Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0eWeN6zgG0LQn5SbZP_30kw1Qt4.roa
File: 0eWeN6zgG0LQn5SbZP_30kw1Qt4.roa (raw, json)
Hash identifier: lsrd7t5aCv17t6wZX4eNMb0qzfN3GZkFncrOjhLiw28=
Subject key identifier: D1:E5:9E:37:AC:E0:1B:42:D0:9F:94:9B:64:FF:F7:D2:4C:35:42:DE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01886784505B82ABE72120F314EE8C479A36
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0eWeN6zgG0LQn5SbZP_30kw1Qt4.roa
Signing time: Mon 29 May 2023 12:38:24 +0000
ROA not before: Mon 29 May 2023 12:38:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 81.21.15.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:84:50:5b:82:ab:e7:21:20:f3:14:ee:8c:47:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 29 12:38:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e59e37ace01b42d09f949b64fff7d24c3542de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:6c:ef:01:4e:07:56:78:4e:ce:8a:e4:a3:
ff:1e:e0:64:74:9b:56:99:9d:96:d5:ac:56:ed:92:
d7:75:af:7e:0f:cd:bd:98:41:e1:4c:ab:55:c3:30:
dc:60:bc:fb:f3:3f:98:bb:3a:93:a2:44:5f:8e:65:
a6:82:0c:d3:69:37:c2:e7:68:6a:04:35:30:ce:3e:
da:ce:10:5a:fb:1e:5b:58:09:61:b7:8c:81:35:b6:
40:e9:ca:e4:a1:6f:d8:73:6a:5a:7a:90:2d:23:63:
dd:27:cc:31:b4:32:51:55:d4:da:43:02:fe:31:64:
a7:98:db:a4:04:44:4a:3c:e6:45:a9:e3:06:e6:5b:
e3:f0:bc:59:87:d7:f0:13:7c:6f:e7:3f:08:25:ab:
41:09:9e:10:40:fd:ba:16:4c:fd:dc:bf:2d:6e:5e:
b9:f8:84:2b:68:c8:54:e4:4d:7c:d5:3a:b9:77:78:
74:5f:c2:fe:8d:49:21:11:16:f1:a3:d9:2f:df:24:
cd:b3:fa:45:e4:8e:55:1e:8a:24:77:b2:1a:62:bb:
f7:61:67:c0:21:cc:5d:90:d8:26:0f:2a:38:89:04:
d2:91:e6:28:91:78:60:93:04:ae:b5:31:e4:35:cf:
7c:9f:a9:f2:49:99:b4:eb:8d:02:e2:45:92:21:b4:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:9E:37:AC:E0:1B:42:D0:9F:94:9B:64:FF:F7:D2:4C:35:42:DE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0eWeN6zgG0LQn5SbZP_30kw1Qt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.13.0-81.21.15.255
Signature Algorithm: sha256WithRSAEncryption
90:43:2c:5f:cf:fa:91:0a:02:c8:75:25:07:69:3c:15:de:f1:
25:98:b1:79:2c:1a:97:f6:42:d0:f2:3c:a2:af:a7:24:f1:da:
a5:33:df:e2:39:51:a8:1a:d3:0b:16:2a:50:00:88:c7:43:40:
31:b3:2b:d1:c5:1d:1a:12:78:d1:79:67:fb:db:77:3c:2e:e7:
28:e0:cb:25:7c:9e:42:c4:7b:29:36:48:82:4a:d1:7b:21:a9:
93:a6:bb:21:55:6e:e4:ea:60:c0:83:de:09:5e:59:2e:dd:d6:
ce:bf:26:29:90:19:a6:bd:92:a3:58:5b:12:be:56:e0:3b:92:
4f:67:71:18:ca:a3:ca:2d:43:e7:42:aa:96:57:b3:4c:a1:0b:
30:b9:a4:b9:9f:cb:60:0c:0c:9c:3f:bd:45:5d:4c:2f:0f:3f:
36:04:e7:2e:50:a6:d3:37:69:01:2a:77:c8:bf:fc:24:13:4a:
1a:2d:9f:8b:99:9f:5c:66:52:fd:63:62:80:aa:b5:46:b4:61:
6f:5f:1b:76:00:7e:91:a7:94:83:64:cb:8d:81:70:df:55:fc:
5a:47:a1:9a:53:ec:6c:c4:8c:76:8f:b9:58:13:09:ed:81:29:
0e:74:72:0c:71:ed:cb:49:e0:27:31:9e:3e:7c:d4:96:86:fb:
0d:a0:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org