Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/480HsjoXpOpURiEQ4WemnzaQJ7Y.roa
File: 480HsjoXpOpURiEQ4WemnzaQJ7Y.roa (raw, json)
Hash identifier: 90Emh6REkxVLAtEU03bEePmPlbhbWl4qR/dDnCvetOA=
Subject key identifier: E3:CD:07:B2:3A:17:A4:EA:54:46:21:10:E1:67:A6:9F:36:90:27:B6
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0187997EDF81CF25BB6E1BF69FBB22E81EC2
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/480HsjoXpOpURiEQ4WemnzaQJ7Y.roa
Signing time: Wed 19 Apr 2023 12:30:41 +0000
ROA not before: Wed 19 Apr 2023 12:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24658
IP address blocks: 81.19.128.0/20 maxlen: 32
2a10:ad80::/48 maxlen: 128
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:7e:df:81:cf:25:bb:6e:1b:f6:9f:bb:22:e8:1e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Apr 19 12:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3cd07b23a17a4ea54462110e167a69f369027b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:17:0a:2f:a8:8e:ea:d4:de:af:3d:c6:f2:
cf:fc:3d:25:af:be:0f:36:8f:72:6d:f8:32:ac:ad:
78:8a:00:fb:0e:05:a4:b5:59:30:fd:41:16:1f:f0:
5f:c3:a0:f4:a3:8a:66:48:f5:e5:9b:e0:1d:6c:3e:
d9:ee:c3:7e:cb:c4:73:a1:d4:13:be:f3:42:d8:a1:
db:25:65:8a:3a:44:50:df:f2:92:11:ce:08:4c:f3:
b8:23:0a:96:a0:90:9c:1c:36:00:05:cb:81:49:85:
f1:69:0c:16:3a:f5:f7:9f:cf:78:98:5d:84:c9:4c:
71:dc:15:89:e7:11:90:23:28:66:50:fd:be:87:2c:
47:2d:f8:32:10:5b:07:0c:e2:d2:c9:40:96:f8:94:
9b:a6:ce:e1:bb:a5:52:28:03:bc:22:d3:d6:aa:7d:
8a:84:0b:a1:bf:e2:b9:b9:78:13:a9:d8:5c:c3:84:
be:7a:06:dc:73:18:c7:67:12:a6:47:17:c7:81:40:
46:37:31:3f:b1:0e:f9:41:55:7d:d9:48:3b:88:db:
f8:fe:d2:40:46:1b:3a:d2:e4:bb:6b:de:39:d0:90:
de:16:00:e6:5a:83:15:18:b9:4c:9d:e4:c2:a3:4d:
87:61:97:f9:b0:29:51:ad:1f:24:0e:93:79:bf:a1:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:07:B2:3A:17:A4:EA:54:46:21:10:E1:67:A6:9F:36:90:27:B6
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/480HsjoXpOpURiEQ4WemnzaQJ7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.128.0/20
IPv6:
2a10:ad80::/48
Signature Algorithm: sha256WithRSAEncryption
77:67:9e:83:63:5f:8e:59:95:33:a4:a6:39:e4:21:60:bd:24:
7f:00:9e:89:f4:9c:75:3f:2d:f4:9e:4b:71:04:97:b0:66:1a:
bf:a0:7c:ba:00:f9:ed:74:3e:ea:1a:73:56:03:8a:f9:7b:ce:
5e:f5:77:bc:19:0f:a7:81:c6:04:05:ac:67:19:2b:d3:36:e9:
ae:d1:80:7e:e1:36:a4:2b:56:55:13:cc:e9:09:dd:78:30:92:
13:46:5f:0e:f2:84:fe:e4:ca:58:93:7c:0e:48:63:0f:09:4d:
68:4b:cb:34:d2:7c:14:67:dc:95:10:3c:f3:b6:94:62:96:fe:
0d:f5:6d:6b:20:f1:51:e4:db:f4:36:f0:8a:0c:ab:19:65:4f:
43:b4:d2:ae:11:a4:45:55:8f:87:c6:6f:6d:34:2c:97:74:59:
38:7c:83:07:72:28:8c:cf:d8:d4:e8:b5:9d:9d:7e:77:25:1e:
57:c3:3a:96:16:b4:c0:9d:1e:3f:53:e2:74:46:c2:d5:21:18:
4c:e1:c8:7f:f0:d3:74:56:fe:a8:d7:ba:c4:4e:77:74:93:d1:
92:79:df:86:98:1f:17:c0:1d:1f:91:c4:8e:a8:19:1d:0f:5d:
4a:58:76:8e:ee:4c:a8:79:69:6f:18:2a:d0:ec:cf:03:eb:55:
a2:34:39:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org