24
109.72.120.0/24 maxlen: 24
109.72.127.0/24 maxlen: 24
89.185.1.0/24 maxlen: 24
89.185.3.0/24 maxlen: 24
81.22.128.0/24 maxlen: 24
81.22.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Oct 2023 08:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:4c:d1:de:a4:45:e9:ab:32:b9:9e:82:bd:f9:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 17 11:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8a3fa6854ff872e3a08aa02d526a02c6bded0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:aa:86:7b:7f:12:af:2a:23:4f:7c:56:da:
19:04:00:fa:a2:cc:44:06:b0:a7:46:fd:67:35:d3:
ed:87:dc:c3:c4:b8:fe:e5:a3:3d:33:a4:c9:df:98:
80:e6:5c:02:36:96:d3:61:99:3c:86:c9:b2:37:d0:
59:04:79:05:8d:35:9f:9b:b3:a1:be:1b:de:29:72:
3f:05:e2:17:7d:45:61:3b:45:d6:53:02:4c:d0:b0:
f5:ae:94:3b:dd:55:eb:a7:06:9a:52:7d:e7:95:af:
c3:01:27:ca:45:cc:bc:a7:10:aa:d3:7d:85:b1:b1:
96:18:f0:d9:10:82:c4:b7:fd:9c:8e:76:d3:8c:cb:
42:ea:0a:6c:8d:01:71:b8:ee:7e:1a:d2:54:11:8c:
a5:25:3c:a4:71:d3:bc:b7:ef:f7:1c:64:f9:29:12:
ab:9c:e1:65:59:2c:51:94:3f:aa:bd:b5:f3:08:0b:
ac:26:bf:da:43:8a:2b:6c:f1:59:58:ed:e3:20:2b:
c2:9f:93:7f:ba:97:a5:e1:97:41:d3:b4:28:34:94:
2c:31:e8:62:be:62:7e:00:b9:2c:8d:17:9d:5e:42:
c8:43:e9:95:61:97:7e:2a:c8:90:57:ff:52:2f:66:
3d:ce:b8:a4:01:11:2d:af:e1:a7:5e:b3:31:91:9d:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:FA:68:54:FF:87:2E:3A:08:AA:02:D5:26:A0:2C:6B:DE:D0:C4
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/uKP6aFT_hy46CKoC1SagLGve0MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/23
81.22.135.0/24
89.185.1.0/24
89.185.3.0/24
109.72.120.0/24
109.72.127.0/24
Signature Algorithm: sha256WithRSAEncryption
43:13:67:1d:3b:ab:9e:f8:73:ed:a9:89:3a:88:ed:1c:28:16:
cf:5f:8b:f0:17:a3:ae:a7:b7:84:6f:eb:a2:10:ea:56:f1:6c:
96:60:ac:d6:53:23:39:3a:8f:df:63:f4:47:25:49:55:5e:c7:
e9:00:bb:0a:9f:d0:cc:7e:e1:7d:08:b1:05:97:03:b3:bb:f4:
78:c2:41:1a:14:50:6b:e1:1f:f9:1c:a7:05:d0:3a:8a:bf:c4:
f4:f7:75:cd:8a:95:34:61:68:39:41:8e:4a:66:69:08:06:fa:
94:3c:f9:e4:1a:be:35:de:8e:b8:cd:65:2e:33:be:0b:2b:1a:
d7:89:b6:90:4b:da:58:51:ae:db:a1:6c:c5:c2:12:35:83:41:
4b:3e:be:d9:50:20:f6:ca:40:ef:22:ce:cf:1a:91:a7:74:f2:
0c:57:2b:cc:89:de:cf:dd:f0:e1:93:46:f6:26:06:54:de:e0:
19:73:e4:0f:81:93:d6:37:95:ed:68:97:c8:bf:91:27:a2:52:
bb:8b:9f:2c:80:a4:81:1f:a1:4b:31:49:96:f9:c1:b7:10:57:
17:a6:4e:3d:15:70:26:6b:67:83:af:d9:db:37:7f:68:77:aa:
df:ee:b2:5d:b0:7f:cd:76:d2:f5:f8:96:5c:d0:c9:19:f4:85:
25:fd:b7:6b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYs9TNHepEXpqzK5noK9+X8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMxMDE3MTEwMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGEzZmE2ODU0ZmY4NzJlM2EwOGFhMDJkNTI2YTAyYzZiZGVkMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUaqhnt/Eq8qI098VtoZBAD6osxE
BrCnRv1nNdPth9zDxLj+5aM9M6TJ35iA5lwCNpbTYZk8hsmyN9BZBHkFjTWfm7Oh
vhveKXI/BeIXfUVhO0XWUwJM0LD1rpQ73VXrpwaaUn3nla/DASfKRcy8pxCq032F
sbGWGPDZEILEt/2cjnbTjMtC6gpsjQFxuO5+GtJUEYylJTykcdO8t+/3HGT5KRKr
nOFlWSxRlD+qvbXzCAusJr/aQ4orbPFZWO3jICvCn5N/upel4ZdB07QoNJQsMehi
vmJ+ALksjRedXkLIQ+mVYZd+KsiQV/9SL2Y9zrikAREtr+GnXrMxkZ2MCwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLij+mhU/4cuOgiqAtUmoCxr3tDEMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvdUtQNmFGVF9oeTQ2Q0tvQzFTYWdMR3ZlME1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBURaAAwQA
URaHAwQAWbkBAwQAWbkDAwQAbUh4AwQAbUh/MA0GCSqGSIb3DQEBCwUAA4IBAQBD
E2cdO6ue+HPtqYk6iO0cKBbPX4vwF6Oup7eEb+uiEOpW8WyWYKzWUyM5Oo/fY/RH
JUlVXsfpALsKn9DMfuF9CLEFlwOzu/R4wkEaFFBr4R/5HKcF0DqKv8T093XNipU0
YWg5QY5KZmkIBvqUPPnkGr413o64zWUuM74LKxrXibaQS9pYUa7boWzFwhI1g0FL
Pr7ZUCD2ykDvIs7PGpGndPIMVyvMid7P3fDhk0b2JgZU3uAZc+QPgZPWN5XtaJfI
v5EnolK7i58sgKSBH6FLMUmW+cG3EFcXpk49FXAma2eDr9nbN39od6rf7rJdsH/N
dtL1+JZc0MkZ9IUl/bdr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org