Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VaHRz52zo_RtQBADB7IkvopRAog.roa
File: VaHRz52zo_RtQBADB7IkvopRAog.roa (raw, json)
Hash identifier: uI6KmpCO81YdcetOwCd+loJAPVPAT9PvFskN4Qy92k0=
Subject key identifier: 55:A1:D1:CF:9D:B3:A3:F4:6D:40:10:03:07:B2:24:BE:8A:51:02:88
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189060635B216B2F6C9C91B11B283AE8C07
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VaHRz52zo_RtQBADB7IkvopRAog.roa
Signing time: Thu 29 Jun 2023 07:20:17 +0000
ROA not before: Thu 29 Jun 2023 07:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 81.21.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 07:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:06:35:b2:16:b2:f6:c9:c9:1b:11:b2:83:ae:8c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 29 07:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55a1d1cf9db3a3f46d40100307b224be8a510288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:27:6c:67:7b:38:f0:ff:c7:23:5f:f9:50:
d7:2d:48:db:ee:bc:0a:f7:1d:0f:96:0b:7b:e2:9e:
eb:eb:f8:d5:f4:8e:85:f1:3c:fc:ab:14:4b:61:4a:
bf:e8:05:75:0c:ee:db:df:90:06:c6:e9:6a:8c:b0:
36:14:f5:56:e5:b9:f4:9e:5c:44:fd:07:99:48:58:
20:6d:95:5d:75:85:9d:77:81:4d:27:d7:64:65:0a:
8b:e4:8b:46:51:20:b0:78:cb:69:ab:a8:dc:b8:49:
77:1b:b6:5d:33:de:c6:1b:be:2c:9d:d5:86:48:2d:
29:5f:91:fe:d5:36:f7:e2:5c:4b:12:0c:11:52:7f:
77:09:84:9c:93:cb:9f:6a:d0:c8:2d:3e:7f:ab:c9:
04:05:ad:e7:96:f2:0b:28:78:c8:d9:d2:c9:7d:ab:
8f:2c:a4:18:cc:4a:09:1c:64:2a:06:32:79:57:44:
01:e7:37:eb:f8:81:6c:30:49:d9:4a:69:7a:d9:52:
0f:2c:ff:60:de:df:72:7c:05:22:3b:28:00:e3:7f:
98:5e:0a:e5:c4:6d:dd:50:91:0f:91:8a:dd:49:21:
d3:3e:1c:31:a6:4a:30:3c:3c:47:f3:9a:03:4e:6f:
63:4e:84:e1:bc:19:84:78:5b:31:ea:19:00:64:ef:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A1:D1:CF:9D:B3:A3:F4:6D:40:10:03:07:B2:24:BE:8A:51:02:88
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VaHRz52zo_RtQBADB7IkvopRAog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:69:0a:be:0c:41:e5:ac:92:64:c1:44:28:37:96:09:07:88:
3e:d2:eb:5a:6e:e5:09:65:a2:13:56:19:13:c9:23:dc:da:2a:
dc:59:5a:51:1b:a6:f5:02:65:58:79:5a:d9:be:f9:ce:b5:b7:
32:60:b8:7f:e7:99:98:14:dd:9e:88:b6:70:42:47:2c:04:6a:
09:fd:cd:5d:d5:a4:fc:31:d7:39:c9:9c:9d:a4:72:e7:af:10:
6a:f6:d3:57:60:ac:6a:56:bd:a1:46:b4:f2:2a:51:a4:44:59:
ce:d8:df:cc:cb:a3:85:46:00:80:cc:65:87:53:09:01:ce:33:
8e:87:87:58:09:a3:9e:f0:f5:2e:90:0f:62:22:c8:86:e2:56:
17:de:6f:50:48:22:28:27:af:72:49:b3:71:08:dc:ec:a9:ac:
48:e1:3b:39:29:1d:71:2f:40:d8:23:ce:dc:68:cc:a4:9b:ed:
30:b2:6e:2f:37:39:04:fa:05:a2:94:a9:98:0f:1e:b4:6d:d8:
77:1f:ee:b4:b2:cf:44:9b:31:cc:45:36:ce:b8:ab:61:b9:ad:
53:ac:bb:6f:84:87:34:6f:fb:08:2d:e4:02:b1:50:57:2f:04:
73:ab:0c:3a:26:99:44:b9:ab:33:54:fd:d3:a2:af:47:d2:64:
be:a2:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org