Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VqIFeBK8hc6d8LVhx6lBXTM-ITM.roa
File: VqIFeBK8hc6d8LVhx6lBXTM-ITM.roa (raw, json)
Hash identifier: /bJU0w5uM4BxZRug0v7g4hPp/rx5EyYeAlCY87d+CLo=
Subject key identifier: 56:A2:05:78:12:BC:85:CE:9D:F0:B5:61:C7:A9:41:5D:33:3E:21:33
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D7883BEBA505B68DB331FAD224FE7687E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VqIFeBK8hc6d8LVhx6lBXTM-ITM.roa
Signing time: Mon 05 Feb 2024 09:05:16 +0000
ROA not before: Mon 05 Feb 2024 09:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 81.21.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 13:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:83:be:ba:50:5b:68:db:33:1f:ad:22:4f:e7:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 5 09:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56a2057812bc85ce9df0b561c7a9415d333e2133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:bd:2c:52:08:ea:2a:e7:5e:da:84:08:dd:
8c:24:0a:37:ef:e0:56:6c:e7:39:ad:c1:c3:fe:68:
a8:d5:c0:7d:64:1b:56:3d:6d:17:31:05:c6:9d:40:
22:10:c4:34:d5:a0:ed:04:7e:4b:98:9a:e1:00:f0:
b2:03:e5:ca:b2:e6:f8:c5:cd:0b:7d:c9:bb:a2:69:
30:f3:7d:be:b7:0c:46:2b:14:00:d9:62:07:11:1a:
19:27:d9:eb:6e:11:c3:3d:28:72:4b:c8:20:b0:16:
78:f6:85:e2:3c:77:28:d3:9c:a8:aa:6f:c5:d3:46:
a6:fb:2d:8e:94:a7:a6:ff:87:40:9e:4b:36:62:9e:
51:21:ad:f8:8f:2f:5e:6f:57:76:48:ee:7e:33:71:
58:d9:b8:55:2e:c6:3b:a7:16:a8:20:3f:2b:47:a2:
24:49:b1:24:b7:f0:9f:6a:83:21:e2:58:c0:16:6c:
66:fc:ee:a1:8b:ae:3e:bd:73:c2:f2:b3:65:c0:f4:
2b:1d:89:47:e5:4e:f6:38:c4:2b:c1:c5:c0:f7:0c:
d7:4e:12:fb:90:46:88:5f:6c:16:a6:e3:30:cd:1b:
80:3b:ff:54:1e:b9:3a:23:01:80:c5:1b:1b:5a:33:
9b:27:23:ab:49:d0:1e:17:1b:90:bd:4b:8e:34:a8:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:05:78:12:BC:85:CE:9D:F0:B5:61:C7:A9:41:5D:33:3E:21:33
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VqIFeBK8hc6d8LVhx6lBXTM-ITM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:92:55:69:36:7a:05:09:2f:90:60:60:b0:2b:fd:f5:3f:aa:
f1:7d:ba:d5:04:7e:6e:48:28:2f:23:63:50:81:14:53:aa:76:
ca:e7:84:4a:ed:53:32:99:de:02:fe:30:c8:3d:e3:5d:9c:17:
2a:f2:d8:fa:11:25:06:6a:f8:d2:e6:ca:c5:ae:b2:58:2b:8d:
07:33:f8:dd:dc:72:f8:80:fc:a0:0e:7f:77:98:3a:b1:28:fd:
2a:fa:ac:44:d9:ef:76:6c:b1:88:47:1f:cc:04:3f:a8:16:b2:
f3:f5:bc:26:aa:f7:31:cd:73:42:f8:d0:f0:5d:bd:d5:d9:e7:
5b:a4:18:f5:4a:df:c2:f4:74:79:8d:10:00:ed:5e:4b:07:56:
67:f0:0a:dc:c1:f5:02:1f:ef:94:ea:7d:d3:97:ce:8b:40:0c:
e8:d5:d1:b3:ed:89:d4:29:67:f4:f3:7f:e1:00:ee:41:8b:58:
a5:e8:28:47:d0:3f:50:2e:11:4f:f3:53:bd:5f:1b:c1:62:b6:
09:9a:e7:ae:89:6c:7a:6b:49:4b:4e:fc:37:22:32:9d:ea:02:
f8:e9:0a:eb:6b:d3:2a:2d:5e:38:aa:3c:79:0d:9a:77:1e:ed:
d3:31:35:46:da:91:dc:c6:d6:47:97:68:4a:6c:45:c4:9d:56:
02:0b:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org