Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V5T8NF9Yrao1AsOSO8zA8ko5k8Q.roa
File: V5T8NF9Yrao1AsOSO8zA8ko5k8Q.roa (raw, json)
Hash identifier: eBmCLbYHkA3VTAd5YnrxTTZ1urwD/0NbSkDfWyGQqn0=
Subject key identifier: 57:94:FC:34:5F:58:AD:AA:35:02:C3:92:3B:CC:C0:F2:4A:39:93:C4
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018DB66C8658600EEA41A186252FC17F1161
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V5T8NF9Yrao1AsOSO8zA8ko5k8Q.roa
Signing time: Sat 17 Feb 2024 09:36:21 +0000
ROA not before: Sat 17 Feb 2024 09:36:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 81.21.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 14:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b6:6c:86:58:60:0e:ea:41:a1:86:25:2f:c1:7f:11:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 17 09:36:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5794fc345f58adaa3502c3923bccc0f24a3993c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:9e:d5:f5:54:e2:9e:93:44:cd:00:f2:b9:
90:33:f3:58:db:90:9d:25:cb:57:a9:ed:cd:b5:96:
ed:b3:a6:91:ec:96:bd:7d:6a:8d:44:1b:ee:12:6f:
38:03:a2:18:ee:d0:e3:fa:6d:43:3a:33:f8:54:b2:
9b:29:b5:9f:b8:86:4e:cf:79:03:6c:ea:dc:f4:88:
ac:83:3c:ac:b2:8a:a5:5b:48:95:8d:fa:0f:06:e8:
eb:19:f1:af:59:55:f1:77:25:59:90:16:2c:55:8f:
66:1f:9c:d5:c6:b4:d0:0f:f5:1c:a5:f8:2e:f4:57:
3a:93:65:bf:fb:8a:3c:ec:37:0e:2f:65:a5:33:6a:
9a:37:fc:29:73:91:ea:36:df:e9:42:9c:3d:20:8c:
41:e7:12:6f:a8:4e:7e:19:6b:e5:e3:63:cf:9b:00:
78:ec:d4:07:c5:50:4d:4e:4a:55:6c:ae:97:4f:04:
6b:65:42:c2:89:78:75:3b:7c:c3:e6:d8:e1:0f:19:
12:34:4b:93:4b:25:a0:9b:ae:01:61:ca:61:df:88:
2d:41:36:4b:e1:19:04:c9:06:11:0c:83:f2:f3:aa:
83:6e:f2:56:f9:94:7b:1e:94:ca:0a:2b:5a:1d:be:
89:92:2e:d9:4f:62:6d:88:3a:95:79:f2:9f:aa:57:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:FC:34:5F:58:AD:AA:35:02:C3:92:3B:CC:C0:F2:4A:39:93:C4
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V5T8NF9Yrao1AsOSO8zA8ko5k8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.12.0/24
Signature Algorithm: sha256WithRSAEncryption
71:06:71:8b:1c:70:5a:7d:7f:de:6c:9d:de:c2:25:29:4f:b8:
77:46:56:96:e9:52:83:c9:0c:6b:81:37:11:ad:62:9a:c4:e9:
19:8a:4d:bd:be:d4:7d:87:e9:cd:e5:34:9d:88:3f:3a:1e:31:
f0:4f:25:49:93:9c:3f:49:91:16:7c:d6:6d:2f:91:97:c9:3f:
fb:b1:f4:88:e8:f5:fb:5b:36:41:9b:5d:44:81:3b:60:a0:72:
25:08:1b:a5:f8:67:84:8c:05:9c:d9:ff:0a:c2:6f:a1:5c:ec:
1d:47:bc:f0:e3:0e:71:a9:f4:94:0b:db:b9:d5:1e:8a:00:72:
f0:6b:dc:11:d0:a2:06:00:e4:af:69:7e:9f:cc:92:7e:ad:e4:
36:62:05:f1:4b:40:9c:a5:ba:ef:fe:b8:d1:de:99:f9:bd:be:
b6:91:b8:02:54:b3:a1:86:fe:1d:da:08:19:bd:58:c7:cd:f6:
1f:04:e9:9d:bf:d8:75:6b:69:0c:1b:80:c9:f4:94:da:74:19:
d7:22:33:a8:e4:5d:dc:d8:1e:d0:8c:c6:2e:61:8d:bc:1f:6a:
ac:5f:82:df:1d:9d:b2:b9:e4:f9:04:91:f4:3e:53:db:07:7d:
77:87:de:ba:61:cf:26:e4:99:b2:57:3b:59:76:16:42:7f:04:
2a:fa:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org