Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i_V1-tWWoBxzIEpVnDAy5vKlCYM.roa
File: i_V1-tWWoBxzIEpVnDAy5vKlCYM.roa (raw, json)
Hash identifier: hPaie+kGH5omkg9d8nyzL60dvhBwJ0p96fK861b5ENQ=
Subject key identifier: 8B:F5:75:FA:D5:96:A0:1C:73:20:4A:55:9C:30:32:E6:F2:A5:09:83
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C57C0C81893883D8FD9B79E17A0DBC769
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i_V1-tWWoBxzIEpVnDAy5vKlCYM.roa
Signing time: Mon 11 Dec 2023 07:21:41 +0000
ROA not before: Mon 11 Dec 2023 07:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400859
IP address blocks: 81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:c0:c8:18:93:88:3d:8f:d9:b7:9e:17:a0:db:c7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 11 07:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf575fad596a01c73204a559c3032e6f2a50983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6e:88:4a:ad:a4:d7:12:13:c6:ad:fc:0a:c9:
10:4e:af:bc:40:34:c9:16:0e:10:ba:15:01:2e:53:
00:63:2c:d7:ff:b8:1f:16:a0:16:4b:00:ca:03:2e:
92:6d:88:d6:26:0d:92:13:a6:cf:cc:46:6a:57:4a:
48:40:12:41:7a:22:58:4d:61:5f:fe:5a:07:3b:40:
96:77:cf:49:2e:f3:3e:3c:7b:aa:26:de:4c:c3:06:
76:60:bb:93:6f:5b:38:83:9f:50:db:84:7d:df:56:
34:c6:b1:83:b5:a3:cc:73:13:ec:2f:b6:d3:04:20:
04:09:90:d7:97:29:b1:e7:b0:3f:c1:15:9f:38:80:
cc:68:be:cb:b1:e8:db:fc:a1:c0:1c:ea:94:85:95:
bc:fe:a2:86:8f:35:ee:1f:99:24:a4:4b:75:fb:74:
cc:e0:35:f6:1e:10:24:1c:f8:b2:61:fc:d8:c7:6d:
1e:a6:ca:b4:2a:97:30:d6:24:56:6d:b0:31:bc:2e:
7d:9c:9b:98:4d:7b:a1:1d:3b:02:05:4b:36:c8:7c:
df:1e:ae:20:69:1d:49:36:3c:1b:02:b0:f7:11:da:
aa:38:75:94:93:c1:97:c2:86:f3:26:57:12:b7:ee:
38:b2:18:cc:5b:2c:96:7c:b9:be:d1:79:5f:12:cc:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:75:FA:D5:96:A0:1C:73:20:4A:55:9C:30:32:E6:F2:A5:09:83
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i_V1-tWWoBxzIEpVnDAy5vKlCYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.3.0-81.21.4.255
Signature Algorithm: sha256WithRSAEncryption
2f:eb:f8:dd:a5:68:6a:96:43:99:8e:90:13:38:7c:4c:68:18:
ee:26:ff:32:e6:7a:23:43:15:0f:c1:30:b8:5c:b1:36:e4:ee:
87:60:e1:14:05:06:70:cb:ef:1d:99:d8:1d:f7:da:ac:78:cb:
3f:b5:2e:b3:d1:9a:0d:21:92:74:d1:71:f8:16:9d:45:88:62:
17:bd:25:55:3c:2d:7f:32:dd:a0:25:e5:08:24:7b:d0:89:9b:
d4:6a:0b:88:9c:a2:2f:ec:b6:55:3c:0b:cc:a5:6a:d2:61:ed:
10:20:f2:7e:27:b7:9f:dc:46:c8:da:23:8f:7f:54:5c:dd:07:
09:15:65:16:c0:2f:26:23:25:39:7e:97:a4:fa:8a:8e:5b:d7:
c6:1e:89:74:77:43:9a:e3:c1:9f:e6:70:f8:e9:73:72:9e:ac:
3f:c4:39:27:86:d3:6f:3a:55:72:39:7d:bc:8d:49:93:15:54:
26:4b:e7:4d:e8:97:4e:f6:a4:40:a0:58:46:a3:b8:4a:40:f8:
61:f5:39:67:c4:de:81:21:ab:97:1a:01:ad:fa:a7:46:e1:49:
8d:cd:11:01:13:84:0a:71:b5:05:03:66:d0:5b:1d:47:cb:28:
d0:a9:b9:aa:4b:83:3c:43:5d:be:14:44:23:e7:9b:92:68:47:
6f:14:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org