Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AdqBMSzoOPOR8SNn6u4-BrXfLnA.roa
File: AdqBMSzoOPOR8SNn6u4-BrXfLnA.roa (raw, json)
Hash identifier: FMCEQEai0AGqE3OweKqdAaRNS5wQ0lxcfKv4SW4A1FM=
Subject key identifier: 01:DA:81:31:2C:E8:38:F3:91:F1:23:67:EA:EE:3E:06:B5:DF:2E:70
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187C7AB3EF0EDA3354953A030EDB4BCA8F5
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AdqBMSzoOPOR8SNn6u4-BrXfLnA.roa
Signing time: Fri 28 Apr 2023 11:41:41 +0000
ROA not before: Fri 28 Apr 2023 11:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 06:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:ab:3e:f0:ed:a3:35:49:53:a0:30:ed:b4:bc:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 28 11:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01da81312ce838f391f12367eaee3e06b5df2e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:6c:e5:4b:d2:41:40:96:8b:0b:8e:33:9b:
05:51:5c:3d:c8:40:42:0e:e1:a1:38:4e:99:28:73:
39:55:d2:a6:43:62:25:81:18:00:eb:26:4e:9c:a8:
c4:09:a5:07:a8:a0:40:f6:96:93:cf:0d:14:b4:dd:
e0:f4:9b:bd:4e:af:99:c1:f0:c9:2f:fb:b8:38:4e:
3e:0e:c0:61:8e:88:b5:0b:b9:82:27:55:6e:f9:68:
fd:f4:9d:6c:8e:d0:c4:da:ad:6f:11:d8:6c:8c:e7:
84:18:fc:22:53:61:28:de:5b:19:34:18:c3:1b:bf:
b9:68:fd:df:09:c2:75:72:93:46:ed:fa:f6:74:c4:
2e:62:96:11:8b:df:96:57:f9:7c:50:58:85:a4:a6:
2f:3f:76:0c:9c:22:cc:0b:55:8d:6d:bb:e8:b0:bf:
44:dc:98:51:41:a7:14:61:58:8e:7a:a8:b8:cc:ef:
d7:b8:d9:26:f1:90:2f:db:e4:7f:c0:76:92:04:d1:
91:ef:68:64:a1:13:3f:aa:be:02:8d:15:61:24:33:
10:ec:15:b4:4a:7c:b6:04:f2:f0:b1:9b:27:96:c5:
28:cd:a1:ed:a3:15:25:02:85:b7:82:21:4d:7a:a0:
ae:15:63:23:53:6b:58:11:ea:53:70:07:d0:8b:ea:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:81:31:2C:E8:38:F3:91:F1:23:67:EA:EE:3E:06:B5:DF:2E:70
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AdqBMSzoOPOR8SNn6u4-BrXfLnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:c1:78:7e:12:71:2c:7d:8f:04:f9:58:62:14:30:97:da:27:
f8:2d:dd:78:1f:b7:7e:2b:d7:20:79:40:82:5b:e3:00:e9:6d:
1f:92:cb:be:17:ca:ce:dc:d2:7d:1a:7f:56:94:fb:0e:5d:9c:
6f:3a:22:53:61:74:0c:87:ce:5b:ea:8e:59:e3:ba:49:11:8c:
bb:4a:55:c0:18:ff:2c:dc:da:06:99:6d:c3:7b:9b:38:04:5e:
3a:dd:7c:50:a6:37:8e:bd:e8:d4:37:1c:a8:49:69:71:be:79:
30:12:c7:a9:57:66:cc:ff:0b:e1:4c:c6:df:84:4e:34:c7:39:
16:83:12:12:3d:a6:28:96:eb:91:73:14:35:a3:c8:5c:fe:16:
a3:85:96:c0:d5:7e:fe:6d:74:fa:3e:1a:df:9b:d0:6e:39:51:
5b:a8:0e:48:0b:f3:35:be:66:b4:49:0a:56:32:24:98:fc:4f:
36:01:13:0b:ca:85:dd:fb:a7:65:56:94:66:18:3d:80:d6:e1:
c1:dd:91:05:2e:28:78:e7:93:9d:37:cb:35:40:a5:13:80:fc:
ac:4f:fa:4c:b6:7a:3d:be:bd:79:d4:14:be:90:ad:4c:2b:6d:
b9:1e:7c:c5:e2:43:49:33:96:ce:2b:78:c1:13:c8:1c:82:ec:
fa:35:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org