Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cKwjGjm0nS9eU1WFsLURXvuv52w.roa
File: cKwjGjm0nS9eU1WFsLURXvuv52w.roa (raw, json)
Hash identifier: xZXzLfKQogUuEh0/9ZzRESDghXPzYyuJom+V6e2X10o=
Subject key identifier: 70:AC:23:1A:39:B4:9D:2F:5E:53:55:85:B0:B5:11:5E:FB:AF:E7:6C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018AEF0315B12ABADB6678B34E6666510B64
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cKwjGjm0nS9eU1WFsLURXvuv52w.roa
Signing time: Mon 02 Oct 2023 06:11:11 +0000
ROA not before: Mon 02 Oct 2023 06:11:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199414
IP address blocks: 81.21.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:03:15:b1:2a:ba:db:66:78:b3:4e:66:66:51:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 2 06:11:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70ac231a39b49d2f5e535585b0b5115efbafe76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:05:6a:5a:f5:58:8b:2f:56:4f:12:52:18:
88:3f:e7:50:11:47:24:ea:a4:2c:89:d4:8b:5d:37:
7e:b1:9a:02:5b:49:68:6f:ec:35:af:94:96:59:8e:
63:8f:7b:8c:60:ed:32:e9:63:e7:33:3e:be:b7:80:
f2:47:ea:56:cf:b9:ee:cf:0b:b6:b5:53:36:3e:e2:
48:16:d9:07:a6:fe:dd:0a:98:fc:09:2c:f6:77:b8:
2b:eb:8a:2b:09:6b:c0:48:0e:de:63:f2:ab:ec:85:
f7:c6:26:a8:03:9d:37:77:8b:90:5f:aa:8d:45:90:
a2:b8:2a:4d:1f:54:11:ae:63:3d:a1:2e:dc:89:97:
62:b0:42:2a:21:2c:bd:6c:0b:5a:c8:3d:b4:66:92:
0a:34:72:41:a3:de:d1:9c:48:91:1c:59:9d:5d:57:
4f:f4:19:05:c6:d8:52:f3:d9:79:d5:53:42:ff:6f:
b7:e1:8d:66:23:31:91:67:71:cf:58:e2:66:9a:7b:
30:83:12:59:4f:bc:9d:91:cb:ab:b7:83:03:04:7d:
42:58:71:b1:65:7b:c7:37:c7:ea:2f:e6:22:79:c8:
94:bf:3e:33:35:07:30:8e:8e:6f:ae:fc:9b:12:9e:
83:76:cc:ff:aa:d7:d7:0f:f8:39:4d:62:a9:fc:d9:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AC:23:1A:39:B4:9D:2F:5E:53:55:85:B0:B5:11:5E:FB:AF:E7:6C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cKwjGjm0nS9eU1WFsLURXvuv52w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.1.0/24
Signature Algorithm: sha256WithRSAEncryption
96:68:a1:e0:97:7e:ce:11:cc:39:c4:38:57:81:90:c4:4b:a8:
72:77:a4:28:86:ff:cb:b9:63:d3:5f:42:23:d5:68:ed:f1:d7:
2a:e3:08:d7:ea:f5:83:c5:9f:95:10:9b:89:f3:d8:ab:06:2f:
c7:f8:a2:bc:10:0c:63:f6:d9:1e:f2:23:6c:fc:93:15:1b:b4:
3c:b8:e6:4e:a3:f3:7f:56:22:9f:36:cb:a7:75:5f:d2:c3:82:
f5:0a:40:16:ae:82:b1:52:46:bc:69:4e:d8:a1:9c:00:4a:ef:
7e:21:e1:6c:90:b4:80:ec:29:90:f4:16:81:65:74:46:9a:12:
ee:52:30:53:35:d6:55:04:1e:bf:fd:3f:19:e0:2e:46:4c:9e:
a2:6d:db:a5:68:ba:0c:08:0a:f3:7a:06:6a:96:bf:bd:b7:b2:
9e:cd:70:d2:46:d6:12:91:55:5b:15:d8:7f:dd:f6:fd:ad:9d:
8d:74:f4:ae:d4:81:99:a6:6e:ec:84:e2:30:0e:73:d7:53:8d:
e2:3e:50:64:cf:30:8d:70:f9:a6:23:3b:56:bc:be:7b:72:c4:
06:64:e9:30:20:f7:fd:9b:88:e8:cf:df:ab:b6:87:ce:60:c1:
8f:00:df:d3:30:09:20:44:72:f0:21:9f:08:37:3d:69:1f:3c:
57:92:db:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org