Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ibjN9Nj24vZWORjY-BqKQ22cD10.roa
File: ibjN9Nj24vZWORjY-BqKQ22cD10.roa (raw, json)
Hash identifier: 4YybZWNA9oJEDPeN/sZVCF3EwmucQV2+J82LpZR/XzY=
Subject key identifier: 89:B8:CD:F4:D8:F6:E2:F6:56:39:18:D8:F8:1A:8A:43:6D:9C:0F:5D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C1EE2AFB22517889108534AF0E67423D1
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ibjN9Nj24vZWORjY-BqKQ22cD10.roa
Signing time: Thu 30 Nov 2023 06:20:21 +0000
ROA not before: Thu 30 Nov 2023 06:20:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 81.21.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:e2:af:b2:25:17:88:91:08:53:4a:f0:e6:74:23:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 30 06:20:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89b8cdf4d8f6e2f6563918d8f81a8a436d9c0f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:e9:dc:9d:a5:f2:09:7e:f1:36:18:66:8b:
c4:65:3c:26:0d:74:41:b6:c3:dc:96:f0:69:7b:b1:
71:fb:01:08:9a:e0:8a:ee:75:1e:d8:ed:65:dc:20:
82:19:71:7a:b9:f7:5b:b6:ad:9d:9e:c1:79:b4:03:
12:18:41:87:35:36:4b:86:fe:25:34:5e:c2:b2:0d:
c3:c3:4b:e7:86:73:77:32:8d:6b:1b:0f:4e:b3:de:
76:c3:79:32:06:f8:68:8d:47:c0:a1:69:00:29:fe:
2f:55:4d:ef:e8:9b:1f:85:a2:d7:8b:de:aa:1c:bd:
6c:e6:1f:c1:d6:d7:ca:3c:27:e6:e2:14:de:f6:f8:
e6:7a:32:41:c6:e3:47:fd:7a:31:65:3c:ca:41:0e:
72:31:5c:a7:1e:c5:6b:7b:83:76:04:08:c6:6f:4d:
35:c0:33:eb:79:c5:95:3a:5e:38:e7:84:59:f0:9b:
20:35:dd:be:44:51:4d:31:e9:90:f3:09:ce:cc:26:
19:5b:82:02:d8:a1:29:6e:47:c3:3e:d4:55:d5:3a:
e5:82:ee:d5:23:12:60:95:a2:60:90:4c:dd:1f:71:
32:06:1f:8b:70:5a:d8:d0:c5:67:99:07:3e:1e:94:
e6:eb:94:b4:f9:78:53:db:2d:c9:dc:83:93:6f:8a:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:CD:F4:D8:F6:E2:F6:56:39:18:D8:F8:1A:8A:43:6D:9C:0F:5D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ibjN9Nj24vZWORjY-BqKQ22cD10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.8.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9d:55:2c:a6:34:7c:a9:33:10:57:54:ee:41:a9:60:90:93:
96:ed:1e:18:38:e3:04:11:4f:52:ec:26:e5:5b:cc:86:66:c6:
7f:d7:ec:9d:00:e1:12:2e:31:8c:69:2a:ab:54:52:be:61:57:
26:0b:15:57:c7:83:9d:c2:e2:b8:24:ff:52:95:35:cc:66:38:
32:4e:30:39:c2:9c:ca:db:35:89:f9:f6:be:13:02:b2:fd:fe:
ac:05:b1:40:67:d1:ed:3b:63:6e:52:6c:7d:f2:e4:38:58:f4:
30:76:55:b5:89:7e:2d:38:2e:82:db:fc:83:2e:e3:d7:5a:5e:
8e:bf:57:f0:2e:48:7c:ef:f6:77:2f:93:23:4e:60:6b:72:db:
56:2e:ad:ef:43:24:ab:36:92:ca:cc:d2:05:ce:01:43:b1:ba:
0c:4b:37:13:fd:dc:d7:13:72:a0:8d:80:2e:d7:70:10:af:63:
34:1f:09:89:7c:43:41:d2:d7:93:22:17:91:a6:3d:36:e6:46:
e3:a4:04:ab:48:ef:9f:90:7e:16:24:b6:e7:9d:f1:dc:67:01:
7c:5b:ef:ed:91:5e:66:cf:2a:e9:45:02:e0:70:61:43:5b:72:
6b:3c:07:22:d0:84:28:8f:fb:fe:72:53:82:9c:33:fd:51:c8:
43:fa:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org