Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/V4lg8fko2oMoB8tA2wC22gcJvWU.roa
File: V4lg8fko2oMoB8tA2wC22gcJvWU.roa (raw, json)
Hash identifier: ywMOIZ7QKnDmUIBNOK1H5SdY6/yEWZbM03MP1NxF1vk=
Subject key identifier: 57:89:60:F1:F9:28:DA:83:28:07:CB:40:DB:00:B6:DA:07:09:BD:65
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018572281AD1D7023173E5091CD1D023141E
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/V4lg8fko2oMoB8tA2wC22gcJvWU.roa
Signing time: Mon 02 Jan 2023 11:05:08 +0000
ROA not before: Mon 02 Jan 2023 11:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209588
IP address blocks: 81.19.135.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:1a:d1:d7:02:31:73:e5:09:1c:d1:d0:23:14:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 2 11:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578960f1f928da832807cb40db00b6da0709bd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:e7:6f:3f:68:03:a7:10:4d:e1:de:75:98:
af:7b:3b:b2:40:4a:e1:c9:5b:48:fa:55:9d:72:95:
aa:37:92:45:54:58:59:a5:d2:91:81:57:db:ad:dc:
c5:a4:6f:64:a5:87:57:43:a0:56:88:3f:9b:a5:f2:
47:5b:5c:8a:1e:34:b5:4e:11:ec:cc:76:2c:c5:72:
40:42:7a:a0:1b:87:7e:ae:26:73:8b:32:4d:49:4e:
09:e6:36:79:57:bb:b4:42:40:07:ac:f2:6a:5d:ec:
c9:9c:83:ef:b9:a9:c7:b0:b9:55:80:77:cb:83:82:
f2:c9:3c:53:2d:c8:30:c4:0b:ef:10:26:d6:33:af:
7b:bd:e3:3b:53:cc:19:09:81:8f:58:60:9d:ea:19:
b6:a4:37:0c:2e:a0:3c:87:7f:21:8c:53:34:e7:7e:
0f:ea:2f:2e:21:9f:13:b8:a2:b6:2d:0f:8b:4a:cf:
ca:f0:08:83:c2:af:74:b5:1b:ca:ef:bb:e9:44:a1:
9b:fe:b7:be:8f:0e:aa:3c:77:5b:af:c0:4c:49:b9:
94:4a:cc:de:36:44:c2:d1:41:8f:18:e2:10:2f:ec:
38:5d:88:5f:59:c3:0a:7b:04:31:8a:ea:04:72:29:
7d:6d:f7:16:78:e2:6a:ce:61:ea:18:eb:61:15:77:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:89:60:F1:F9:28:DA:83:28:07:CB:40:DB:00:B6:DA:07:09:BD:65
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/V4lg8fko2oMoB8tA2wC22gcJvWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.135.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d3:59:3d:84:fb:34:ed:64:04:42:d8:45:80:a6:46:ec:f9:
3b:ed:f8:a0:4d:5f:49:92:5a:48:df:d8:5c:e4:5b:8a:dc:b1:
51:da:53:91:a3:ed:c8:f0:a0:0a:aa:c1:0a:b5:dd:40:42:33:
2a:c0:79:5b:de:27:5e:4c:30:24:09:8d:d2:63:4a:dd:c3:78:
3e:27:ee:fe:ca:b2:83:52:bd:fe:3e:63:ae:35:67:d7:ce:56:
73:2a:c4:c8:f0:c0:d7:4b:8a:46:d4:15:15:6a:f3:d3:80:f8:
bf:cb:d7:10:4f:44:55:15:12:ca:28:10:38:50:30:03:9e:cf:
f0:b0:99:af:dd:44:77:9d:d8:8e:19:97:b3:70:ec:18:97:00:
8b:75:f4:f3:40:c6:22:d5:65:19:33:e0:a3:0a:bf:c3:d4:7e:
6b:95:ca:d0:46:b1:b4:3d:68:66:08:f5:15:c9:f2:29:61:9d:
89:c9:50:27:3f:03:e5:70:8e:83:b0:62:8a:57:f1:e6:a6:a6:
77:12:d4:f5:d9:ee:a3:a8:63:7e:41:74:ea:22:75:ec:55:4d:
c3:47:d2:72:a7:64:34:05:aa:f6:4e:a4:a4:46:1b:a0:ec:2a:
3f:6e:38:a1:88:d0:6a:6b:db:a8:3f:5f:a0:db:1c:80:a6:34:
0f:f1:97:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org