Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Jl4ifs-HWHp64ur5xhZx5ptHnF0.roa
File: Jl4ifs-HWHp64ur5xhZx5ptHnF0.roa (raw, json)
Hash identifier: bKB4bPPaKp8DM9T3c6RkqNlwhhQwjLHRrGXuPU22faY=
Subject key identifier: 26:5E:22:7E:CF:87:58:7A:7A:E2:EA:F9:C6:16:71:E6:9B:47:9C:5D
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018F19555220AB385C7296B3DC3C65FD2865
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Jl4ifs-HWHp64ur5xhZx5ptHnF0.roa
Signing time: Fri 26 Apr 2024 07:36:13 +0000
ROA not before: Fri 26 Apr 2024 07:36:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
81.22.138.0/24 maxlen: 24
81.22.140.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
89.185.0.0/24 maxlen: 24
109.72.116.0/22 maxlen: 24
109.72.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Apr 2024 18:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:55:52:20:ab:38:5c:72:96:b3:dc:3c:65:fd:28:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 26 07:36:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=265e227ecf87587a7ae2eaf9c61671e69b479c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:d1:b8:51:ec:cd:a8:18:06:e6:9a:5a:a2:
8c:e3:59:05:da:3e:d6:37:44:0f:8e:cd:a9:85:f5:
d7:97:5b:58:1d:02:20:6b:0f:2d:b2:63:b7:f7:00:
9f:30:a0:b5:57:73:ed:65:6f:07:da:43:8b:b9:16:
23:cd:39:e3:4c:3e:13:73:4e:2e:16:b5:b9:45:75:
24:3b:e3:f9:4f:a2:99:e7:ff:1e:8b:2e:40:01:6e:
65:bf:41:2c:1f:d5:28:ad:79:11:dd:98:7a:9b:9d:
69:71:a9:01:04:35:4a:c0:ca:7a:a2:ed:94:8e:76:
a9:f5:73:9f:e4:38:52:9e:39:ee:9a:41:f7:8f:a0:
83:03:78:7e:dd:9a:47:2d:42:21:5d:f3:1d:8b:68:
24:32:dd:67:31:1c:fc:21:d2:05:83:85:02:38:b8:
d2:d5:a2:60:98:c2:76:fa:7c:6c:57:98:b0:8e:f0:
f0:55:88:60:69:85:d2:2b:3f:01:20:66:61:8d:43:
f0:80:61:4a:58:21:95:a2:b5:22:81:7d:f6:c1:41:
c2:68:db:4d:54:52:75:a5:05:3c:49:2a:32:e6:f8:
5a:aa:f4:fc:2b:07:58:5e:d4:91:15:0a:6d:6f:c8:
3d:ba:8c:4a:7b:45:f3:19:5b:7f:73:7a:ab:f1:15:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:22:7E:CF:87:58:7A:7A:E2:EA:F9:C6:16:71:E6:9B:47:9C:5D
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Jl4ifs-HWHp64ur5xhZx5ptHnF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/21
89.185.0.0/22
109.72.116.0/22
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e7:8f:4f:9e:cc:24:cf:f6:42:9c:6c:17:b6:cb:30:f2:77:
7e:09:92:eb:22:63:94:1b:91:2a:19:c7:25:60:3f:ef:a5:04:
78:ab:fa:c6:0d:fd:cd:57:25:59:d0:a1:64:f9:c1:65:3f:2f:
9a:50:ae:16:53:8f:a9:c3:c2:f3:e3:c0:ed:0d:77:eb:d4:dd:
5f:94:c2:2f:4b:8e:15:1f:5e:56:94:67:f4:15:04:10:9a:a3:
fc:ea:3b:c4:1a:60:46:2f:b8:43:35:42:74:7a:fb:71:19:22:
c9:27:c0:5f:4e:9b:d8:50:e9:64:92:13:7d:8a:8c:1a:ce:f5:
fc:2c:8d:9a:87:61:8f:1f:32:25:96:20:4e:49:76:62:e6:b9:
15:b7:2b:37:0e:c6:ca:2e:9e:67:ca:6e:94:a5:6c:da:7c:2d:
a0:9c:4d:45:40:1e:ca:02:88:bf:67:c4:66:f5:a0:d5:3c:ed:
1f:40:b4:85:86:60:cb:ac:89:82:09:92:bd:7a:e4:ee:b0:68:
f9:67:82:6f:62:be:89:49:87:cb:4f:9b:f6:13:43:6e:81:1c:
5a:4d:ba:01:37:3f:c4:96:e3:b0:ef:44:f4:15:9b:24:53:1e:
2b:7c:a3:f7:be:af:18:60:a0:48:d1:21:92:0e:63:e1:65:e2:
1b:f6:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:43:05 2024 by rpki-client on console-ams.rpki-client.org