Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/znE0mTeUYY_BaUivuy8mQAryNaY.roa
File: znE0mTeUYY_BaUivuy8mQAryNaY.roa (raw, json)
Hash identifier: IXGwJiTVt2ZqyMcKYDGpI9mC47XI89Kwj6tFdpk88Os=
Subject key identifier: CE:71:34:99:37:94:61:8F:C1:69:48:AF:BB:2F:26:40:0A:F2:35:A6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B05F2DBAE50070B4EB632C35BA58BC5E2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/znE0mTeUYY_BaUivuy8mQAryNaY.roa
Signing time: Fri 06 Oct 2023 17:04:43 +0000
ROA not before: Fri 06 Oct 2023 17:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 81.21.2.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Nov 2023 06:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:f2:db:ae:50:07:0b:4e:b6:32:c3:5b:a5:8b:c5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 6 17:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce7134993794618fc16948afbb2f26400af235a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:f0:4b:59:b1:dc:74:8f:97:43:7b:fe:98:
ed:a2:2e:0f:05:14:18:93:75:69:23:41:11:02:73:
cf:0f:e8:bc:36:0e:a5:34:e1:d4:10:84:e3:6b:0d:
cb:fd:67:7a:e4:68:fc:f4:df:97:6a:a1:ef:b8:84:
48:29:be:97:26:f9:04:88:82:cb:c1:8d:a7:4c:89:
75:5e:b1:c9:50:8b:4f:3d:da:2d:4b:27:66:b6:a5:
33:0e:42:d8:2a:34:b2:67:d2:30:30:6d:a4:25:4f:
6e:01:4e:4f:c8:13:b9:94:b3:d3:12:ee:0e:96:55:
1e:a1:4f:ef:62:64:53:d8:29:e3:75:9a:fc:24:25:
75:e5:75:ce:0b:ea:2e:29:e9:c2:ee:1b:f3:57:63:
bc:5f:ee:96:70:08:c9:23:8b:f7:69:bd:41:e9:33:
d1:49:e4:ef:c9:c7:32:a4:7d:3c:55:67:9d:23:17:
ce:05:f5:96:64:2c:50:a0:6e:dc:c8:51:67:b4:1b:
55:63:3d:00:ef:3a:bb:13:74:35:23:72:a4:c2:bd:
19:f2:c0:7b:c6:d4:fe:8b:1e:c1:75:15:d9:ec:40:
98:31:b0:22:6f:bc:cb:52:4e:c0:69:6e:a9:17:06:
fa:c7:fa:80:0b:19:c3:f1:40:c9:5e:90:0c:f6:54:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:71:34:99:37:94:61:8F:C1:69:48:AF:BB:2F:26:40:0A:F2:35:A6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/znE0mTeUYY_BaUivuy8mQAryNaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.2.0/24
81.21.9.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b5:f9:ff:62:36:6b:36:02:2c:4c:3b:f1:0f:36:df:a5:d9:
98:55:78:76:ec:40:4d:25:1d:e1:b5:f7:de:1a:15:1c:fe:26:
c9:3c:81:6e:b7:f3:e5:06:63:1e:9a:6f:16:2a:45:84:2d:a6:
e1:44:15:53:1a:bf:aa:87:a9:78:29:d8:14:81:84:1e:41:3c:
a6:aa:90:07:bd:31:9c:3a:46:cd:8d:69:17:99:55:14:b2:35:
da:bd:a9:c2:8e:0d:97:4c:53:00:d8:53:f4:ec:62:a3:b1:58:
c4:f0:6a:bd:c1:77:08:d2:d0:74:8f:c2:d9:12:9d:8c:d9:0a:
52:b1:20:08:61:0f:20:fa:90:28:04:b1:44:76:14:ee:ab:18:
95:5a:d2:29:ff:cb:1a:85:36:e5:7c:02:41:6e:5b:ce:42:59:
73:25:e0:ea:e2:c1:f6:3a:a3:ee:be:d6:96:b2:95:af:81:27:
58:66:52:68:97:06:45:46:8d:35:55:28:6b:71:82:24:c1:bc:
87:17:f0:f0:e3:61:86:5e:aa:5d:0a:45:fa:b6:2c:98:b3:0a:
37:3c:dd:50:be:d8:f8:6c:e2:f3:72:d2:a1:34:86:c7:92:9b:
bf:3e:c6:bb:df:e1:6d:ff:53:c6:86:b3:6f:6c:f7:f8:b8:ca:
41:37:b0:82
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsF8tuuUAcLTrYyw1uli8XiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMxMDA2MTcwNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTcxMzQ5OTM3OTQ2MThmYzE2OTQ4YWZiYjJmMjY0MDBhZjIzNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwbwS1mx3HSPl0N7/pjtoi4PBRQY
k3VpI0ERAnPPD+i8Ng6lNOHUEITjaw3L/Wd65Gj89N+XaqHvuIRIKb6XJvkEiILL
wY2nTIl1XrHJUItPPdotSydmtqUzDkLYKjSyZ9IwMG2kJU9uAU5PyBO5lLPTEu4O
llUeoU/vYmRT2CnjdZr8JCV15XXOC+ouKenC7hvzV2O8X+6WcAjJI4v3ab1B6TPR
SeTvyccypH08VWedIxfOBfWWZCxQoG7cyFFntBtVYz0A7zq7E3Q1I3Kkwr0Z8sB7
xtT+ix7BdRXZ7ECYMbAib7zLUk7AaW6pFwb6x/qACxnD8UDJXpAM9lReZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM5xNJk3lGGPwWlIr7svJkAK8jWmMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvem5FMG1UZVVZWV9CYVVpdnV5OG1RQXJ5TmFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURUCAwQA
URUJMA0GCSqGSIb3DQEBCwUAA4IBAQCDtfn/YjZrNgIsTDvxDzbfpdmYVXh27EBN
JR3htffeGhUc/ibJPIFut/PlBmMemm8WKkWELabhRBVTGr+qh6l4KdgUgYQeQTym
qpAHvTGcOkbNjWkXmVUUsjXavanCjg2XTFMA2FP07GKjsVjE8Gq9wXcI0tB0j8LZ
Ep2M2QpSsSAIYQ8g+pAoBLFEdhTuqxiVWtIp/8sahTblfAJBblvOQllzJeDq4sH2
OqPuvtaWspWvgSdYZlJolwZFRo01VShrcYIkwbyHF/Dw42GGXqpdCkX6tiyYswo3
PN1Qvtj4bOLzctKhNIbHkpu/Psa73+Ft/1PGhrNvbPf4uMpBN7CC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org