Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gfVXHI8LiSMc_vCuwoTFyEBkLls.roa
File: gfVXHI8LiSMc_vCuwoTFyEBkLls.roa (raw, json)
Hash identifier: +1UdjMRjPhPlu0GlbFfyHnKeSEZb2WU6+nYTiM7Pdwk=
Subject key identifier: 81:F5:57:1C:8F:0B:89:23:1C:FE:F0:AE:C2:84:C5:C8:40:64:2E:5B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7AB69927A0AA999BDD8DF25F0F175
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gfVXHI8LiSMc_vCuwoTFyEBkLls.roa
Signing time: Mon 01 Jan 2024 20:29:34 +0000
ROA not before: Mon 01 Jan 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211560
IP address blocks: 81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 16:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ab:69:92:7a:0a:a9:99:bd:d8:df:25:f0:f1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81f5571c8f0b89231cfef0aec284c5c840642e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:b7:ed:ec:7a:9b:df:6a:f1:44:86:53:65:
39:e2:20:97:b0:b9:b6:69:9a:01:d8:b1:63:92:e4:
74:b6:a9:6a:b9:7c:18:30:ba:d8:03:08:fc:3c:5f:
b8:4e:16:e2:dd:af:15:43:a2:30:c5:1d:eb:82:04:
81:cd:2f:ae:02:fc:3f:e3:1d:10:08:5d:5a:ce:15:
82:bb:c2:4e:ec:a0:25:59:30:15:b5:3e:d6:67:b2:
61:ae:67:57:8e:bf:d3:06:6a:d0:5e:8d:4b:7d:76:
88:77:0a:c4:a6:f1:0c:21:21:63:32:18:40:41:e0:
01:5d:61:66:0a:ff:46:a2:78:f2:58:eb:a4:7f:45:
bc:fc:e5:e2:57:a8:a0:fc:64:f2:43:64:b6:7f:6b:
a6:64:1b:2e:d3:1e:98:ee:86:0f:46:2a:90:e4:2e:
4b:0f:67:ce:ed:9d:11:0f:47:ec:4d:ec:41:77:59:
c1:f3:fb:5b:1a:f3:7a:ad:d3:46:1c:9f:f3:3c:5a:
b2:3a:c8:4b:97:41:66:71:03:ac:b8:4f:c7:82:66:
58:3c:ea:7c:3c:f7:06:0b:a4:d3:b1:29:19:e0:8d:
b6:9d:c3:0a:2b:aa:22:7f:2a:b0:45:d4:f1:38:33:
68:a3:d6:65:86:ac:3f:95:05:01:fe:c1:e4:cf:53:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:57:1C:8F:0B:89:23:1C:FE:F0:AE:C2:84:C5:C8:40:64:2E:5B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gfVXHI8LiSMc_vCuwoTFyEBkLls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.11.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ce:44:33:b6:fe:b1:04:bc:60:e6:ac:ad:89:0e:aa:1c:21:
b3:37:d7:d3:92:f6:80:14:64:19:dc:34:d0:5d:ce:a0:bb:22:
25:31:d4:cb:cb:ea:3b:d5:23:32:d2:f0:58:c7:a1:31:4d:9d:
38:b5:d3:07:f0:bf:5b:74:ef:43:be:8a:ec:4e:88:7c:e0:22:
63:22:92:32:47:90:c9:3b:45:8f:05:de:fb:dd:49:a3:0c:ca:
79:f7:ea:ec:ca:cb:77:99:10:a9:10:cb:aa:24:fa:bc:82:1b:
78:c9:d8:09:95:98:76:16:82:a6:36:0b:2b:ff:51:ec:47:94:
cd:d7:81:0f:04:44:ed:08:e7:49:ec:b0:71:dd:d6:69:2d:4f:
6c:b9:80:6b:2b:99:eb:e7:4c:db:15:94:14:b5:54:7c:1c:8b:
d5:ef:e5:78:91:7c:e2:b0:87:c6:7c:4e:a9:70:49:05:e1:92:
b7:9a:4c:18:75:8c:c4:70:e6:58:90:e2:38:97:a2:d8:9f:a3:
2e:c7:d0:bd:ab:b9:2c:4c:57:5b:da:13:02:51:d4:7d:0b:21:
69:35:6d:db:27:18:03:3f:64:c6:e5:f6:b7:89:32:22:f3:e4:
96:87:7e:59:d3:f4:9e:c3:42:a3:2c:98:fd:2e:6a:f8:bc:01:
9e:04:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:27:24 2024 by rpki-client on console-fra.rpki-client.org