Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0rzDjybTwee7YlNQTLev0sAdnBM.roa
File: 0rzDjybTwee7YlNQTLev0sAdnBM.roa (raw, json)
Hash identifier: In+wq37Kp7VW31Q5Ok27PoLQ10BhfiajhhXMDLxzB9k=
Subject key identifier: D2:BC:C3:8F:26:D3:C1:E7:BB:62:53:50:4C:B7:AF:D2:C0:1D:9C:13
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189D92097F49C436EB9695CCCE373D3389F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0rzDjybTwee7YlNQTLev0sAdnBM.roa
Signing time: Wed 09 Aug 2023 07:08:59 +0000
ROA not before: Wed 09 Aug 2023 07:08:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 81.21.4.0/22 maxlen: 24
81.21.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 10:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:20:97:f4:9c:43:6e:b9:69:5c:cc:e3:73:d3:38:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 9 07:08:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2bcc38f26d3c1e7bb6253504cb7afd2c01d9c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:3c:98:6d:ae:9d:2c:83:3c:0c:22:25:73:
4d:6b:95:15:89:71:e8:3a:f2:cc:f4:da:84:8c:f1:
21:3e:96:ff:77:a5:43:09:fc:91:21:ed:91:31:86:
77:9b:9f:26:31:3b:ac:79:95:fe:a3:eb:a2:df:e6:
a2:20:6b:37:9b:74:95:f0:7e:06:70:65:a9:94:c2:
df:b5:59:0c:99:b2:a8:11:b8:b1:36:5f:82:4f:1b:
09:3d:4c:c0:3e:f9:6c:5e:2f:5f:e3:fa:22:93:26:
40:c5:d1:1e:0b:53:dd:2a:0a:30:4c:de:b0:19:37:
e8:1f:4d:cb:7c:48:79:ba:f4:af:02:ef:8f:24:d7:
07:b5:b1:c6:6d:70:eb:3f:d0:16:ce:c0:88:57:67:
94:67:ea:f7:5a:b7:bc:5f:f7:f2:c6:4f:f2:ef:3b:
66:fb:b2:ae:18:3a:2b:33:bb:df:56:17:37:18:14:
55:2f:e5:7f:47:56:b8:30:ec:2c:25:f8:fe:e2:66:
77:93:06:c6:4c:2e:23:2d:e5:ab:d1:5e:cb:6d:bd:
17:04:e8:f5:df:af:a9:14:3f:83:43:77:c5:fe:ae:
13:04:a9:b2:35:97:27:71:88:2d:ea:49:82:66:27:
23:03:39:83:bb:d0:0f:7b:cd:50:4f:32:c6:3a:7c:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BC:C3:8F:26:D3:C1:E7:BB:62:53:50:4C:B7:AF:D2:C0:1D:9C:13
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0rzDjybTwee7YlNQTLev0sAdnBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.4.0/22
81.21.9.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e8:63:04:a0:cf:0c:02:33:bd:33:a9:f8:77:08:35:16:2e:
0d:54:6c:c0:af:7e:5d:eb:a3:5f:99:57:73:bc:57:c0:b7:0a:
6e:f2:14:b6:2f:11:fc:14:b9:f6:88:c9:fc:48:9a:c6:e2:94:
73:06:0f:89:f6:4c:cd:76:27:59:29:e2:ac:59:c5:1b:06:16:
19:76:a2:77:77:8e:48:58:d5:6a:e5:dc:5c:8e:82:b4:16:93:
86:05:73:50:d9:a3:d1:72:28:8c:4e:d2:1b:28:c4:77:28:75:
27:ca:73:fb:31:d1:92:c9:76:23:7b:ee:82:2f:65:d6:a9:df:
bf:fd:12:78:e3:29:4a:ce:c2:97:2d:8e:54:5a:20:0a:40:0c:
b5:68:50:21:be:61:f1:5f:e3:2d:3e:7d:64:2e:3f:ad:fd:c7:
da:d5:80:7f:1e:3e:a9:8a:0a:1a:7b:5e:9d:83:0c:86:3e:b5:
66:93:f1:0e:5d:ea:d9:c5:18:c6:6d:56:82:1a:44:2a:6e:09:
2f:80:ed:4f:a4:b4:32:6e:ac:ae:7b:5b:20:a5:3f:34:0a:a8:
89:b0:3a:6a:99:46:57:c1:36:97:97:7e:bb:12:20:3f:f4:30:
1c:9c:23:46:01:2a:12:5f:77:b9:2d:60:81:fe:49:25:51:5b:
99:09:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org