Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FDAYmNxczp-HX2pZ4Wa063krA4Q.roa
File: FDAYmNxczp-HX2pZ4Wa063krA4Q.roa (raw, json)
Hash identifier: 0Zx+e1Wvhx3ZH6jYwnh09yG+pdo8CITrO6PFoGdFv2A=
Subject key identifier: 14:30:18:98:DC:5C:CE:9F:87:5F:6A:59:E1:66:B4:EB:79:2B:03:84
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CCF5D9E9D6E5D236466EBB19E774C7DAF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FDAYmNxczp-HX2pZ4Wa063krA4Q.roa
Signing time: Wed 03 Jan 2024 12:47:48 +0000
ROA not before: Wed 03 Jan 2024 12:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 81.21.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 08:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:5d:9e:9d:6e:5d:23:64:66:eb:b1:9e:77:4c:7d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 3 12:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14301898dc5cce9f875f6a59e166b4eb792b0384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:35:c5:98:60:0d:3d:e7:2a:d1:de:f5:5d:a4:
ed:38:d9:05:71:d7:2b:df:20:eb:dd:a3:3a:e7:bf:
cb:87:05:a2:22:f9:c5:dd:5f:80:b6:06:3f:a1:41:
4c:6e:52:50:23:43:bf:44:ae:32:89:e3:60:8f:08:
b0:6c:c6:8e:42:ae:ac:ef:f2:da:a9:ab:4e:8d:40:
e5:d0:68:f0:cf:fa:3b:77:77:01:f7:7c:d6:d7:7f:
c1:99:d9:a0:d7:31:78:df:34:8b:77:9f:fd:ed:3f:
a4:82:1c:f5:0d:27:12:16:13:cd:f6:fd:49:98:09:
da:99:0c:c8:65:12:45:8b:ba:58:84:2f:81:7c:57:
2e:2c:2a:a7:3d:36:90:a5:37:c1:27:f6:61:c5:a5:
8e:98:c8:b9:99:aa:32:8b:99:b0:8a:2b:d8:19:ca:
47:29:11:d1:79:94:15:6f:8d:9b:09:c5:14:b0:79:
34:0a:c0:d6:62:2f:bf:6b:5e:94:fc:78:e4:17:16:
bc:f0:e3:06:bd:ad:f8:7b:67:7a:60:ab:97:8e:d5:
09:1a:4f:4d:9b:0f:83:e4:69:93:72:22:b7:9e:ac:
27:ad:74:23:61:91:37:91:3c:6c:87:60:80:39:f7:
9e:49:64:8d:e2:ea:41:dd:30:9f:c3:70:47:bb:a2:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:18:98:DC:5C:CE:9F:87:5F:6A:59:E1:66:B4:EB:79:2B:03:84
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FDAYmNxczp-HX2pZ4Wa063krA4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:56:3e:70:45:75:c8:92:39:1d:9d:59:49:b9:b5:ae:0e:20:
d4:a6:63:f1:27:af:46:db:be:b2:9a:18:ce:05:5d:87:77:47:
14:cf:e9:6b:c6:78:53:86:b3:61:e2:1e:1f:2c:d1:59:be:d6:
17:7d:70:87:58:fb:cc:c0:0f:a0:a9:fd:86:8e:52:7b:e5:a3:
0f:d1:b5:e7:c4:65:2e:11:f4:13:9e:82:aa:ec:51:5c:09:37:
80:b5:89:5e:a6:bb:c9:ab:9c:2e:de:5f:3b:33:9a:87:bc:3b:
0b:04:fd:0f:47:f4:7b:08:11:f5:05:f8:3f:33:2d:55:73:ea:
4f:2b:88:4d:04:b7:c5:16:a4:09:29:37:30:9d:2e:1d:ac:6f:
2e:77:61:4f:76:28:3e:df:56:36:4e:af:b7:a0:95:ac:7c:d7:
c7:01:ad:bd:75:d4:bc:c2:22:21:64:c8:75:87:36:d9:38:df:
c3:d9:54:f6:20:4e:9d:da:6f:be:98:21:30:4d:63:24:ef:8d:
11:a1:7e:32:c9:fe:ce:7a:31:4d:b6:62:f2:f1:d7:fa:51:06:
bd:9e:b5:b1:22:41:05:ad:31:d5:4f:e3:c6:60:02:3a:fb:75:
73:37:0a:26:be:8d:0e:f2:1b:fa:f4:26:c6:e4:f3:bb:ac:a3:
2a:77:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org