Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ClwwGZDY5_7QnplkbRjrXqlKdS8.roa
File: ClwwGZDY5_7QnplkbRjrXqlKdS8.roa (raw, json)
Hash identifier: uxLp79w/VBpgfIGZgqREh8+Gxk3YsMag9qw7NnLLvLI=
Subject key identifier: 0A:5C:30:19:90:D8:E7:FE:D0:9E:99:64:6D:18:EB:5E:A9:4A:75:2F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BE78AE5E71D674ADC5BD7632DA56D54FE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ClwwGZDY5_7QnplkbRjrXqlKdS8.roa
Signing time: Sun 19 Nov 2023 12:25:21 +0000
ROA not before: Sun 19 Nov 2023 12:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211560
IP address blocks: 81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:8a:e5:e7:1d:67:4a:dc:5b:d7:63:2d:a5:6d:54:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 19 12:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a5c301990d8e7fed09e99646d18eb5ea94a752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:e1:a6:0c:85:4f:05:53:ec:1f:b2:c2:81:
60:a9:a2:e4:b4:92:69:fe:7c:8a:b5:76:7a:b6:0d:
55:68:d5:8a:ab:a6:60:40:5b:4c:84:ac:13:48:86:
93:b3:1c:ed:03:11:55:21:b5:42:99:ef:52:ea:ae:
81:d9:7c:d5:cb:bc:a3:04:7b:34:18:83:0d:7b:15:
3c:0e:c7:c0:9d:34:21:75:0c:d8:6b:0c:78:32:0c:
83:83:6f:80:4a:87:74:37:14:e3:26:ea:c4:30:ea:
fa:18:92:02:bd:4e:59:f2:45:28:4f:5a:f6:0f:f6:
f2:68:41:eb:3a:be:b7:81:31:e0:d5:f6:6d:8c:e7:
d2:45:6a:1b:8d:31:04:8c:49:38:b0:15:57:0b:7c:
80:73:f5:28:08:8e:b6:5d:0e:81:c9:84:dc:f0:e1:
0e:2b:6e:a8:1f:23:1a:f8:02:14:01:ad:71:92:7a:
d8:9d:2d:2b:50:52:94:22:63:78:a2:b1:28:8f:4b:
bf:a3:dd:88:b7:2c:8e:79:2b:41:33:a4:a8:f9:b8:
7e:52:3a:50:7c:44:05:94:fc:6d:ae:83:f0:07:ad:
d3:10:e2:41:c4:11:5c:e7:54:b6:5c:44:ec:8a:49:
7f:50:6c:91:71:20:81:58:6b:75:56:bf:ea:03:8a:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:30:19:90:D8:E7:FE:D0:9E:99:64:6D:18:EB:5E:A9:4A:75:2F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ClwwGZDY5_7QnplkbRjrXqlKdS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b9:67:12:db:49:12:b6:6d:11:05:e9:b8:1a:7f:d3:5e:57:
ee:88:8e:e2:5b:8e:ee:91:d7:91:c0:35:f8:98:a0:02:e1:91:
20:e9:f6:c3:41:b6:f3:47:64:e2:a0:28:5f:71:b7:0c:48:8d:
b7:81:8f:70:77:8c:45:f2:c7:db:35:ad:03:f0:bb:90:ed:0c:
6c:e8:20:1a:04:47:e5:2d:6e:cf:eb:6a:ad:6c:07:3f:df:75:
09:2c:39:25:03:8d:93:b1:20:0b:45:a7:ba:cb:e4:52:c5:6d:
ad:ea:59:e5:4b:57:bb:c4:cb:71:7f:8c:58:2e:bb:1d:f9:d3:
93:a5:c3:7c:ec:2c:00:10:09:da:bc:0a:a2:08:ac:5e:8d:38:
d2:ca:d7:d9:aa:40:1f:3f:42:90:b5:e2:f5:22:4a:34:7b:ee:
4e:4c:6d:5a:6a:26:f6:62:a8:2f:ac:cb:6e:37:a4:a7:a6:8e:
b9:91:14:03:5d:7b:f8:b4:62:45:99:14:60:ac:39:3b:a6:27:
a1:02:7c:cb:f8:62:4e:ca:58:00:dd:2b:67:b8:60:65:74:63:
23:60:5e:18:11:ab:e1:27:ef:d7:94:a5:30:79:30:f3:e4:c3:
d3:35:18:f7:72:65:3c:c4:96:06:69:3b:73:9c:f1:14:2d:ee:
f3:f3:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org