Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZfmVyoy0hlaJhi7W-68APRsG7WI.roa
File: ZfmVyoy0hlaJhi7W-68APRsG7WI.roa (raw, json)
Hash identifier: sf+OOeK8jljbg8CkFxfW9KUps2wZvjIUVr62YTTpl1c=
Subject key identifier: 65:F9:95:CA:8C:B4:86:56:89:86:2E:D6:FB:AF:00:3D:1B:06:ED:62
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018A693F433806563502389F527727BEA720
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZfmVyoy0hlaJhi7W-68APRsG7WI.roa
Signing time: Wed 06 Sep 2023 06:47:48 +0000
ROA not before: Wed 06 Sep 2023 06:47:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 81.21.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 17:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:3f:43:38:06:56:35:02:38:9f:52:77:27:be:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 6 06:47:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f995ca8cb4865689862ed6fbaf003d1b06ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:fb:ac:f9:6e:d6:47:d0:ca:c4:08:5b:84:
72:13:8b:51:01:3e:ab:da:4a:4e:7b:51:ef:dc:29:
4c:a2:58:f7:e6:e7:a5:2c:61:01:9b:b5:80:8c:eb:
47:8d:b1:db:15:fc:12:06:ad:a7:43:6d:be:ed:34:
07:7a:3e:63:df:47:55:39:d3:05:5e:a7:bd:43:dc:
4c:68:b0:2b:dd:76:88:2c:2c:04:b5:df:3f:cf:d8:
e1:64:14:73:29:96:f8:60:29:34:09:17:77:5a:3e:
28:0f:50:ed:ce:d5:0a:76:66:4c:03:35:25:18:7a:
70:94:21:55:ab:14:74:00:69:69:23:8b:65:0a:2c:
d3:bb:a9:02:b7:ff:c2:c6:2c:73:eb:54:82:25:cb:
e6:39:00:98:f6:10:a1:eb:83:62:83:4c:ec:7a:e6:
5b:8b:05:1a:9f:c5:0a:91:9f:92:df:9d:84:0d:95:
af:2d:83:28:5c:6d:63:a7:66:eb:a7:65:6f:66:b0:
1a:09:e1:2c:90:a7:71:5f:33:a7:65:7a:a6:b8:1a:
90:dd:6b:9e:9d:6f:63:83:97:ed:a1:a4:48:66:d3:
b1:78:02:00:97:ea:fa:02:32:da:f7:04:89:cc:e9:
78:ab:b3:98:2e:49:31:7c:c3:48:41:e7:73:9f:16:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F9:95:CA:8C:B4:86:56:89:86:2E:D6:FB:AF:00:3D:1B:06:ED:62
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZfmVyoy0hlaJhi7W-68APRsG7WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:80:4d:f7:5a:a8:00:f9:cf:4b:01:99:7e:81:f6:05:84:bb:
2b:53:fd:c7:49:f2:de:5a:2b:22:31:3d:a2:09:1d:be:d1:e9:
51:77:f4:3c:2b:b6:90:d6:91:f7:9f:51:c1:88:2e:fe:60:6b:
b2:e5:d1:cb:6e:bf:e4:fe:0f:84:d1:76:40:8a:9b:85:d0:8b:
b7:25:29:78:6c:ae:7e:e9:63:53:5e:2e:fd:75:d7:fd:2a:bb:
8e:fb:01:5b:07:f0:0f:45:46:3c:3a:cd:6a:29:13:8b:28:3d:
ba:80:f3:8b:c7:f9:8d:17:48:0a:74:65:d4:e5:89:a8:f7:a4:
c0:bf:ad:cc:98:3b:eb:b0:ad:0e:49:18:6a:e2:06:bf:e3:09:
ca:5b:aa:b3:04:5f:79:2a:ac:6a:ee:d4:3f:03:7d:85:98:81:
3f:b2:c2:0d:3c:d8:51:31:8b:7d:6d:06:2e:0a:72:57:84:e2:
74:3f:93:ba:fc:02:96:6a:8b:05:67:95:9c:d6:2b:cd:1f:ef:
07:97:d0:67:38:85:2c:30:61:84:8a:96:91:3b:76:2b:b3:d9:
4c:7c:2f:b5:49:e5:5a:4d:1e:e0:3a:61:fa:6c:56:ca:59:ac:
43:00:00:fd:1b:9d:fc:fb:a6:d5:79:38:a4:9e:d4:f3:b0:93:
dd:ff:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org