Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/v_TbfqA-MdS_-yfG2Pl1XIVm7ms.roa
File: v_TbfqA-MdS_-yfG2Pl1XIVm7ms.roa (raw, json)
Hash identifier: TlWpHNSvjg6kGSw/5JQA6MVUezqTNSbuF9qss4l2GNU=
Subject key identifier: BF:F4:DB:7E:A0:3E:31:D4:BF:FB:27:C6:D8:F9:75:5C:85:66:EE:6B
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 018571B0ACC93E6125620A40C80516B471D0
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/v_TbfqA-MdS_-yfG2Pl1XIVm7ms.roa
Signing time: Mon 02 Jan 2023 08:54:42 +0000
ROA not before: Mon 02 Jan 2023 08:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8726
IP address blocks: 81.21.192.0/21 maxlen: 21
81.21.200.0/22 maxlen: 22
81.21.204.0/23 maxlen: 23
81.21.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ac:c9:3e:61:25:62:0a:40:c8:05:16:b4:71:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jan 2 08:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff4db7ea03e31d4bffb27c6d8f9755c8566ee6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:dc:91:f5:37:ea:71:1b:d7:c4:3e:36:41:
5c:96:d6:b7:7c:e2:01:26:d3:1a:8f:2b:31:fd:c9:
89:87:9a:f3:81:5d:0a:27:60:0e:07:0b:68:13:c7:
8a:bb:cd:63:ec:a6:d4:02:42:37:4a:d1:db:d0:36:
b1:0f:85:04:ec:f8:ec:46:40:ac:33:ea:4f:f1:ba:
b7:42:1d:af:6f:e4:ba:7c:e1:66:82:fd:51:1d:90:
bc:a8:54:2d:25:93:ff:ac:1a:dd:9f:68:4d:57:f8:
4d:ba:d4:e0:38:9b:c7:95:18:f1:a3:1a:fb:8c:0f:
01:85:8b:6b:de:2c:6b:37:7b:e3:48:6c:91:f7:29:
ee:80:42:48:a7:6e:56:65:a3:78:85:35:5c:7a:2b:
0c:0c:1e:30:16:4c:d4:f8:2c:e8:70:a9:26:d9:33:
fa:ce:27:4f:7f:2c:88:7d:37:3c:67:d4:5d:11:a3:
e2:89:08:e7:1f:54:78:8d:a3:a2:b1:eb:c4:83:4a:
56:23:92:c9:70:43:0c:37:76:ac:8e:16:01:8f:9c:
f2:38:17:23:f4:54:55:ae:87:90:2d:b9:32:a4:4f:
10:3a:10:41:8b:50:2f:55:9f:51:56:28:88:60:32:
ee:d7:49:41:da:da:ac:85:76:d6:4a:04:f9:14:1b:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F4:DB:7E:A0:3E:31:D4:BF:FB:27:C6:D8:F9:75:5C:85:66:EE:6B
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/v_TbfqA-MdS_-yfG2Pl1XIVm7ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.192.0-81.21.205.255
81.21.207.0/24
Signature Algorithm: sha256WithRSAEncryption
32:54:f9:f5:35:a3:40:66:47:16:c9:32:f9:fc:8a:66:25:f5:
8a:5a:81:b9:79:79:c6:61:9b:7e:5b:bc:9f:ee:f3:71:88:dc:
8c:5a:ec:0c:d4:31:20:43:7c:84:ac:e7:97:67:34:ba:0b:5a:
7c:4e:9a:a3:84:4c:03:2d:5a:3c:e4:09:2b:49:51:43:d0:50:
b9:41:4d:a2:a1:ba:e2:59:72:11:22:ed:c9:49:b1:92:80:bf:
83:12:a2:7b:94:b7:13:75:bc:eb:95:e1:52:d3:a5:c5:bf:0c:
5f:01:04:06:75:6e:cf:55:71:aa:12:2f:c1:d0:29:98:a0:cc:
76:29:b8:f6:cb:20:0d:17:d9:4b:3e:1c:b2:bb:79:42:df:b9:
d5:ab:c3:7b:56:d3:ca:12:9e:54:e9:ab:72:47:d9:e4:9d:4e:
49:49:b0:a0:c3:89:8b:f8:8d:1c:cb:78:03:29:d6:d6:4d:7e:
27:43:ae:c6:76:59:ac:ee:42:86:28:53:86:2f:b5:ed:7b:be:
f7:4f:2f:f5:c3:2a:97:6a:8c:ae:b1:93:98:df:e1:a3:7b:d8:
cc:bb:a1:5f:1e:69:0e:5b:94:49:e7:c7:dd:36:0c:9b:d8:67:
c8:3b:e9:d5:a7:cc:bc:ea:73:ed:ad:f2:fd:9f:d3:30:4c:42:
40:f1:2d:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org