Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Q3f2o_TQ2jmWt9_om0P8PBRyxJ4.roa
File: Q3f2o_TQ2jmWt9_om0P8PBRyxJ4.roa (raw, json)
Hash identifier: ztZtfrq8jIpBLn5OVsbx8a8eZRhKehKNgz/AiW/IDWY=
Subject key identifier: 43:77:F6:A3:F4:D0:DA:39:96:B7:DF:E8:9B:43:FC:3C:14:72:C4:9E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187C7C04ECAB6C951F4EA28BEAB86B26A8B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Q3f2o_TQ2jmWt9_om0P8PBRyxJ4.roa
Signing time: Fri 28 Apr 2023 12:04:41 +0000
ROA not before: Fri 28 Apr 2023 12:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 81.21.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 May 2023 07:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:c0:4e:ca:b6:c9:51:f4:ea:28:be:ab:86:b2:6a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 28 12:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4377f6a3f4d0da3996b7dfe89b43fc3c1472c49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:d2:b0:65:96:6a:e0:07:87:0e:ce:bd:1a:
d1:98:8d:d2:34:af:7b:a8:ad:ca:12:d9:0e:b2:06:
d3:94:2f:13:93:a3:2c:55:e8:e5:49:49:ec:16:1c:
4c:e7:04:b3:4b:c8:80:74:df:87:9b:fe:f4:19:25:
62:5c:eb:25:6a:73:c5:41:53:c4:cc:bc:54:5f:3a:
33:db:e3:de:e7:f9:79:d9:ff:43:3c:93:4d:f1:45:
51:be:8c:1e:3d:a0:ee:93:bb:cf:55:b4:9c:f7:d7:
60:7e:d7:f1:32:c1:9b:f0:2d:b3:e1:31:b4:ca:26:
93:f5:f6:a4:6b:45:61:bf:11:bf:60:25:79:7a:19:
35:15:f6:98:23:63:17:84:78:7b:eb:f1:03:98:ed:
e5:86:8a:2e:86:6a:29:da:72:d6:19:28:f7:ad:e6:
e3:cb:38:e6:c1:51:e1:38:eb:29:5e:6c:05:36:ea:
8d:af:51:ce:65:c3:29:ab:a6:ad:69:cd:d1:31:32:
46:fc:09:ed:5a:94:3b:9d:d3:62:bf:b6:09:5e:cc:
48:7b:d7:92:9d:13:a9:a1:4b:f6:8d:5e:83:0f:ab:
4b:6f:de:76:dd:4d:3b:3e:2e:b1:8e:c6:ac:6c:98:
d1:bd:89:af:40:d7:f8:08:1f:7b:82:92:df:aa:0d:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:F6:A3:F4:D0:DA:39:96:B7:DF:E8:9B:43:FC:3C:14:72:C4:9E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Q3f2o_TQ2jmWt9_om0P8PBRyxJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:97:5b:9e:f9:7c:b4:19:53:21:b0:38:7e:7d:1b:7c:90:47:
5f:a8:d7:a9:06:c3:17:22:b7:90:52:b4:c9:d2:90:34:06:1c:
56:59:87:c3:12:00:d3:f7:91:77:56:83:f7:9f:8c:d6:fc:9c:
d2:30:51:ab:f8:dc:dc:4f:8c:9c:ec:31:7a:43:17:92:f6:f4:
7a:a7:5d:23:e6:d9:61:a4:fd:75:52:1d:63:91:f5:b2:97:2f:
98:70:0b:df:93:85:8a:1c:44:f7:dc:75:0b:1f:fd:3e:d0:1d:
8d:2c:fd:cc:a7:4e:a6:d0:b1:77:6f:4e:ce:5f:87:25:55:83:
cc:fd:a7:90:aa:a8:a6:4f:01:2c:7a:aa:53:d0:5f:cb:16:cf:
7e:db:5e:0e:26:b2:d9:95:a2:09:69:c9:30:4b:00:80:14:67:
db:4e:0b:81:f2:62:1c:ef:67:c8:7c:1f:76:37:a4:75:88:54:
e1:ca:e7:4b:05:f3:f2:a3:02:9d:ea:69:ec:47:7a:bc:2f:eb:
5b:24:18:5d:ce:9a:a1:e6:92:a9:e2:7c:4d:c6:bc:9f:77:d7:
8c:17:88:12:3a:fe:5e:52:c5:bf:8f:fe:ea:a0:4b:83:99:0f:
08:48:eb:a3:20:8b:60:cd:cf:f1:f9:78:db:90:dc:6b:a8:65:
4f:ab:34:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfHwE7KtslR9OoovquGsmqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNDI4MTIwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mzc3ZjZhM2Y0ZDBkYTM5OTZiN2RmZTg5YjQzZmMzYzE0NzJjNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+HSsGWWauAHhw7OvRrRmI3SNK97
qK3KEtkOsgbTlC8Tk6MsVejlSUnsFhxM5wSzS8iAdN+Hm/70GSViXOslanPFQVPE
zLxUXzoz2+Pe5/l52f9DPJNN8UVRvowePaDuk7vPVbSc99dgftfxMsGb8C2z4TG0
yiaT9faka0VhvxG/YCV5ehk1FfaYI2MXhHh76/EDmO3lhoouhmop2nLWGSj3rebj
yzjmwVHhOOspXmwFNuqNr1HOZcMpq6atac3RMTJG/AntWpQ7ndNiv7YJXsxIe9eS
nROpoUv2jV6DD6tLb9523U07Pi6xjsasbJjRvYmvQNf4CB97gpLfqg0q/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEN39qP00No5lrff6JtD/DwUcsSeMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvUTNmMm9fVFEyam1XdDlfb20wUDhQQlJ5eEo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCURUMMA0G
CSqGSIb3DQEBCwUAA4IBAQAsl1ue+Xy0GVMhsDh+fRt8kEdfqNepBsMXIreQUrTJ
0pA0BhxWWYfDEgDT95F3VoP3n4zW/JzSMFGr+NzcT4yc7DF6QxeS9vR6p10j5tlh
pP11Uh1jkfWyly+YcAvfk4WKHET33HULH/0+0B2NLP3Mp06m0LF3b07OX4clVYPM
/aeQqqimTwEseqpT0F/LFs9+214OJrLZlaIJackwSwCAFGfbTguB8mIc72fIfB92
N6R1iFThyudLBfPyowKd6mnsR3q8L+tbJBhdzpqh5pKp4nxNxryfd9eMF4gSOv5e
UsW/j/7qoEuDmQ8ISOujIItgzc/x+XjbkNxrqGVPqzQ9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org