Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/0aqhw9PNMYvakzSfprqCjm4_PlQ.roa
File: 0aqhw9PNMYvakzSfprqCjm4_PlQ.roa (raw, json)
Hash identifier: f/B3505q4RdqmBdPRXoQoNA3XD3IBeeGaM6s3dGPIEE=
Subject key identifier: D1:AA:A1:C3:D3:CD:31:8B:DA:93:34:9F:A6:BA:82:8E:6E:3F:3E:54
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018930096B28AF1E7C54593D7D70C973864B
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/0aqhw9PNMYvakzSfprqCjm4_PlQ.roa
Signing time: Fri 07 Jul 2023 11:07:50 +0000
ROA not before: Fri 07 Jul 2023 11:07:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 81.19.137.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 08 Jul 2023 22:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:09:6b:28:af:1e:7c:54:59:3d:7d:70:c9:73:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jul 7 11:07:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1aaa1c3d3cd318bda93349fa6ba828e6e3f3e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:fc:cd:59:d4:9c:4c:6d:e9:1b:62:1d:d6:
5d:9e:20:db:c3:45:39:f6:cc:b7:0b:e8:75:97:e7:
c8:14:9d:45:9b:c9:3a:76:cb:6c:32:4c:db:1c:be:
b3:70:a0:2f:6e:4b:d9:11:24:47:5f:c6:86:16:11:
68:27:9e:7a:f1:78:24:d8:ec:e7:9e:e5:a7:ba:ac:
d5:94:43:66:1f:eb:d5:50:48:e7:1c:75:42:bd:5f:
47:c7:f0:ff:0c:2f:40:b2:60:bd:3a:23:22:a1:83:
5d:73:aa:49:6f:e2:c4:a9:1a:e5:c1:be:0a:fe:fe:
9b:d8:b9:f2:1b:99:b0:c7:d1:b3:80:30:d0:a2:4a:
3f:f7:9d:fb:c2:45:3d:9b:31:88:d6:1a:b8:e3:48:
72:b3:e7:67:97:a1:a9:37:8c:3e:00:05:e5:a1:fb:
1d:f3:0c:24:8b:ed:6f:08:95:30:00:b8:71:ba:85:
fa:9b:84:f7:bf:ee:24:d1:6a:ab:18:a6:ba:f0:aa:
e5:ae:e3:17:dd:bd:71:f3:07:44:c4:df:15:f1:65:
98:6c:61:2a:0f:cf:8a:54:93:c9:cf:80:e2:9e:3a:
32:39:66:7d:14:81:84:bc:23:b1:53:0b:51:09:46:
96:75:87:21:fa:e6:29:9e:64:e9:75:01:89:e6:04:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:A1:C3:D3:CD:31:8B:DA:93:34:9F:A6:BA:82:8E:6E:3F:3E:54
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/0aqhw9PNMYvakzSfprqCjm4_PlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.137.0/24
Signature Algorithm: sha256WithRSAEncryption
51:18:82:ab:08:b8:e7:a5:05:d9:64:86:6d:2b:19:50:e6:6f:
68:63:c1:f7:0b:0b:ad:e7:b8:87:77:c6:a9:b6:e8:16:39:b2:
af:37:57:4a:ff:aa:9a:0e:f3:e7:2c:6a:f6:20:73:65:d7:20:
16:8c:d8:32:06:22:57:3e:ef:7c:5a:31:4d:b7:d7:6f:e8:bb:
83:7d:c5:25:62:a7:86:49:ce:94:f9:44:7e:1c:82:a5:7c:c1:
23:54:76:cf:b1:c3:46:d7:d6:2b:b6:9f:30:a0:fd:a8:f9:ee:
09:a4:19:cb:ba:a6:31:da:10:4c:be:79:fe:dc:a2:5c:95:ef:
0c:73:07:0c:57:29:ad:ee:99:76:45:f7:e9:99:a3:57:66:f0:
e6:e3:67:5d:8c:7c:f6:4f:fb:37:db:a6:13:82:e9:8c:36:e2:
bf:35:cd:ac:5f:0a:63:d6:3e:1b:b0:4b:c4:36:68:d3:4f:b6:
3f:4c:59:aa:cf:1a:46:b2:14:a0:fd:53:02:bc:b4:f3:e0:2a:
30:74:3c:ab:93:e3:cf:39:e7:8a:f3:c6:9b:0c:c1:ff:ac:09:
b8:17:6f:8c:0e:76:30:fe:2e:5d:b8:4a:29:79:6d:88:d0:6a:
e3:ef:a2:f6:b5:4a:1e:dc:f0:ec:cc:72:63:87:5b:61:f3:58:
82:51:4a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org