Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8amGGPRs4U8R_iJZ9I7NtLJD8VE.roa
File: 8amGGPRs4U8R_iJZ9I7NtLJD8VE.roa (raw, json)
Hash identifier: Dx/N4ccLBy7LnuwHfp7BBeHUI2aN5LPQ0135tMnJBX8=
Subject key identifier: F1:A9:86:18:F4:6C:E1:4F:11:FE:22:59:F4:8E:CD:B4:B2:43:F1:51
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7A43450D66B13FA6F2ACEB3D65714
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8amGGPRs4U8R_iJZ9I7NtLJD8VE.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151954
IP address blocks: 81.21.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 13:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a4:34:50:d6:6b:13:fa:6f:2a:ce:b3:d6:57:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a98618f46ce14f11fe2259f48ecdb4b243f151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:a4:3b:dd:cd:e3:ae:32:3e:59:b4:14:eb:
5f:26:f6:1e:5e:9c:2b:29:c6:bc:91:3e:f7:c8:6c:
9c:d1:95:e7:ca:6d:da:22:32:c5:b1:40:c8:22:5b:
98:fe:ed:48:f8:8e:70:9b:91:c7:b7:25:9a:e1:ff:
d3:42:12:d9:2c:91:2c:e5:0d:74:86:4e:f9:ea:c1:
55:00:9d:51:c4:3f:3f:72:00:f5:28:22:32:e0:04:
62:fa:dc:ff:55:cb:22:35:ce:41:81:f9:c2:6a:dc:
03:b5:c2:99:80:a2:36:71:ae:c9:23:64:c8:0b:6f:
73:a6:a8:bc:68:9a:1e:f2:fd:be:b7:a1:4c:73:e9:
ab:cd:68:00:57:f8:31:51:a3:a2:46:32:c9:89:80:
86:92:f9:21:cc:5d:e1:aa:74:e7:43:1e:0f:1c:08:
b8:73:f2:e5:b2:5c:ae:26:db:f1:7c:24:84:76:42:
08:22:33:87:e9:22:09:11:28:f4:a2:8e:2d:c6:14:
36:a4:5c:1e:bf:0e:46:be:88:af:33:c1:95:83:60:
3c:43:de:69:59:ee:1c:d1:b2:8e:d2:f1:e7:b0:af:
a1:c3:60:63:b7:aa:00:d6:29:0d:93:c5:d9:e4:e8:
93:6d:14:df:ec:11:2f:37:d6:f0:79:11:6e:fa:3f:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:86:18:F4:6C:E1:4F:11:FE:22:59:F4:8E:CD:B4:B2:43:F1:51
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8amGGPRs4U8R_iJZ9I7NtLJD8VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.9.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c3:7a:ec:4d:70:4d:46:b7:87:e4:fd:27:ec:ea:85:00:1a:
33:d3:73:7e:b5:63:5c:e1:4a:6d:58:0f:e1:18:bd:72:9c:b4:
6b:d9:0f:54:f6:cf:c1:5f:df:2a:d9:92:7c:36:c2:c5:cd:3c:
da:5a:7c:7c:89:a3:17:69:a7:8b:22:1d:e7:4f:f8:03:c5:54:
36:30:9c:31:d1:cd:f7:2e:b2:3c:cc:9a:c4:10:62:67:8e:ee:
30:41:80:e7:51:2c:95:23:ad:d4:86:4d:4b:da:f4:8c:da:a8:
1c:7b:8b:ef:73:f8:b6:30:12:69:3a:98:36:d6:85:63:a1:15:
8b:fc:b8:30:c8:2d:a6:a3:f3:ca:15:fa:96:e3:3d:f8:bf:88:
83:de:0d:08:98:05:cb:54:e8:fc:6a:54:b6:d1:c9:8b:ec:36:
33:e9:31:04:5c:b3:d4:b2:0f:cd:dc:c3:7d:eb:50:37:f0:f1:
68:35:55:8c:51:b9:53:11:9e:dc:fa:1a:df:77:02:1c:5b:6d:
9f:16:d0:3c:d4:01:46:14:88:78:0b:fa:b8:68:52:c0:34:05:
03:15:56:32:35:94:f5:d1:a9:cd:47:8f:a5:da:d8:d6:ad:1d:
3c:d0:f3:33:22:00:64:7b:40:9c:e6:ef:4e:cc:b4:29:c9:9f:
7f:2d:d0:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt6Q0UNZrE/pvKs6z1lcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTAxMjAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWE5ODYxOGY0NmNlMTRmMTFmZTIyNTlmNDhlY2RiNGIyNDNmMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ICkO93N464yPlm0FOtfJvYeXpwr
Kca8kT73yGyc0ZXnym3aIjLFsUDIIluY/u1I+I5wm5HHtyWa4f/TQhLZLJEs5Q10
hk756sFVAJ1RxD8/cgD1KCIy4ARi+tz/VcsiNc5BgfnCatwDtcKZgKI2ca7JI2TI
C29zpqi8aJoe8v2+t6FMc+mrzWgAV/gxUaOiRjLJiYCGkvkhzF3hqnTnQx4PHAi4
c/LlslyuJtvxfCSEdkIIIjOH6SIJESj0oo4txhQ2pFwevw5GvoivM8GVg2A8Q95p
We4c0bKO0vHnsK+hw2Bjt6oA1ikNk8XZ5OiTbRTf7BEvN9bweRFu+j8PvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGphhj0bOFPEf4iWfSOzbSyQ/FRMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvOGFtR0dQUnM0VThSX2lKWjlJN050TEpEOFZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURUJMA0G
CSqGSIb3DQEBCwUAA4IBAQA0w3rsTXBNRreH5P0n7OqFABoz03N+tWNc4UptWA/h
GL1ynLRr2Q9U9s/BX98q2ZJ8NsLFzTzaWnx8iaMXaaeLIh3nT/gDxVQ2MJwx0c33
LrI8zJrEEGJnju4wQYDnUSyVI63Uhk1L2vSM2qgce4vvc/i2MBJpOpg21oVjoRWL
/LgwyC2mo/PKFfqW4z34v4iD3g0ImAXLVOj8alS20cmL7DYz6TEEXLPUsg/N3MN9
61A38PFoNVWMUblTEZ7c+hrfdwIcW22fFtA81AFGFIh4C/q4aFLANAUDFVYyNZT1
0anNR4+l2tjWrR080PMzIgBke0Cc5u9OzLQpyZ9/LdDy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org