Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XggYc91TLVEhyePW6s8rwk8PJSU.roa
File: XggYc91TLVEhyePW6s8rwk8PJSU.roa (raw, json)
Hash identifier: 2qEf3GvldMWA/xbXST8fFTuNP+AB/XGcV3KmSnyyD04=
Subject key identifier: 5E:08:18:73:DD:53:2D:51:21:C9:E3:D6:EA:CF:2B:C2:4F:0F:25:25
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018AB7BA5783E61FB251BE270455236FF05D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XggYc91TLVEhyePW6s8rwk8PJSU.roa
Signing time: Thu 21 Sep 2023 12:32:37 +0000
ROA not before: Thu 21 Sep 2023 12:32:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 81.21.4.0/24 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 06:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:ba:57:83:e6:1f:b2:51:be:27:04:55:23:6f:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 21 12:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e081873dd532d5121c9e3d6eacf2bc24f0f2525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:de:89:a0:f8:47:e1:f7:d8:6f:3c:2f:0e:1c:
e5:d3:77:e9:78:f8:f2:7b:85:cc:6a:b8:35:8b:8c:
49:67:d2:be:b9:7b:49:fd:29:dd:30:a9:eb:f7:d2:
96:ab:5c:28:52:3c:c9:d3:86:3c:fc:b4:c9:3f:f6:
2c:fa:eb:2a:b8:67:9a:b2:33:4f:f2:d6:61:db:4c:
50:1e:f6:0a:09:64:43:1a:d4:fb:12:f5:11:e6:20:
ae:80:fa:e6:73:dc:20:07:45:0d:bc:9c:e2:90:bc:
e4:15:c1:f9:d3:67:fa:ae:57:79:e3:e9:3d:7d:bf:
c8:7f:93:00:57:9d:fd:6f:f7:e0:3b:4e:1b:15:30:
0a:1a:42:3e:f7:14:97:51:5a:1a:7c:4d:59:56:23:
73:19:c9:ac:37:e0:ee:80:94:19:00:e8:d8:62:85:
37:1c:68:ae:9d:f4:32:69:45:e1:5f:7b:1b:80:43:
8e:8b:e7:99:46:9e:a9:4d:21:97:59:b9:4e:20:96:
1e:cc:04:b9:74:6a:9c:ed:13:b7:e9:ca:6f:b2:14:
4c:64:d4:60:0b:5a:0a:55:1b:7a:d2:e9:5f:7c:36:
75:e3:76:c0:f5:7e:af:4f:80:c0:04:38:5b:bf:ca:
d8:0f:37:c3:ae:27:91:e3:49:db:fa:f8:d0:1e:0d:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:08:18:73:DD:53:2D:51:21:C9:E3:D6:EA:CF:2B:C2:4F:0F:25:25
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XggYc91TLVEhyePW6s8rwk8PJSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.4.0-81.21.6.255
Signature Algorithm: sha256WithRSAEncryption
b5:2a:36:14:3b:3b:10:b2:43:d2:cb:9c:5d:f5:23:5c:cc:c6:
62:69:f0:f2:14:79:a8:ed:dc:ac:41:9d:2a:52:70:ba:77:98:
a2:18:8d:5a:d3:3d:0d:10:31:a8:6f:9b:21:64:f0:3d:34:aa:
53:8c:e3:24:d0:1a:49:66:48:46:03:dc:17:1c:ff:b9:96:94:
6d:cf:13:2d:c0:61:a0:08:d3:b6:64:40:ff:47:80:f4:f1:38:
7a:db:2e:59:9e:40:98:65:7f:21:51:5e:8d:88:d4:55:95:c4:
bc:93:8c:e2:39:30:f8:b5:3d:f0:94:95:66:d2:60:4f:91:e0:
ba:85:85:bd:f4:4a:aa:f9:89:3e:da:77:a6:d5:05:eb:80:a0:
88:03:b6:74:14:32:4a:5f:29:57:4a:e1:4f:1e:f5:a5:87:14:
91:d8:b7:d9:ac:fc:6f:32:dc:54:4c:32:79:d8:8f:6f:fd:65:
3f:fa:16:1f:69:03:fc:0c:fa:af:7e:e9:b0:ef:da:2f:8f:1a:
b9:f5:36:fe:f4:dd:e7:94:11:3f:12:34:53:5f:ca:c1:af:7d:
44:b7:bb:e8:df:1e:e3:55:29:02:0b:81:1a:5a:5c:7e:bc:80:
35:13:6f:ba:0d:a9:a1:4b:79:ba:55:8c:ba:70:fe:89:8e:0c:
c6:33:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org