Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pOiBqixb2563XqmxFK9Azmqh1ls.roa
File: pOiBqixb2563XqmxFK9Azmqh1ls.roa (raw, json)
Hash identifier: Bai+CblNBuv14F6XvN1BTX5J3fSpMTHz0ndr8q6GyKo=
Subject key identifier: A4:E8:81:AA:2C:5B:DB:9E:B7:5E:A9:B1:14:AF:40:CE:6A:A1:D6:5B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0192D8357D6BC4930B1E62FA07F4ED585145
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pOiBqixb2563XqmxFK9Azmqh1ls.roa
Signing time: Tue 29 Oct 2024 12:17:17 +0000
ROA not before: Tue 29 Oct 2024 12:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50670
IP address blocks: 81.21.14.0/24 maxlen: 24
109.237.192.0/20 maxlen: 24
109.237.192.0/24 maxlen: 24
109.237.193.0/24 maxlen: 24
109.237.194.0/24 maxlen: 24
109.237.195.0/24 maxlen: 24
109.237.196.0/24 maxlen: 24
109.237.197.0/24 maxlen: 24
109.237.198.0/24 maxlen: 24
109.237.199.0/24 maxlen: 24
109.237.200.0/24 maxlen: 24
109.237.201.0/24 maxlen: 24
109.237.202.0/24 maxlen: 24
109.237.203.0/24 maxlen: 24
109.237.204.0/24 maxlen: 24
109.237.205.0/24 maxlen: 24
109.237.206.0/24 maxlen: 24
109.237.207.0/24 maxlen: 24
176.241.64.0/21 maxlen: 24
176.241.64.0/24 maxlen: 24
176.241.65.0/24 maxlen: 24
176.241.66.0/24 maxlen: 24
176.241.67.0/24 maxlen: 24
176.241.68.0/24 maxlen: 24
176.241.69.0/24 maxlen: 24
176.241.70.0/24 maxlen: 24
176.241.71.0/24 maxlen: 24
178.20.184.0/21 maxlen: 24
178.20.184.0/24 maxlen: 24
178.20.185.0/24 maxlen: 24
178.20.186.0/24 maxlen: 24
178.20.187.0/24 maxlen: 24
178.20.188.0/24 maxlen: 24
178.20.189.0/24 maxlen: 24
178.20.190.0/24 maxlen: 24
178.20.191.0/24 maxlen: 24
185.51.212.0/22 maxlen: 22
185.51.212.0/24 maxlen: 24
185.51.213.0/24 maxlen: 24
185.51.214.0/24 maxlen: 24
185.51.215.0/24 maxlen: 24
185.193.176.0/22 maxlen: 22
185.193.176.0/24 maxlen: 24
185.193.177.0/24 maxlen: 24
185.193.178.0/24 maxlen: 24
185.193.179.0/24 maxlen: 24
2a01:1d0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 04 Nov 2024 07:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:35:7d:6b:c4:93:0b:1e:62:fa:07:f4:ed:58:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 29 12:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4e881aa2c5bdb9eb75ea9b114af40ce6aa1d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:7b:f1:a6:c2:06:dc:16:9d:83:f0:5d:5a:
98:de:e2:f9:cf:5c:df:7e:a0:97:b8:de:bd:86:a7:
62:0e:ef:b1:24:49:fe:cd:66:a7:2f:54:bf:fe:fe:
10:5c:3b:66:aa:f5:12:fc:63:fe:38:3d:eb:32:c4:
1c:71:05:10:87:0c:c3:85:57:4b:00:d3:8d:80:fa:
0a:56:58:ad:60:55:80:2e:e7:1e:5e:a0:28:68:a3:
4b:ed:4c:b2:8d:72:5d:74:1f:c9:0b:9c:a0:f1:a0:
ed:4a:c7:a2:a2:e4:6a:94:92:e3:38:fc:09:35:69:
80:fa:ba:48:81:64:0f:b9:fa:6a:7e:7c:8a:c6:db:
60:57:94:46:e5:2a:7c:11:30:5b:75:0f:f7:47:e0:
09:0c:8b:85:94:fe:35:56:4e:ee:2f:2e:69:d3:4a:
a4:a2:5f:1e:01:63:54:00:1c:17:de:36:f3:3e:f8:
df:3c:fa:5b:b1:1a:a1:9a:a5:e0:03:6a:03:c5:6e:
47:96:85:86:02:29:9e:09:b6:f6:38:5b:0c:ae:cb:
8c:08:5b:d6:70:1c:63:3a:f2:97:27:a8:91:e3:02:
dc:b7:b6:ef:34:61:5b:79:bb:4a:b0:77:27:d2:fc:
c8:c0:1c:2b:46:9e:53:37:9d:45:fb:67:19:a4:ab:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E8:81:AA:2C:5B:DB:9E:B7:5E:A9:B1:14:AF:40:CE:6A:A1:D6:5B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pOiBqixb2563XqmxFK9Azmqh1ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.14.0/24
109.237.192.0/20
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
185.193.176.0/22
IPv6:
2a01:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:26:92:aa:cc:ef:74:58:f5:61:8f:c1:9a:cf:32:49:7e:e5:
5d:c8:49:8b:25:ef:fd:0a:b5:ae:b6:f3:3b:4a:87:61:16:2a:
01:3c:a4:52:4d:d2:cb:f2:c9:e1:26:db:66:25:65:7e:00:74:
2a:26:ba:50:99:28:87:0c:fd:e8:45:dc:ee:69:3e:1c:62:3e:
28:30:c5:5e:ce:f5:ea:f6:27:34:60:49:9c:6f:29:aa:04:38:
f8:56:a7:2d:9a:71:b2:76:67:a9:11:8b:8e:12:27:27:db:81:
b8:64:78:34:5b:cd:9a:34:b0:ab:44:73:55:f1:fa:7f:3b:7b:
4b:ea:49:b2:69:51:46:bb:37:1e:f0:27:ad:3c:49:9d:f6:22:
8d:04:19:f8:fa:8d:a7:20:c2:ef:5e:e1:a8:69:dd:da:ee:8b:
f1:7e:43:cf:e6:db:4a:3c:2b:0c:be:9c:56:b6:a3:33:e3:22:
a3:4d:f0:d7:89:a1:15:cc:59:5c:05:67:09:a1:88:02:40:cf:
dd:93:64:7a:4b:33:8d:34:66:75:1f:59:8d:91:a8:66:52:db:
bc:11:77:b6:e6:52:a6:b9:55:9e:b6:56:1f:ed:4e:25:af:82:
1d:e0:0f:03:03:fa:83:cf:9b:f6:41:ff:29:4a:c9:19:bf:85:
0a:fa:41:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 08:26:38 2024 by rpki-client on console-fra.rpki-client.org