Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xLfzGia-egzcgnROBNEBT4SvAe8.roa
File: xLfzGia-egzcgnROBNEBT4SvAe8.roa (raw, json)
Hash identifier: VdhE9q31HDx4f+gMtt4ACykYNtfFdCMF+n7QP27dCa8=
Subject key identifier: C4:B7:F3:1A:26:BE:7A:0C:DC:82:74:4E:04:D1:01:4F:84:AF:01:EF
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188E263931B81827DD9DA6FC0CFB2D79983
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xLfzGia-egzcgnROBNEBT4SvAe8.roa
Signing time: Thu 22 Jun 2023 09:15:56 +0000
ROA not before: Thu 22 Jun 2023 09:15:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 81.22.134.0/24 maxlen: 24
81.22.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 20 Aug 2023 05:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:63:93:1b:81:82:7d:d9:da:6f:c0:cf:b2:d7:99:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 22 09:15:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4b7f31a26be7a0cdc82744e04d1014f84af01ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:05:c0:a9:61:34:94:b1:14:28:2c:54:f5:
de:70:8a:ab:2f:f1:ef:be:7f:8f:5a:26:d7:e1:d1:
96:b4:83:71:64:57:c4:56:38:ea:ea:56:a9:38:c2:
ad:82:5b:99:5b:48:01:7f:3b:ca:ff:45:04:2a:a1:
b0:e3:bb:c2:20:b0:8f:6b:fc:6d:a3:c5:49:53:af:
15:78:cf:fb:06:14:ca:35:b3:36:eb:00:b9:e4:20:
55:d6:c1:b6:60:e3:48:64:d0:61:e4:70:7f:5f:6c:
f2:65:93:33:42:bc:bd:88:90:c3:90:00:89:97:95:
38:09:2c:ce:c8:81:aa:d0:31:15:7b:b5:36:4b:3b:
65:bd:f2:64:1b:f5:d4:8c:82:66:6a:18:35:de:d8:
ee:0d:89:53:73:1c:26:8c:67:dd:19:47:0b:94:a4:
5b:2f:e8:ac:d2:f7:86:75:7e:dc:23:af:d3:b7:aa:
4c:d0:06:2a:81:4f:1c:6d:6a:e8:ea:ca:8f:cd:c2:
22:5f:08:2d:22:95:c5:60:59:6e:f9:be:0a:b8:c8:
19:fd:14:75:a0:e6:22:e3:c0:65:cc:d1:af:bc:2d:
5e:f1:1f:a2:2e:9f:e4:a4:b1:19:1d:20:3b:9d:48:
59:0d:1b:d6:de:9c:85:2f:71:89:59:0c:c5:ca:be:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B7:F3:1A:26:BE:7A:0C:DC:82:74:4E:04:D1:01:4F:84:AF:01:EF
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xLfzGia-egzcgnROBNEBT4SvAe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.134.0/24
81.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:0b:02:b5:2c:e2:03:3f:f5:f4:d1:af:0d:f7:64:e5:c1:cc:
d7:4f:44:7e:4e:11:98:77:a3:0c:94:93:7e:b9:c5:d5:ab:c7:
e1:a8:e3:ee:69:06:7a:7a:70:ec:10:81:19:b5:62:4e:7a:19:
79:97:26:62:bc:b3:78:d9:50:fa:a9:91:bf:4e:8a:c2:a8:41:
fb:be:47:ba:b1:b0:18:5d:11:b9:aa:ee:f8:27:35:7f:c7:ed:
fa:98:37:70:ec:39:50:03:eb:d7:e4:9f:64:b5:dd:af:76:97:
52:f1:09:2d:02:ae:8f:17:f5:f6:3f:04:24:ec:e4:5c:d1:58:
ab:b9:6f:37:5a:4c:c3:27:78:46:1d:9d:08:f5:2b:da:86:21:
aa:13:cb:bc:c7:80:fc:00:00:e7:02:ae:1f:ba:68:14:5a:ab:
86:7b:e1:3a:87:70:38:72:c3:a8:47:10:52:51:f5:66:52:d7:
5a:02:8c:80:af:3d:70:4a:08:14:4b:ce:93:1a:00:7d:66:6b:
bc:a2:cb:9f:90:55:fe:a1:86:e6:31:ef:fb:fb:93:87:79:fc:
fa:5d:ae:97:07:4e:1d:81:a7:67:b9:8a:4f:15:e2:25:6c:a3:
da:77:64:a6:9c:b5:de:79:d6:c6:7c:b9:b8:46:f8:e3:7e:b9:
f7:56:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org