Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9irGtiERhPgZPRXgQPd_mR4tp9Y.roa
File: 9irGtiERhPgZPRXgQPd_mR4tp9Y.roa (raw, json)
Hash identifier: DTnlhbh9KJEqe60/j6c9yF53sDNsu8pZ0fK7AVyvT7g=
Subject key identifier: F6:2A:C6:B6:21:11:84:F8:19:3D:15:E0:40:F7:7F:99:1E:2D:A7:D6
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018DD09343EC3CAB1B9008BF1A8A81343DE9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9irGtiERhPgZPRXgQPd_mR4tp9Y.roa
Signing time: Thu 22 Feb 2024 11:28:48 +0000
ROA not before: Thu 22 Feb 2024 11:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205275
IP address blocks: 81.181.66.0/23 maxlen: 24
194.102.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 10:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:93:43:ec:3c:ab:1b:90:08:bf:1a:8a:81:34:3d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 22 11:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f62ac6b6211184f8193d15e040f77f991e2da7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:58:1e:38:5d:c3:1c:41:45:80:31:9e:76:
ac:cb:a1:ad:b8:24:84:20:2f:fd:51:e5:78:db:c7:
fd:0c:29:67:63:ba:a9:74:e7:e8:f4:c4:34:af:9a:
f1:a7:f1:3a:d6:01:99:04:b7:c9:52:63:47:94:62:
10:86:9b:26:c0:bb:a3:2c:e5:4e:7b:7c:0a:20:2c:
ff:4c:7e:42:53:81:33:6e:fe:cc:f3:62:07:db:28:
22:a6:e0:30:ef:33:51:a9:1e:ba:db:e3:72:b2:c3:
14:93:f7:e7:bf:f9:ac:b1:d0:77:c4:6b:1f:bd:a2:
03:01:e3:ec:a5:38:25:9f:33:4c:da:9c:8b:1a:3e:
3a:11:bb:66:b2:99:62:2e:b1:11:dd:4c:49:cc:ae:
ba:4c:80:66:1a:68:35:d9:05:cd:59:a1:ec:58:67:
22:ce:41:dc:1d:d3:3d:b9:e7:77:e9:7b:b1:cb:e2:
c7:84:60:49:cc:56:5c:c1:d5:99:c0:ea:47:da:99:
80:9e:c9:83:e7:b0:41:1c:0d:6b:16:dd:3a:1b:1f:
d6:5d:34:c3:e2:ca:d4:73:e6:2b:fd:45:93:d4:19:
d9:a4:71:71:7c:57:a2:fa:38:5e:43:7c:88:5f:d9:
dc:8b:ff:8f:a4:bf:51:a2:ff:81:d3:90:4d:22:1d:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:C6:B6:21:11:84:F8:19:3D:15:E0:40:F7:7F:99:1E:2D:A7:D6
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9irGtiERhPgZPRXgQPd_mR4tp9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.66.0/23
194.102.33.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7c:4a:7c:c7:1a:77:a0:d2:40:70:0e:59:c0:b0:06:61:28:
71:4d:ee:dc:22:41:46:15:c7:6e:47:b7:41:32:9e:31:cb:8e:
db:88:0b:ef:97:d1:68:75:2b:2a:ca:d4:0f:fd:dd:b4:4e:9d:
51:7e:98:e2:52:1f:ea:7b:42:fe:c7:fd:45:38:c6:dc:c0:97:
ec:bc:5a:a5:36:84:e4:d1:fd:f3:9b:6c:65:91:35:92:65:c2:
4a:79:2f:4c:db:be:7f:3b:f3:b1:b9:c4:62:3a:9e:e7:53:e4:
e8:1e:53:45:76:c2:cc:a5:42:1a:e9:b3:55:67:af:15:d5:52:
1c:dd:70:62:99:dd:31:f5:63:ed:7f:12:9a:72:00:cb:45:46:
03:f4:6f:b2:89:ce:ba:fc:ef:70:9d:23:88:93:24:2f:6d:e8:
09:43:1f:2d:42:67:b9:30:a4:0f:43:87:f9:83:26:65:fe:74:
e1:e4:50:b2:f8:5b:b5:1b:77:0d:e0:6f:ce:36:82:10:77:7f:
f9:fb:37:49:9b:56:0b:6a:a0:b3:db:6b:c0:9a:8a:94:af:68:
c4:d2:be:f7:46:76:35:32:8d:94:7b:a0:29:b2:77:0e:95:29:
9e:64:d7:fd:2a:40:1a:5c:b2:e7:a7:75:ad:f2:50:25:4e:4d:
bc:b8:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 13:32:11 2024 by rpki-client on console-ams.rpki-client.org