Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cvSiuLLBsvDqb5wbzYoHBKazFNE.roa
File: cvSiuLLBsvDqb5wbzYoHBKazFNE.roa (raw, json)
Hash identifier: u4vFoZLbAwO7EHQx03dLEq7gVLpreQylQV6g+0y0TKY=
Subject key identifier: 72:F4:A2:B8:B2:C1:B2:F0:EA:6F:9C:1B:CD:8A:07:04:A6:B3:14:D1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D0D74E468AA5794F90F3BE6CDC03F13C0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cvSiuLLBsvDqb5wbzYoHBKazFNE.roa
Signing time: Mon 15 Jan 2024 14:09:40 +0000
ROA not before: Mon 15 Jan 2024 14:09:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 81.21.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 10:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:74:e4:68:aa:57:94:f9:0f:3b:e6:cd:c0:3f:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 15 14:09:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72f4a2b8b2c1b2f0ea6f9c1bcd8a0704a6b314d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:93:02:1a:ce:55:c2:eb:20:ca:d9:8d:37:
2d:49:a8:06:23:bf:f7:46:97:0d:4b:2a:52:16:5b:
a6:a0:f7:f1:ef:24:df:2d:5d:bc:99:98:2d:b4:ef:
8b:5d:32:22:e0:87:17:47:93:39:0e:3d:23:23:d6:
5c:3b:22:fd:23:a5:14:43:b1:26:74:43:76:49:ef:
18:39:f7:cb:d8:12:70:3a:7d:09:f1:41:0c:24:6f:
04:09:ef:b9:44:fa:22:13:7d:04:ae:75:ff:60:ed:
15:65:e0:11:6d:c7:b5:67:a7:0b:8a:db:63:91:c0:
33:6c:13:41:b6:82:78:f3:7c:90:6b:75:38:d1:e8:
59:39:49:a3:cd:f7:9b:47:79:65:1b:6b:20:23:a8:
15:3a:12:16:15:d3:5b:0d:d6:33:5c:82:17:22:ea:
55:01:60:4a:41:c1:a7:c7:90:8e:1d:4d:e3:c1:dd:
90:18:c3:ee:fa:61:99:f4:d4:50:6c:35:59:e8:cf:
6a:e9:e3:6c:c6:dd:3c:3f:af:3a:cb:75:75:06:9c:
36:50:4b:97:6f:07:e3:e7:d5:04:d5:a8:b9:f9:fe:
3c:65:09:03:3f:e0:4c:77:d5:69:be:7e:1b:ff:a9:
87:ea:71:b4:da:01:05:44:27:7c:b5:16:fb:e5:58:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:A2:B8:B2:C1:B2:F0:EA:6F:9C:1B:CD:8A:07:04:A6:B3:14:D1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cvSiuLLBsvDqb5wbzYoHBKazFNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ca:ba:ad:f1:4e:71:4e:90:4c:e7:d1:6c:0e:19:15:0e:b7:
04:29:e9:f8:7f:47:2c:19:70:be:49:ba:f1:64:bd:a2:5d:34:
ec:df:c7:5a:fb:fd:ef:db:06:c9:cd:d1:5b:8b:a7:05:41:ca:
b7:e2:fa:ae:1b:41:2f:93:15:a9:85:b7:63:c0:3d:65:f8:15:
19:75:58:4b:ad:58:b2:01:e3:0e:26:fb:53:8c:0b:0f:85:46:
54:39:8a:ee:7e:2a:0c:a3:f8:17:74:e1:01:01:70:8b:75:0a:
f9:ee:03:6b:0e:4f:a0:70:a5:6a:f9:d2:0b:a2:dc:90:12:ae:
09:4f:f1:27:e3:72:94:4b:b6:b0:8b:08:5d:98:b5:06:09:f8:
5f:c5:37:16:bc:21:a0:c8:d3:a7:79:6f:01:1b:32:4a:46:f8:
25:68:88:7a:13:7b:8c:1e:96:39:6b:ca:11:6c:40:6a:6c:09:
5a:3d:51:1d:d7:5b:4f:6a:81:58:b5:66:87:b0:1a:b0:06:3a:
72:72:4b:44:7f:2b:3e:a7:e9:80:32:1f:a2:13:39:ba:34:8d:
78:d2:5a:23:70:aa:4c:96:69:c0:bf:f6:a1:1f:fe:2f:96:d2:
82:0a:d2:45:da:03:77:65:74:c2:85:35:25:0d:f5:3f:22:27:
1f:66:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org