Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tj9A0qZd8J2XCEVktgmmnttFyAM.roa
File: tj9A0qZd8J2XCEVktgmmnttFyAM.roa (raw, json)
Hash identifier: PnDIoc3jMZBH9VhmcMTlUSdXrtpvC3iQ+DCnb/q+FvQ=
Subject key identifier: B6:3F:40:D2:A6:5D:F0:9D:97:08:45:64:B6:09:A6:9E:DB:45:C8:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD04E764293084709B1DD6BE9E5C98
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tj9A0qZd8J2XCEVktgmmnttFyAM.roa
Signing time: Tue 02 Jan 2024 06:29:37 +0000
ROA not before: Tue 02 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204729
IP address blocks: 81.161.238.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 08:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:04:e7:64:29:30:84:70:9b:1d:d6:be:9e:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b63f40d2a65df09d97084564b609a69edb45c803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:a4:39:27:9b:80:7e:2d:fc:a0:ec:c4:90:
05:36:76:db:36:c8:99:f2:45:70:8d:37:53:d7:b5:
a8:c0:39:c4:85:ca:23:48:b6:bd:b1:fd:76:71:f0:
7f:b1:5e:8f:70:f0:f7:21:42:33:41:22:d6:85:c0:
eb:32:5b:e7:86:fd:9f:f3:37:ac:71:83:20:bf:24:
2e:8c:a9:29:98:55:b7:98:31:65:a0:f8:40:42:c6:
79:1b:14:aa:e7:9a:0a:e2:26:b6:f2:c0:a4:4d:69:
98:42:6e:3f:2a:6b:71:9b:95:9e:a5:49:7a:ed:02:
a2:21:3e:9b:b8:9e:eb:0c:d9:6a:05:c0:cc:b2:74:
9d:9e:90:bf:1d:77:3c:a7:09:7f:23:fd:f8:6e:ea:
95:e8:41:e1:25:2f:e1:c5:18:88:23:d1:6e:b3:44:
e6:54:6c:1b:ba:72:b6:a7:18:c1:67:73:be:39:65:
30:c6:9f:57:db:76:41:c8:ca:1c:2e:3a:b0:de:b6:
69:63:e0:b7:a5:a2:85:7a:47:b6:37:27:55:10:59:
80:db:63:a5:84:66:7d:a8:f8:29:cf:cf:85:1d:e5:
33:0d:87:ab:78:4e:fc:64:d2:91:b3:82:e0:4d:3b:
c4:b2:60:3b:44:a6:5c:b4:c9:74:85:9b:c3:2a:03:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:40:D2:A6:5D:F0:9D:97:08:45:64:B6:09:A6:9E:DB:45:C8:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tj9A0qZd8J2XCEVktgmmnttFyAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.238.0/24
178.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:54:bd:0e:45:8f:d2:f2:80:a6:5f:a7:e1:05:a5:0a:af:52:
fb:5f:a6:d8:66:3d:64:29:dc:2e:9f:cf:d4:41:68:0d:dc:1d:
82:0d:9d:cb:bb:a8:07:27:30:1a:63:45:b9:78:fa:a0:29:b5:
7f:7d:0f:93:3f:05:17:98:75:75:e3:58:65:e2:a3:73:0c:09:
52:4b:56:66:a2:4c:b4:6c:fa:1b:a2:6a:39:08:63:1e:12:e5:
47:93:3d:6c:b6:6f:98:d4:62:b8:7b:b9:28:2f:72:95:b7:25:
13:63:3b:d1:d8:d5:b5:a4:00:50:83:9c:31:86:d0:c8:8d:9e:
b2:de:6b:6c:a9:f4:56:d9:de:f3:c9:47:16:71:24:3e:2f:f8:
0a:8a:4a:7c:6a:1e:68:3d:a7:da:9a:09:c8:81:e1:3e:84:a4:
2e:ea:1f:bd:52:b9:aa:8e:b0:05:90:29:7b:27:9e:c0:f2:79:
a5:0c:59:4e:93:6e:43:7e:75:b0:50:1f:b8:46:08:91:3d:67:
92:41:0a:37:e4:03:64:90:d3:03:1f:d7:1d:74:de:da:02:57:
92:fc:9f:5c:91:c2:6c:db:00:5a:3d:47:9b:47:fd:89:f0:72:
50:3d:96:62:55:b5:f3:f6:5b:fe:92:6e:3c:95:30:96:02:65:
22:ff:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 12:24:09 2024 by rpki-client on console-ams.rpki-client.org