Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rGknENQbFiB3weUtesd7CZ_fTe8.roa
File: rGknENQbFiB3weUtesd7CZ_fTe8.roa (raw, json)
Hash identifier: pAUVYFMlyT+/PZnutp0mzL8ZSYXGyFMRbEkaBCtHA5s=
Subject key identifier: AC:69:27:10:D4:1B:16:20:77:C1:E5:2D:7A:C7:7B:09:9F:DF:4D:EF
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018AA75A57D01CCE4B7AC4194F201FE92748
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rGknENQbFiB3weUtesd7CZ_fTe8.roa
Signing time: Mon 18 Sep 2023 08:13:50 +0000
ROA not before: Mon 18 Sep 2023 08:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
81.21.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 06:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:5a:57:d0:1c:ce:4b:7a:c4:19:4f:20:1f:e9:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 18 08:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac692710d41b162077c1e52d7ac77b099fdf4def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:bc:6e:ac:13:c7:f7:69:fc:7f:d7:6b:e5:
ac:f7:10:28:ef:da:bf:7c:e6:9d:13:67:d5:0f:52:
69:f8:42:d6:d0:f3:d0:d4:fc:cf:be:0b:72:b9:41:
fa:5d:46:74:9c:92:fe:a1:5a:a0:47:ba:5f:fd:e7:
6f:34:98:6b:1b:f9:1d:c0:c2:ec:62:22:a8:f0:25:
9f:d5:5e:65:e8:3a:a7:0a:18:bb:6f:6a:58:60:c4:
0c:b0:cd:5c:ec:ab:e2:b5:77:df:d0:83:84:31:21:
6e:b3:e0:dc:ba:62:97:6d:cc:a3:6f:bf:3e:e8:e4:
b7:30:56:68:1e:f6:bd:5e:0a:d8:6a:a9:7d:a9:fb:
8c:8c:7a:7b:38:75:8d:1c:60:8c:0d:29:fb:c8:7f:
6b:a6:b4:85:2e:3a:fa:4e:f3:37:9d:18:b4:30:be:
be:f1:5e:0d:33:bf:62:be:23:b5:34:cc:f6:5f:7e:
3c:c0:1d:ed:a6:17:f6:d2:5d:a5:99:72:3b:f0:f8:
18:b8:8b:4e:72:47:04:fe:1a:71:0c:3d:94:fa:bf:
5b:1a:9a:d5:ff:c2:75:f8:78:95:59:ed:8a:44:ea:
e9:f0:33:82:95:32:19:06:2a:12:1a:14:f3:e9:10:
8c:e7:21:15:a7:90:2c:f0:41:26:c2:87:b3:9b:4e:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:27:10:D4:1B:16:20:77:C1:E5:2D:7A:C7:7B:09:9F:DF:4D:EF
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rGknENQbFiB3weUtesd7CZ_fTe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.0.0/24
176.57.48.0/24
176.57.54.0/24
176.57.56.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a9:68:fc:0d:78:d6:e3:42:90:b5:f6:6f:0e:7e:74:92:1c:
27:a5:d1:25:ad:dc:95:7d:8c:60:55:36:37:83:cd:54:44:45:
a5:3c:39:0a:04:93:b2:fc:e3:56:d0:3d:12:86:87:cf:f5:fc:
b4:b0:b6:86:13:c9:ca:a8:6d:8f:9d:5d:8a:b5:e0:07:8f:e7:
61:3b:68:9f:5e:cb:d5:e5:5f:16:c7:2a:5c:73:af:a5:97:8b:
e4:1a:72:c3:cd:4d:d7:da:51:68:e5:a2:f3:9f:e0:75:ff:e6:
57:6e:2a:bd:aa:fb:1e:55:30:e8:b8:cd:45:a6:82:0e:13:8f:
7a:37:7d:7f:9c:6f:7c:d6:c9:1d:88:46:04:6e:2e:ac:2c:60:
d5:df:54:14:4b:32:f4:6b:ca:dc:d4:68:49:71:d6:1b:6b:6a:
ae:d4:4a:a3:97:30:59:e6:d7:90:60:cc:b5:bf:d9:f4:78:9a:
ca:9a:e8:db:e6:0c:2a:d9:26:43:56:02:26:09:af:c3:87:3e:
1f:33:25:60:1e:97:4a:3c:1c:b5:70:20:62:2f:4a:90:4e:cd:
fa:ba:50:13:42:c9:a8:c8:b6:59:ed:bd:4d:90:f7:f9:6f:69:
c6:e3:6f:00:b1:07:3c:d4:93:36:54:22:e2:43:da:73:89:7a:
f2:c9:77:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org