Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EPr4koTKM9u8PHRynJaqmVZ6kMI.roa
File: EPr4koTKM9u8PHRynJaqmVZ6kMI.roa (raw, json)
Hash identifier: xHSVz8tYHSlJ60JyHf9X3EWo0ZRYaCa+lGiupphXi3U=
Subject key identifier: 10:FA:F8:92:84:CA:33:DB:BC:3C:74:72:9C:96:AA:99:56:7A:90:C2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B657F7E890F005174D8EBCDC179601708
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EPr4koTKM9u8PHRynJaqmVZ6kMI.roa
Signing time: Wed 25 Oct 2023 06:22:16 +0000
ROA not before: Wed 25 Oct 2023 06:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 81.21.6.0/24 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:7f:7e:89:0f:00:51:74:d8:eb:cd:c1:79:60:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 25 06:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10faf89284ca33dbbc3c74729c96aa99567a90c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:cb:86:af:9f:a7:ee:c1:71:38:51:41:9b:
ad:21:e3:dc:28:d4:1e:a0:b0:a6:c6:31:44:0f:c6:
84:4f:d4:37:99:f8:c8:b5:07:d5:f3:42:b6:c9:72:
22:68:51:bc:59:73:74:c1:04:ec:7c:c5:c8:f8:94:
28:83:5a:4f:76:df:c0:b2:fa:87:8e:ba:75:c4:cd:
f4:4e:ea:13:3e:35:84:cb:69:cb:ff:ad:ad:e9:d4:
2b:7b:97:3b:66:56:38:19:e1:e1:1b:a3:2d:e2:c0:
2b:a7:0e:0c:b6:ab:8c:a9:9b:8c:5c:46:27:af:a6:
65:ac:da:86:88:1f:f0:96:52:98:c8:96:b8:fb:04:
88:44:04:86:90:c0:58:3f:94:ed:99:da:1b:f3:03:
38:15:9d:ec:d8:66:01:e4:cb:5c:85:89:a7:4f:05:
22:95:98:4d:03:ea:d5:5f:76:61:cf:ce:4b:0c:fb:
80:35:04:b0:ab:f5:97:83:39:62:e9:de:3b:a6:a9:
24:55:2b:36:08:79:c9:bc:73:72:1d:5c:66:44:fa:
2b:87:fd:67:6d:e2:c5:5e:48:56:aa:7e:67:7a:47:
df:9e:51:d5:92:38:aa:2e:c8:b1:3b:13:1b:3d:cc:
c6:e7:26:f2:df:cf:30:a7:9d:26:ff:0c:35:eb:2b:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FA:F8:92:84:CA:33:DB:BC:3C:74:72:9C:96:AA:99:56:7A:90:C2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EPr4koTKM9u8PHRynJaqmVZ6kMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.5.0-81.21.6.255
81.21.15.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:fc:a9:ef:ec:b9:76:f8:3f:49:4c:c4:e8:17:28:54:ab:
fa:ca:86:df:8e:28:c5:66:b9:1c:a8:c6:fb:6b:45:c5:a4:68:
f4:f1:54:c2:55:98:c1:9f:0e:f5:bd:c7:e6:a3:12:32:e0:77:
41:53:9a:8f:c7:5b:1b:c3:bd:89:01:bf:50:56:4e:1b:89:e1:
ec:7f:e0:14:9a:f8:ab:63:b7:e7:e1:52:d2:40:5c:f3:01:e7:
93:79:6e:25:b2:9b:4a:e4:5c:aa:36:50:e2:b5:8d:95:a9:87:
73:e3:e3:b4:2d:65:a4:e7:d9:f4:24:3f:82:67:56:e6:c6:6f:
a4:c5:86:25:ea:a2:96:a4:f6:aa:68:a6:76:e2:d0:ab:a8:1a:
27:9f:7f:c1:cd:ed:50:8c:68:f8:50:de:7a:2f:a3:e6:8f:90:
e9:2e:f4:db:a1:d0:6e:b4:9b:c3:79:29:63:9f:c1:3f:b0:7e:
aa:a6:98:f6:0c:93:bc:7c:1e:d4:b5:a8:b2:32:5c:36:c6:9b:
11:d1:55:d4:aa:15:13:d2:fa:84:e9:5f:46:18:27:e2:a5:10:
5e:82:18:bf:73:70:0a:af:26:a7:31:fa:b9:cb:3b:91:28:c6:
61:65:2b:97:3a:55:c0:c9:84:58:c4:df:01:64:7c:15:c4:cc:
a7:11:09:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org