Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/duow8-ZjjZC0X-nLo4-xLuWq178.roa
File: duow8-ZjjZC0X-nLo4-xLuWq178.roa (raw, json)
Hash identifier: /LRiEmWrmh5/Gmfaj8slIxOBATjQl16H3TnD0Lsxxcc=
Subject key identifier: 76:EA:30:F3:E6:63:8D:90:B4:5F:E9:CB:A3:8F:B1:2E:E5:AA:D7:BF
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C19FA94DF10E66E087ABE5C56A9370C9C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/duow8-ZjjZC0X-nLo4-xLuWq178.roa
Signing time: Wed 29 Nov 2023 07:28:21 +0000
ROA not before: Wed 29 Nov 2023 07:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 176.57.55.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:fa:94:df:10:e6:6e:08:7a:be:5c:56:a9:37:0c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 29 07:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ea30f3e6638d90b45fe9cba38fb12ee5aad7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:40:14:5b:f5:41:d2:88:86:d1:e4:a8:b1:
c5:a5:f6:46:e0:86:a9:4e:8d:f8:f1:ea:72:c3:93:
a4:90:03:21:14:0f:eb:11:a4:49:71:5d:7d:a1:df:
6a:7a:e6:06:eb:9d:2a:7f:c4:56:30:b4:d9:d7:64:
06:da:66:11:5e:f5:01:eb:4d:cb:7a:3e:8e:3e:26:
f3:de:9e:a9:19:ab:a7:1e:ee:85:da:38:87:29:dd:
ab:60:22:7e:0e:11:87:02:ec:9a:b0:26:c0:67:81:
5b:32:9c:6e:f6:82:c2:62:49:9a:de:17:e8:3c:59:
64:eb:3f:bb:6b:e7:84:62:4e:ad:8b:13:5e:14:05:
e8:88:46:80:0d:85:84:e0:00:9b:6e:47:8e:aa:16:
18:e1:4f:36:73:b9:ba:8f:cc:48:2b:67:fb:08:f7:
cf:2b:90:ff:41:b2:14:00:a3:10:4e:56:64:8a:15:
bb:85:5b:25:e6:52:74:2a:a6:86:fb:c8:f3:38:13:
a1:1d:57:04:3f:ad:1a:0f:fc:4b:de:59:76:54:c4:
74:8e:68:7a:ed:21:fe:db:a1:9c:a5:43:6d:b7:90:
d9:51:b6:29:45:91:bc:d0:94:5b:57:2a:e7:74:d4:
5a:eb:b9:12:a9:fd:a0:67:d4:14:b5:14:0b:53:dd:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EA:30:F3:E6:63:8D:90:B4:5F:E9:CB:A3:8F:B1:2E:E5:AA:D7:BF
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/duow8-ZjjZC0X-nLo4-xLuWq178.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.14.0/24
176.57.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:77:ca:09:d1:bb:6e:02:44:2f:ec:23:db:c5:35:d7:7b:09:
b1:8e:98:74:5b:33:ca:ff:4b:a9:83:83:78:40:fd:9e:43:38:
a8:b2:89:37:fe:6a:2c:0c:c4:2a:9e:ae:ef:fd:84:a7:3c:47:
ab:42:56:7d:cc:d5:3b:91:76:83:d6:0e:19:2f:9e:7a:43:f0:
ba:0f:de:23:b8:a5:66:3f:0f:fc:c2:64:6b:b5:0d:72:65:61:
05:b4:10:60:68:e6:98:8d:54:7d:6e:65:66:d5:5a:fe:6a:e5:
e2:28:a6:fe:ef:82:ff:63:3e:4c:15:7c:91:cd:bd:52:2b:d6:
96:d9:0e:c9:e7:77:4a:d2:ca:0b:8f:72:09:f2:21:8a:b0:d9:
06:7d:c8:46:0b:f3:75:59:fe:0a:67:11:5d:e4:65:14:06:71:
e1:1d:d0:0a:86:6f:83:07:42:7b:4a:5b:78:6f:e2:c8:45:c1:
58:33:95:f6:46:ab:de:52:fa:33:19:4f:9a:ee:3b:dc:8e:17:
d2:9a:6f:65:c9:17:53:bc:08:59:1d:03:11:34:fa:91:1a:9a:
aa:6e:64:5a:97:4c:4e:7f:96:e4:cb:66:d5:70:a4:13:ef:b9:
f8:22:d6:03:ea:bb:2b:41:c2:7c:20:80:b1:85:5d:d0:00:7b:
f2:02:6b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org