Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gmWbvfZplEQo52g-gmGIg114GLA.roa
File: gmWbvfZplEQo52g-gmGIg114GLA.roa (raw, json)
Hash identifier: cebanoEIemr7DSYFZmdL18v6XMOnjh+KUZuIturQFJQ=
Subject key identifier: 82:65:9B:BD:F6:69:94:44:28:E7:68:3E:82:61:88:83:5D:78:18:B0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7ABFEB3577C80646B1449727C12AC
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gmWbvfZplEQo52g-gmGIg114GLA.roa
Signing time: Mon 01 Jan 2024 20:29:34 +0000
ROA not before: Mon 01 Jan 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 81.21.6.0/24 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 12:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ab:fe:b3:57:7c:80:64:6b:14:49:72:7c:12:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82659bbdf669944428e7683e826188835d7818b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:a4:11:44:eb:da:99:1c:5a:ca:33:fd:c7:
f8:1f:42:63:f5:11:b4:14:ca:18:30:63:4e:27:db:
ad:9e:d2:14:91:3a:99:56:69:cf:06:09:25:ef:96:
e4:33:ec:d9:69:37:0d:a9:11:06:d1:7c:41:d4:20:
a3:8c:49:75:0e:c5:7b:32:35:93:bd:ac:b6:4a:1f:
06:39:fa:6e:4f:b5:a4:22:2c:74:fb:b7:d6:91:e8:
86:f8:74:bb:c6:6d:a7:24:ee:23:e8:d7:ab:16:86:
28:5f:05:83:2f:dc:7b:6d:0e:97:d3:34:3c:d6:e3:
93:98:16:76:18:53:72:16:15:76:54:59:2d:ca:95:
81:df:ee:b9:57:a9:da:62:97:16:1b:1e:5f:bd:4f:
06:81:1e:c9:24:14:b7:88:03:f5:af:5d:4f:69:7c:
3a:91:c9:c6:0f:10:20:cc:d4:1f:36:97:cb:df:cc:
ef:d7:14:56:55:c5:ae:92:1f:94:cd:cd:51:cc:c0:
3e:04:14:74:b4:d0:4a:b6:00:86:7b:8d:c2:84:79:
04:fd:68:ed:91:3a:ab:38:e5:c4:cd:2c:cd:55:66:
1d:d2:24:ed:78:da:f9:a6:5b:25:76:6a:bb:2d:14:
1a:4c:b0:52:8c:a2:dd:c7:4f:c5:39:7a:83:9a:27:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:9B:BD:F6:69:94:44:28:E7:68:3E:82:61:88:83:5D:78:18:B0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gmWbvfZplEQo52g-gmGIg114GLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.5.0-81.21.6.255
81.21.15.0/24
Signature Algorithm: sha256WithRSAEncryption
26:02:12:dc:19:e7:15:d6:ea:83:f9:21:00:13:41:4a:1e:96:
44:dd:33:2f:bd:38:d6:8d:ba:51:fa:b6:d5:e6:6f:78:25:92:
b9:20:5d:42:6f:72:27:6f:b2:1c:eb:f2:e8:12:a0:ec:d8:97:
fe:f9:01:1a:ad:9f:47:42:ce:24:02:45:f9:57:e0:f7:3f:cf:
de:dc:69:56:1f:a8:6a:ff:f9:66:2d:6a:05:8b:0d:08:90:9c:
9f:8b:a4:35:18:d8:b9:31:91:28:59:bd:bc:c1:3e:96:a2:b2:
46:05:e3:63:91:c0:7c:eb:e3:ba:40:0c:98:ef:2a:3a:6b:8b:
6d:a0:0e:21:4e:84:04:c4:f9:35:16:55:1d:29:07:c5:9b:ec:
3b:89:e7:da:a0:c3:3d:4f:28:a8:20:41:29:7b:c7:b8:b9:91:
8e:22:6b:ee:f3:b3:6a:83:43:5f:9a:1c:76:47:e9:8e:40:a8:
cb:49:d4:1b:cb:74:d4:c5:8b:bc:c8:37:8f:5d:f2:cf:62:ba:
f1:5c:32:bf:9e:ae:5b:ea:60:f9:bb:44:4b:1c:6b:96:a0:d3:
1d:af:d8:f4:b3:30:fe:dc:9e:47:30:e7:37:76:f5:58:6a:19:
e8:fa:56:e2:ed:9f:9f:31:f4:17:1e:55:f2:1c:5f:65:43:0f:
b3:f7:03:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org