Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/TEhrwx3GkvLMxHFRQAHu8iNr8sg.roa
File: TEhrwx3GkvLMxHFRQAHu8iNr8sg.roa (raw, json)
Hash identifier: WGEZppRJRILTIP1TzGgh+xg3RPxS7YWRJlK9Dc6NAkQ=
Subject key identifier: 4C:48:6B:C3:1D:C6:92:F2:CC:C4:71:51:40:01:EE:F2:23:6B:F2:C8
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018572281857770836549EE0256E03BF9333
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/TEhrwx3GkvLMxHFRQAHu8iNr8sg.roa
Signing time: Mon 02 Jan 2023 11:05:08 +0000
ROA not before: Mon 02 Jan 2023 11:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 81.19.133.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:18:57:77:08:36:54:9e:e0:25:6e:03:bf:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 2 11:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c486bc31dc692f2ccc471514001eef2236bf2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d3:19:0c:c7:67:ba:e9:8c:4f:c2:cf:f1:0f:
64:f4:15:84:70:4d:c6:d4:fc:2c:73:c3:ec:24:e0:
37:6c:97:8d:d6:d2:37:de:67:a7:40:dd:19:37:31:
36:31:c1:2c:a0:bc:f3:49:91:46:93:eb:9c:c6:88:
9f:b5:61:b9:a5:b2:a9:7c:0a:09:07:82:80:36:23:
03:d8:ff:65:4d:6c:87:e0:89:ae:66:87:f8:4d:e4:
14:93:00:94:94:a2:63:88:97:31:fe:d3:94:a8:1c:
ee:9c:07:2c:92:ad:9f:cf:c2:1a:7e:1e:8d:22:68:
5d:b1:bd:13:0a:a3:0f:0b:4a:0a:8b:97:c0:3e:06:
24:07:e1:43:c5:94:35:09:32:b1:bb:22:d0:8b:72:
de:c2:99:e3:d9:3a:60:1c:2b:31:6c:93:c8:12:6b:
e4:45:1e:5b:c4:ba:00:d1:4d:d7:42:c4:d3:15:49:
c3:4b:24:d6:7c:fd:c9:34:40:39:d1:54:10:3b:d8:
4d:ad:b5:26:66:c8:6c:81:32:6f:0c:f1:3e:bc:f4:
1b:b8:dd:03:26:d5:e1:f6:c6:ad:a5:e4:2b:ff:a1:
90:e4:35:0c:f4:3a:9b:0a:36:0d:94:fa:34:56:75:
a0:c7:c6:3d:63:03:1b:d2:10:08:7f:c5:72:3c:e8:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:6B:C3:1D:C6:92:F2:CC:C4:71:51:40:01:EE:F2:23:6B:F2:C8
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/TEhrwx3GkvLMxHFRQAHu8iNr8sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.133.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:3a:3f:56:ca:ce:10:27:72:0b:1b:c4:b7:9c:9e:c6:3e:56:
a7:25:b5:b4:79:d1:8f:e0:b3:39:6d:06:34:68:27:e0:ab:d1:
47:0a:c5:df:55:81:39:c4:7b:73:48:e6:35:e7:bf:f5:63:92:
c1:01:e0:8e:b8:4a:56:c7:54:0d:cc:02:cb:c6:3c:21:ce:b9:
43:88:e1:dc:e7:6f:28:c7:2c:ae:46:11:ae:46:cc:c0:43:47:
50:0b:d3:f2:89:0b:d2:32:59:d3:60:73:a6:96:5a:70:14:73:
8b:ab:e1:5d:d4:01:8e:9a:3a:50:84:cf:ff:f8:10:e5:67:ec:
68:e9:cd:af:67:3e:84:02:c7:89:b9:20:ef:17:c9:3c:00:8f:
9a:6a:1a:9e:98:35:79:4f:fd:90:22:08:f2:62:f2:4f:91:70:
38:a8:e4:2b:7c:f7:65:87:d5:24:7a:f7:05:33:e0:0f:df:c2:
e5:e4:33:ee:e7:e9:66:99:bd:15:a7:42:76:31:d7:2c:76:85:
4f:07:0a:8f:54:ca:b1:f8:1c:b6:0d:e0:99:2d:32:c1:4b:ea:
89:a1:8e:71:f9:e7:9c:29:f2:4f:21:e2:fa:5a:fc:3b:cd:96:
7e:66:d6:6c:e4:12:f9:40:3b:bc:f7:7f:d1:85:47:da:02:33:
0c:1f:32:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyKBhXdwg2VJ7gJW4Dv5MzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh
N2M3NmIwHhcNMjMwMTAyMTEwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzQ4NmJjMzFkYzY5MmYyY2NjNDcxNTE0MDAxZWVmMjIzNmJmMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NMZDMdnuumMT8LP8Q9k9BWEcE3G
1Pwsc8PsJOA3bJeN1tI33menQN0ZNzE2McEsoLzzSZFGk+ucxoiftWG5pbKpfAoJ
B4KANiMD2P9lTWyH4ImuZof4TeQUkwCUlKJjiJcx/tOUqBzunAcskq2fz8Iafh6N
Imhdsb0TCqMPC0oKi5fAPgYkB+FDxZQ1CTKxuyLQi3Lewpnj2TpgHCsxbJPIEmvk
RR5bxLoA0U3XQsTTFUnDSyTWfP3JNEA50VQQO9hNrbUmZshsgTJvDPE+vPQbuN0D
JtXh9satpeQr/6GQ5DUM9DqbCjYNlPo0VnWgx8Y9YwMb0hAIf8VyPOjDmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFExIa8MdxpLyzMRxUUAB7vIja/LIMB8GA1UdIwQY
MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt
MjgzZmU1NGE2ZjJmLzEvVEVocnd4M0drdkxNeEhGUlFBSHU4aU5yOHNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm
LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUROFMA0G
CSqGSIb3DQEBCwUAA4IBAQDAOj9Wys4QJ3ILG8S3nJ7GPlanJbW0edGP4LM5bQY0
aCfgq9FHCsXfVYE5xHtzSOY157/1Y5LBAeCOuEpWx1QNzALLxjwhzrlDiOHc528o
xyyuRhGuRszAQ0dQC9PyiQvSMlnTYHOmllpwFHOLq+Fd1AGOmjpQhM//+BDlZ+xo
6c2vZz6EAseJuSDvF8k8AI+aahqemDV5T/2QIgjyYvJPkXA4qOQrfPdlh9UkevcF
M+AP38Ll5DPu5+lmmb0Vp0J2MdcsdoVPBwqPVMqx+By2DeCZLTLBS+qJoY5x+eec
KfJPIeL6Wvw7zZZ+ZtZs5BL5QDu893/RhUfaAjMMHzIY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org