Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cvCmP89iJT2EoshPncIurBC7OTY.roa
File: cvCmP89iJT2EoshPncIurBC7OTY.roa (raw, json)
Hash identifier: e/rP1OJV3a8PjIxmI62i2nLXQtVuCnp0gNIx7mbJ3T8=
Subject key identifier: 72:F0:A6:3F:CF:62:25:3D:84:A2:C8:4F:9D:C2:2E:AC:10:BB:39:36
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B1D819EF9945F8F30D880963D4724FBE6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cvCmP89iJT2EoshPncIurBC7OTY.roa
Signing time: Wed 11 Oct 2023 06:51:55 +0000
ROA not before: Wed 11 Oct 2023 06:51:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39600
IP address blocks: 81.21.4.0/24 maxlen: 24
81.21.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Nov 2023 07:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:81:9e:f9:94:5f:8f:30:d8:80:96:3d:47:24:fb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 11 06:51:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72f0a63fcf62253d84a2c84f9dc22eac10bb3936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:de:44:0d:f7:9a:59:24:2a:1e:81:bc:6c:
05:cc:8f:8f:34:e0:8a:c6:e7:dd:b7:52:ae:22:89:
5b:c1:2c:7d:e2:20:b1:d3:8d:5e:2d:75:d8:6a:21:
8b:9e:be:8e:d0:cf:b8:ad:81:5d:d4:f3:46:2e:78:
e0:a0:35:5e:82:a9:e8:a8:63:f8:39:56:43:b4:a5:
c8:72:4a:cc:ed:c2:0d:84:2a:92:6d:c5:12:cc:5b:
d4:fc:d4:23:8e:c7:4b:d6:3b:8e:81:4c:9e:57:b4:
d5:55:61:0a:4f:7b:1e:48:9e:76:67:6a:68:b8:81:
b0:64:1e:75:12:b0:3f:06:dc:cb:12:6c:db:d4:54:
72:3d:05:08:8b:a9:5e:de:4f:b9:83:c4:29:76:7f:
bc:53:ec:a0:df:71:de:31:c2:fc:15:67:e7:40:c8:
55:3c:d7:2d:24:da:19:8e:70:bf:2f:22:f0:64:29:
b9:76:95:7a:0e:4c:76:d1:75:4f:25:e5:51:6a:4c:
8b:71:e7:f6:3d:27:f2:49:c8:81:83:7d:f6:6a:11:
05:41:d8:02:3a:43:83:1d:8e:fb:e2:86:ac:07:3c:
bb:cb:91:38:52:f3:bd:79:b5:0d:fb:8e:64:7c:c3:
12:90:e1:94:60:79:37:3e:1e:f2:c0:31:e4:db:e1:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F0:A6:3F:CF:62:25:3D:84:A2:C8:4F:9D:C2:2E:AC:10:BB:39:36
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cvCmP89iJT2EoshPncIurBC7OTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.3.0-81.21.4.255
Signature Algorithm: sha256WithRSAEncryption
7d:e1:c2:b0:ea:81:e3:bc:4a:19:2b:f6:76:fc:7d:4b:73:f8:
45:89:2b:0e:df:bd:6c:07:c8:cb:a0:4c:b3:eb:61:d0:fd:9b:
98:20:4a:61:72:d3:d7:49:ee:8f:4d:bd:fd:8e:45:61:cb:7b:
b5:43:be:95:ae:ed:8e:fb:74:62:33:0b:5e:25:3d:ba:23:db:
47:77:28:f5:7e:5b:77:b8:a9:dd:bb:38:a8:b0:8f:f9:40:2b:
e9:15:77:6a:27:08:ef:26:6e:aa:df:e2:10:3e:25:db:5b:5e:
4b:46:35:da:4a:b0:1f:a3:ab:22:7b:85:ae:5d:72:d0:04:df:
d3:b6:7f:0d:10:de:27:b9:92:2b:b3:13:56:13:88:7c:32:48:
71:91:d4:94:26:2f:c7:f9:22:7a:09:13:9d:a1:86:80:ec:3b:
91:b8:44:eb:1c:45:47:ba:14:1c:f5:54:0f:8a:4d:af:07:60:
a1:0a:ed:b0:2b:18:f3:d6:27:96:64:7d:e8:a4:fb:48:92:42:
dc:f3:3f:3b:c9:23:95:54:57:6a:f8:a7:ec:3b:df:12:3b:63:
79:a8:8e:10:01:53:e0:36:d7:c4:14:25:7b:61:66:4b:e0:36:
33:90:04:72:e0:fc:2d:2e:bb:60:54:f5:c3:f2:6d:26:75:6b:
c9:8b:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org