Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xmmIk9truCoKAfWUhGjp3jSpKgY.roa
File: xmmIk9truCoKAfWUhGjp3jSpKgY.roa (raw, json)
Hash identifier: w9HqxeIsUWCUBx3KaDvqiEiQ0EbQF9yMJzPAn2DhnW8=
Subject key identifier: C6:69:88:93:DB:6B:B8:2A:0A:01:F5:94:84:68:E9:DE:34:A9:2A:06
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018AA7FA8EFB3323F88C34ADB8145D55D8C2
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xmmIk9truCoKAfWUhGjp3jSpKgY.roa
Signing time: Mon 18 Sep 2023 11:08:50 +0000
ROA not before: Mon 18 Sep 2023 11:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.22.135.0/24 maxlen: 24
109.72.116.0/24 maxlen: 24
109.72.120.0/24 maxlen: 24
109.72.127.0/24 maxlen: 24
89.185.1.0/24 maxlen: 24
81.22.128.0/24 maxlen: 24
81.22.129.0/24 maxlen: 24
81.22.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 08:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:fa:8e:fb:33:23:f8:8c:34:ad:b8:14:5d:55:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 18 11:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6698893db6bb82a0a01f5948468e9de34a92a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:de:28:e9:d5:c8:77:7f:c0:21:d2:4c:b7:
8b:ba:66:1e:22:f2:ff:3c:e8:ec:aa:01:b3:bf:f2:
2b:b4:70:6a:c6:3b:f3:62:52:5b:c1:a1:de:28:bb:
bd:6e:22:5a:b9:cb:4a:9d:25:79:f4:7a:93:93:37:
63:f0:6e:2a:25:94:f8:db:d7:20:78:52:b8:4c:e0:
9f:94:76:01:c5:9d:08:8c:58:33:47:f6:05:5a:52:
ab:0b:1b:0d:b7:f5:d9:db:d6:ff:7e:4a:ab:29:18:
56:c1:ec:21:29:ea:c5:45:80:a0:5e:df:67:3c:74:
a7:78:fc:65:af:c5:38:49:39:2c:3b:a1:52:ca:3e:
a3:cf:fa:77:ec:4b:9a:d5:9f:36:93:fe:5f:36:ce:
ac:1d:ab:3c:85:14:df:28:c4:4e:57:43:0b:21:01:
6b:d3:7b:fa:a8:81:07:f9:e7:11:4c:ba:9c:bb:ae:
a2:7d:f9:3e:a8:5f:8f:34:d3:59:b0:09:d9:dd:78:
97:8c:7f:a7:f3:64:ab:3e:30:0d:85:87:51:30:3c:
c8:1c:4d:92:a4:fc:97:f8:12:a8:f9:2d:81:dc:62:
26:00:a7:7f:49:bf:c6:af:22:04:87:4f:51:a7:d4:
cc:f1:16:a0:21:7a:39:84:d8:f1:ef:2a:f4:b6:77:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:69:88:93:DB:6B:B8:2A:0A:01:F5:94:84:68:E9:DE:34:A9:2A:06
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xmmIk9truCoKAfWUhGjp3jSpKgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0-81.22.130.255
81.22.135.0/24
89.185.1.0/24
109.72.116.0/24
109.72.120.0/24
109.72.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:04:9a:70:d8:1c:21:33:0f:1e:53:25:a6:d0:2d:cf:2f:d1:
4c:cc:e7:fa:cf:27:fd:c5:ab:41:c5:37:33:e9:9c:54:a6:92:
ae:84:9d:e7:67:b8:d9:1f:4d:be:08:e7:b8:e5:e2:cd:46:13:
01:a4:ac:ea:83:08:91:c7:7f:22:c4:cb:e9:f9:c9:03:cc:92:
8c:a5:7f:4e:79:61:61:d9:a5:42:1a:f8:55:b1:60:24:99:d8:
eb:ab:86:b7:70:17:6c:22:bc:f0:dc:9c:d4:dc:f3:0d:03:13:
d7:8f:86:0b:15:00:7d:42:49:bf:91:3c:f7:27:98:56:91:66:
ec:0c:63:fa:ee:b2:50:b7:5e:b9:b8:1b:73:a7:28:d6:ce:66:
12:7b:9a:92:2d:e9:ea:1f:8e:0f:4a:0f:de:a1:d8:f1:42:86:
f7:c1:13:fb:0d:85:fd:85:1c:d6:49:ed:4a:87:5e:2a:0a:95:
be:f0:3c:96:82:d5:47:68:8c:99:3f:73:c0:13:ce:81:2e:a9:
68:7e:e9:d6:e1:4c:c7:71:2d:d9:ee:9a:5c:ff:22:5b:57:c6:
45:60:7d:06:1b:c5:5f:d5:2f:e6:0b:f0:37:62:7c:2d:ae:28:
b4:e0:dd:72:4c:be:4c:9f:3b:93:af:3b:b2:5e:04:97:a0:d1:
23:5c:9c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org