Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IntMY2EPJ1yiKQUTZcEx9O12dOk.roa
File: IntMY2EPJ1yiKQUTZcEx9O12dOk.roa (raw, json)
Hash identifier: Y5cIX7vPut/HXXcuEazgEGzfcqOHQFqEb7V6tiZoHfo=
Subject key identifier: 22:7B:4C:63:61:0F:27:5C:A2:29:05:13:65:C1:31:F4:ED:76:74:E9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DBBC53D830F1E5736CB7632F0B0B50363
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IntMY2EPJ1yiKQUTZcEx9O12dOk.roa
Signing time: Sun 18 Feb 2024 10:31:22 +0000
ROA not before: Sun 18 Feb 2024 10:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197715
IP address blocks: 81.161.236.0/24 maxlen: 24
92.119.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 10:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bb:c5:3d:83:0f:1e:57:36:cb:76:32:f0:b0:b5:03:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 18 10:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=227b4c63610f275ca229051365c131f4ed7674e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:3a:87:3a:df:98:a2:e2:fa:62:f2:2f:1b:
c5:bf:81:6e:1f:4d:8c:c3:62:b0:9a:8c:51:32:52:
8c:72:63:06:bd:b7:fb:0f:1c:e4:1e:14:f2:92:b7:
74:e5:92:e6:30:e2:df:0d:0e:0c:e7:7f:86:37:d5:
74:d9:49:34:84:d8:31:6a:82:98:41:51:1c:9c:d1:
25:26:8d:4e:7d:3d:e2:a6:9e:06:34:43:c0:95:1f:
c8:83:38:2c:e2:d9:3e:c4:13:06:b0:23:b4:25:63:
6e:86:2b:ab:c1:22:4f:c9:fe:c3:19:f7:39:b6:a5:
cc:d4:6b:25:f8:d7:ac:4d:dc:ac:52:f5:73:3e:47:
6a:8b:9f:55:17:e5:02:df:3b:c0:41:0e:90:d6:b9:
92:9f:63:28:ef:c4:7b:e4:dd:31:ba:2e:bd:0b:06:
46:c7:31:8e:97:8e:54:49:1b:05:ed:a0:16:dc:9c:
ff:f0:e7:fd:39:d8:0e:80:13:ae:4c:1d:c4:27:18:
40:3d:e4:ef:b5:f3:c4:d5:68:eb:1e:5d:57:b4:3c:
42:56:84:99:8e:40:ab:85:63:79:48:f5:95:e9:63:
42:91:4a:c8:f0:ca:65:8d:c2:d6:8b:15:b1:76:45:
16:e5:92:08:c2:9e:50:47:13:bf:a0:69:a9:93:ec:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:4C:63:61:0F:27:5C:A2:29:05:13:65:C1:31:F4:ED:76:74:E9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IntMY2EPJ1yiKQUTZcEx9O12dOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.236.0/24
92.119.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9b:42:65:0c:fb:d9:16:08:7b:33:76:88:60:5f:62:95:ca:
c1:f3:32:30:29:37:ea:c7:32:ea:4b:23:18:d8:a5:4c:f6:a6:
e4:68:f2:a5:f5:b4:bb:19:2f:f5:5a:ca:a5:e7:e8:29:c7:0a:
f5:2a:74:9d:fc:4b:4c:ec:f3:9a:c1:d6:88:92:fd:d2:c4:b4:
90:b7:16:34:e0:d9:eb:72:17:59:2b:81:17:72:42:ed:fe:f5:
f4:04:74:c4:87:72:d2:1d:a2:51:af:52:9b:89:44:b5:66:b5:
4f:ac:5c:42:06:df:e9:c3:33:05:46:ad:e6:10:a3:ec:ab:46:
58:ab:62:ad:8e:2d:10:81:d7:ce:b7:3b:0f:7d:ea:62:13:a2:
b1:d6:e1:e5:34:db:ad:82:c1:07:0c:68:1b:b7:b3:fe:38:3b:
b2:37:0b:b5:f5:79:1b:3c:ed:4c:0c:f2:ed:c0:25:cf:41:65:
da:af:37:c7:13:44:27:ea:f2:6c:56:cf:5b:9b:3f:35:c5:e1:
81:30:ec:0a:d5:24:79:3b:59:4b:14:cf:1e:32:21:e3:67:a2:
2e:a4:45:1c:5d:7f:56:06:0f:fa:97:88:08:89:da:48:3f:74:
90:29:c2:cc:c1:a9:f9:40:0d:23:96:b7:77:c7:48:0a:65:79:
9b:e8:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 13:55:21 2024 by rpki-client on console-ams.rpki-client.org