Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7H5_BKEk20iLyPtaKOSCZw11lQ.roa
File: F7H5_BKEk20iLyPtaKOSCZw11lQ.roa (raw, json)
Hash identifier: aFE/B3itmIWs9mjkGtYNGFHg0tzifh3vDkKFtHMoqjM=
Subject key identifier: 17:B1:F9:FC:12:84:93:6D:22:2F:23:ED:68:A3:92:09:9C:35:D6:54
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7B017AD18DAFC1635580967FCD29B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7H5_BKEk20iLyPtaKOSCZw11lQ.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400859
IP address blocks: 81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 06:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b0:17:ad:18:da:fc:16:35:58:09:67:fc:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17b1f9fc1284936d222f23ed68a392099c35d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:dc:22:b3:2d:81:6e:4d:10:d4:cd:29:fa:
c6:a6:78:2a:26:8a:de:72:95:3d:4d:1a:67:59:db:
e6:c2:b5:a0:bf:65:51:7f:73:28:13:80:b5:01:26:
fb:83:39:83:16:b3:48:19:20:9a:e6:dd:f1:4d:d4:
1a:9b:6d:84:ee:1d:29:77:a0:9e:25:6f:c6:78:6e:
4a:25:ed:52:01:03:2a:1c:58:d1:04:96:6b:1b:5d:
ed:ef:33:ea:7e:40:44:5b:b3:16:8a:f4:db:f5:cb:
21:4f:bb:57:23:5e:8f:0d:41:f8:b6:23:2f:24:26:
3a:2d:e8:dd:75:35:e9:5d:4f:30:5e:4d:88:77:44:
06:55:3c:a4:11:20:84:e4:69:c9:2a:f3:79:af:8c:
72:36:36:9b:99:5d:ef:9e:cc:bb:e7:6f:0b:dd:6b:
b2:d4:17:08:03:b2:6a:7d:ec:bc:f2:f6:21:ee:08:
cc:fe:d3:32:f5:f8:cb:0f:6c:6a:34:c0:8e:78:21:
1f:67:4f:cc:2a:28:60:bb:ae:3c:b4:4c:9d:a7:4a:
1a:87:91:0d:46:f5:cb:bf:0f:f0:ce:fc:67:93:e2:
20:2e:da:91:86:55:69:73:2a:50:b0:6b:97:12:4d:
e2:50:27:d9:86:d2:b3:20:ba:14:d8:d5:64:96:d6:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:F9:FC:12:84:93:6D:22:2F:23:ED:68:A3:92:09:9C:35:D6:54
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7H5_BKEk20iLyPtaKOSCZw11lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.3.0-81.21.4.255
Signature Algorithm: sha256WithRSAEncryption
64:9c:07:fd:7d:6d:5a:c3:f4:59:0b:47:cb:2b:82:60:91:38:
33:36:05:86:bf:68:78:8e:74:ba:08:8c:cc:67:9c:09:d9:25:
05:bd:77:71:81:91:6c:ae:05:7d:78:aa:92:58:91:bd:db:a3:
0e:6e:bc:d9:d8:b8:85:e1:cb:ce:c5:11:87:1e:65:fa:00:34:
3e:21:1a:bf:08:a7:61:4c:7b:27:d5:6a:f2:97:17:62:4e:b5:
e2:3c:12:3f:91:08:47:fa:d8:0f:1b:08:b7:16:22:7a:65:1f:
02:12:b2:3a:59:a0:eb:6f:71:1e:93:3e:e9:07:ff:87:23:87:
e6:3d:07:bc:14:5a:45:9d:87:60:c9:32:a0:62:af:74:3c:50:
12:3a:99:5a:03:b1:e5:1f:79:5c:a3:a7:d0:a7:59:4d:80:8f:
63:9c:30:ad:aa:e6:6b:ff:de:a8:68:b7:ad:29:79:56:2f:e3:
0c:f2:66:ac:3b:39:aa:d7:ce:72:30:e6:86:ff:94:56:fc:6d:
6b:6e:07:91:48:06:0d:ad:9d:8e:ef:02:53:2c:55:b0:01:71:
3d:bb:35:43:c2:c9:16:c9:05:be:51:43:bb:bb:68:b2:a3:75:
29:91:da:4a:cf:e2:92:6e:fd:d0:e5:20:d6:9a:03:b1:ae:5f:
7e:6e:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org