Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wCDWCZx_FtzTuxlcHqhVb7IxkAA.roa
File: wCDWCZx_FtzTuxlcHqhVb7IxkAA.roa (raw, json)
Hash identifier: U7ReINzampCka6rmNzpu0kBONlDV2DG6iEJe+AlGwaI=
Subject key identifier: C0:20:D6:09:9C:7F:16:DC:D3:BB:19:5C:1E:A8:55:6F:B2:31:90:00
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188AFAFAA266E819D0F30AC3F087D15BAC8
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wCDWCZx_FtzTuxlcHqhVb7IxkAA.roa
Signing time: Mon 12 Jun 2023 12:58:24 +0000
ROA not before: Mon 12 Jun 2023 12:58:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.22.140.0/22 maxlen: 24
109.72.114.0/24 maxlen: 24
109.72.115.0/24 maxlen: 24
109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
81.22.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 14:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:af:aa:26:6e:81:9d:0f:30:ac:3f:08:7d:15:ba:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 12 12:58:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c020d6099c7f16dcd3bb195c1ea8556fb2319000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:c1:c7:1c:8d:bc:51:e5:ee:8e:f5:39:5a:
1f:68:e7:43:f4:8e:2e:20:b8:86:65:3d:14:05:29:
ff:72:06:6e:10:c1:96:8a:4b:e0:38:15:8a:1d:56:
2a:78:6d:60:23:a4:00:e6:af:90:83:d5:31:0e:ca:
b4:e2:fc:5a:64:46:ca:af:03:cd:5d:6b:9c:50:ad:
3f:09:d2:4d:43:b4:23:84:c6:8e:46:ba:42:1b:9c:
b8:90:2f:3f:43:bd:b8:2e:54:fa:2c:9e:58:70:1a:
b3:6c:50:f8:7c:f5:66:15:5b:42:9d:63:c8:58:40:
54:d8:e3:ce:ff:09:bb:90:66:fd:26:0b:c2:ee:6c:
ac:f2:b6:81:be:3b:2b:c9:4e:5d:7d:98:27:83:98:
ee:26:c4:bf:10:b5:ab:7f:ed:1c:8c:e9:72:97:0d:
18:89:b1:eb:4f:46:5b:28:f9:35:90:1f:ff:ff:04:
c1:ff:f4:90:03:de:f2:1e:c3:84:19:c5:21:b8:6a:
6a:72:59:15:6c:fe:e5:9d:39:96:49:b0:57:d6:24:
1d:07:ce:00:aa:a6:ad:91:49:a8:9a:ed:59:03:7b:
eb:7a:dc:26:9f:f1:40:3d:0e:9f:6f:33:0d:21:fb:
f0:27:9e:9d:11:be:b4:2c:15:a7:74:6f:bf:6b:a8:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:D6:09:9C:7F:16:DC:D3:BB:19:5C:1E:A8:55:6F:B2:31:90:00
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wCDWCZx_FtzTuxlcHqhVb7IxkAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.131.0/24
81.22.140.0/22
89.185.0.0/22
109.72.114.0-109.72.119.255
Signature Algorithm: sha256WithRSAEncryption
28:37:0c:93:c1:29:81:a0:02:3f:26:c0:69:47:be:87:c7:3c:
d7:ab:4c:80:64:bc:ed:68:29:f3:80:0a:07:4c:dc:d4:ad:91:
ad:00:00:50:7b:88:0a:c7:9c:43:d3:0f:c6:5a:3d:f8:fe:82:
67:1a:54:f4:dd:fc:25:19:4d:0e:dd:7d:47:0d:75:d4:5d:7c:
57:58:f7:a2:e6:10:ea:a0:00:66:89:7e:af:81:68:ec:2a:e9:
a4:2e:bd:b3:2c:de:a0:37:9e:54:42:d0:84:9c:da:80:8c:77:
43:e1:34:00:ee:1b:64:31:05:ec:2e:4a:9d:c8:7c:78:69:ff:
6d:47:4a:da:e1:b0:9d:b1:b3:2c:42:38:52:3a:53:5c:5a:9f:
58:8b:b4:06:b7:c7:41:52:0f:f6:62:55:47:e1:bc:45:0f:32:
20:33:8c:02:ab:21:fe:d0:02:6d:a7:c5:86:51:ae:cd:cf:83:
53:15:b6:e5:28:9a:ac:d9:7a:81:32:71:d7:88:60:25:26:d0:
cd:c4:a9:f7:a8:9f:78:a6:cc:bb:d6:a7:8b:78:ff:79:8d:6f:
fb:04:1c:0d:7f:d9:01:38:4d:0b:31:1a:c5:a0:2c:8e:29:b3:
35:3d:85:37:24:e3:6a:9f:9c:b3:04:9d:d6:10:9a:b3:1b:c6:
8e:c7:cc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org