Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZIruxgnIelheSkRhN8JPViG78YQ.roa
File: ZIruxgnIelheSkRhN8JPViG78YQ.roa (raw, json)
Hash identifier: U3t4OKhR2bX1LuxS7cFlzaGuqx36FKf5cCy0uEc7pn8=
Subject key identifier: 64:8A:EE:C6:09:C8:7A:58:5E:4A:44:61:37:C2:4F:56:21:BB:F1:84
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018AB173C9BBA086168F6A7CB76B2C8530C6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZIruxgnIelheSkRhN8JPViG78YQ.roa
Signing time: Wed 20 Sep 2023 07:17:50 +0000
ROA not before: Wed 20 Sep 2023 07:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 81.21.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 12:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:73:c9:bb:a0:86:16:8f:6a:7c:b7:6b:2c:85:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 20 07:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=648aeec609c87a585e4a446137c24f5621bbf184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:3c:74:e4:ef:8b:12:81:4e:4f:0c:9c:63:
10:22:0b:05:19:76:58:67:e5:e7:a8:17:f1:d0:bb:
c2:18:ce:9d:cf:01:ca:c0:32:5e:f9:4b:2e:10:7b:
47:68:1b:dd:8b:fb:c6:97:b9:3e:ce:7f:91:3b:91:
4b:b3:c3:aa:85:05:88:41:c0:b0:23:2b:59:ad:3b:
eb:59:de:d6:38:8d:f2:41:37:54:e6:a7:c7:9c:59:
e4:ef:c4:35:18:0c:bb:a8:5a:a3:84:6a:85:60:eb:
1f:8f:e3:4c:fd:21:c8:0a:d1:59:e8:bb:fe:2c:c7:
36:c8:fd:60:36:c3:f3:2e:33:cc:eb:26:0f:64:ea:
13:21:53:10:f2:9e:36:e8:a3:47:6d:1c:15:f9:c3:
f8:6b:0b:c2:66:62:c0:5f:16:f5:11:bb:89:3d:b1:
5e:e8:9c:0d:f7:1d:32:29:63:62:45:d1:ba:0a:a3:
44:b7:ee:86:26:af:0d:ac:75:e8:be:1a:f4:bd:9a:
51:23:9b:b9:1b:cc:8d:ba:d4:b8:7f:a7:c4:a4:87:
be:77:49:42:43:3c:95:e6:6f:6c:30:1f:e1:f0:19:
22:49:fc:bb:a8:ac:a3:da:b7:87:98:18:c7:b2:6d:
fe:c6:56:d2:93:e4:8a:ea:a1:13:eb:5f:23:e7:ad:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8A:EE:C6:09:C8:7A:58:5E:4A:44:61:37:C2:4F:56:21:BB:F1:84
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZIruxgnIelheSkRhN8JPViG78YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:90:31:e8:92:e5:fb:97:90:5d:f5:9e:81:73:36:f0:86:89:
c8:05:f1:bc:63:f3:d9:a6:40:12:6c:4a:e0:57:31:6e:37:fd:
9b:96:7d:80:f4:db:ce:4a:68:41:30:92:37:9a:27:a8:68:b6:
97:dd:c4:e1:e6:59:3b:d5:e4:be:86:33:35:f0:0a:82:f3:e5:
8e:d3:7a:a8:c7:7c:db:47:a8:c1:fa:b7:b3:69:de:c4:8e:6f:
c3:27:ea:08:ad:bd:d0:88:64:6d:17:78:cc:fc:44:c4:19:4e:
1a:95:f0:41:c4:ee:f2:6b:d6:1a:0b:72:e1:08:7a:ab:20:04:
14:d5:bd:2b:b9:73:3f:72:63:04:9c:0f:aa:52:48:87:6b:90:
2a:57:67:bc:71:4b:e8:f0:2e:6b:41:8a:67:4c:67:d7:42:b4:
c4:c0:a7:cd:c5:b9:89:93:14:86:05:34:ab:4e:ce:df:3f:f7:
08:d8:58:d4:83:de:cb:da:f7:7d:ca:cb:98:20:82:cd:e8:2a:
28:d4:1e:f3:6e:f9:5f:9b:20:6f:ec:97:76:95:8e:ac:bb:67:
6c:d3:df:6b:60:81:c3:95:54:0e:8b:5f:fc:69:e5:77:66:b8:
a9:e1:e2:ce:9f:4c:f2:b1:15:b5:e4:03:b1:60:a9:26:e9:5d:
9d:e7:81:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqxc8m7oIYWj2p8t2sshTDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwOTIwMDcxNzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDhhZWVjNjA5Yzg3YTU4NWU0YTQ0NjEzN2MyNGY1NjIxYmJmMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUI8dOTvixKBTk8MnGMQIgsFGXZY
Z+XnqBfx0LvCGM6dzwHKwDJe+UsuEHtHaBvdi/vGl7k+zn+RO5FLs8OqhQWIQcCw
IytZrTvrWd7WOI3yQTdU5qfHnFnk78Q1GAy7qFqjhGqFYOsfj+NM/SHICtFZ6Lv+
LMc2yP1gNsPzLjPM6yYPZOoTIVMQ8p426KNHbRwV+cP4awvCZmLAXxb1EbuJPbFe
6JwN9x0yKWNiRdG6CqNEt+6GJq8NrHXovhr0vZpRI5u5G8yNutS4f6fEpIe+d0lC
QzyV5m9sMB/h8BkiSfy7qKyj2reHmBjHsm3+xlbSk+SK6qET618j563SWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGSK7sYJyHpYXkpEYTfCT1Yhu/GEMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvWklydXhnbkllbGhlU2tSaE44SlBWaUc3OFlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURUEMA0G
CSqGSIb3DQEBCwUAA4IBAQBvkDHokuX7l5Bd9Z6BczbwhonIBfG8Y/PZpkASbErg
VzFuN/2bln2A9NvOSmhBMJI3mieoaLaX3cTh5lk71eS+hjM18AqC8+WO03qox3zb
R6jB+rezad7Ejm/DJ+oIrb3QiGRtF3jM/ETEGU4alfBBxO7ya9YaC3LhCHqrIAQU
1b0ruXM/cmMEnA+qUkiHa5AqV2e8cUvo8C5rQYpnTGfXQrTEwKfNxbmJkxSGBTSr
Ts7fP/cI2FjUg97L2vd9ysuYIILN6Coo1B7zbvlfmyBv7Jd2lY6su2ds099rYIHD
lVQOi1/8aeV3Zrip4eLOn0zysRW15AOxYKkm6V2d54GX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org