Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cQnU9KShMogijIdNJvPF1pwwCm0.roa
File: cQnU9KShMogijIdNJvPF1pwwCm0.roa (raw, json)
Hash identifier: /iqSQY/K/ZWL6GtKgPzJ+i6tiw/L5hdlHPiPTq4GkPk=
Subject key identifier: 71:09:D4:F4:A4:A1:32:88:22:8C:87:4D:26:F3:C5:D6:9C:30:0A:6D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189B5159214564B53E84573707EAD6F1CDA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cQnU9KShMogijIdNJvPF1pwwCm0.roa
Signing time: Wed 02 Aug 2023 07:10:36 +0000
ROA not before: Wed 02 Aug 2023 07:10:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 09:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:15:92:14:56:4b:53:e8:45:73:70:7e:ad:6f:1c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 2 07:10:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7109d4f4a4a13288228c874d26f3c5d69c300a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:7e:c0:81:82:77:bc:37:4a:0d:c7:99:af:
bf:dd:66:e8:ab:dd:6d:06:26:19:a5:21:a0:94:c7:
d5:02:69:80:17:20:2c:2e:13:38:a8:07:62:cb:25:
a3:7d:c4:25:1b:43:d3:0b:05:d2:94:87:12:e2:87:
49:96:06:42:4d:5f:c6:eb:7b:5d:a5:4f:6f:03:b0:
93:12:44:e3:9b:8d:3b:fd:ff:c7:9d:45:48:fa:03:
0c:c2:e6:a2:67:18:0a:1a:cf:fa:96:65:91:40:58:
82:e3:f4:4a:58:7c:4a:63:c3:25:f7:d0:c2:30:df:
67:ab:fb:8d:4b:13:5d:07:e5:24:2d:c8:31:36:ce:
60:16:e8:2b:6a:bb:8d:c5:f5:ec:47:37:f2:8d:b9:
7d:2e:3c:9b:97:77:f4:dc:60:cb:4c:16:b7:70:f6:
20:bc:2e:15:d2:86:1c:b4:37:9a:09:f3:87:aa:10:
38:c7:ac:c2:a1:d7:f6:04:e1:30:d8:b6:09:d5:76:
5b:56:81:93:a8:d4:74:40:ac:04:2e:34:a8:94:83:
8c:08:0a:a5:98:4b:28:55:c9:ae:56:99:19:36:c1:
00:f0:49:19:6e:b2:f3:c9:13:09:44:f8:8c:9f:84:
d4:8f:51:57:04:13:c9:d9:e0:dc:18:83:16:95:94:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:D4:F4:A4:A1:32:88:22:8C:87:4D:26:F3:C5:D6:9C:30:0A:6D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cQnU9KShMogijIdNJvPF1pwwCm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:cd:f7:77:8c:82:4d:0a:77:e5:2d:27:e2:e9:98:c2:17:a7:
de:9a:c3:73:7f:9f:9b:d4:b7:dd:36:94:65:b0:ce:81:c8:6b:
3f:5a:c4:40:23:ba:7b:60:85:51:17:9a:ab:ac:70:1b:f6:4d:
08:bf:d4:e6:86:95:e7:da:d7:8e:c8:8d:5b:99:d2:a6:24:7a:
78:94:be:a2:06:f4:b5:fb:53:6c:04:b6:86:80:36:85:c8:29:
ad:65:6a:e6:b2:2b:b5:0c:68:2e:ba:a1:8c:3b:68:be:c6:8e:
20:60:8b:b2:09:4c:2a:fe:89:f8:18:5e:8b:a4:5f:00:78:c1:
c7:24:7d:92:60:c9:a1:62:e8:69:cd:4c:25:c0:fb:f2:8c:c3:
0f:7c:fa:e1:e2:2c:0f:f2:71:d0:b8:b3:c2:2a:a3:ae:ad:50:
17:43:88:30:ee:6d:58:9c:62:15:2e:6b:95:6a:12:aa:09:30:
38:50:91:42:b3:09:85:b7:55:63:d1:95:2e:b2:d7:d7:be:09:
24:4c:d6:e6:3c:e5:b9:97:84:86:cf:7b:64:64:1f:47:89:9d:
33:0d:cd:30:00:e9:33:2f:ec:58:e8:0b:11:0e:87:72:78:58:
6e:3a:7d:3c:5c:84:08:4e:d3:4a:95:44:21:75:0f:54:b6:f9:
c2:33:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org