Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/YQq9jQdso-FoSggiSHHwrEb5MEQ.roa
File: YQq9jQdso-FoSggiSHHwrEb5MEQ.roa (raw, json)
Hash identifier: SclMW69juXcQ4SHluW4J/e1mT41P6X1GaeOhAx0f6/k=
Subject key identifier: 61:0A:BD:8D:07:6C:A3:E1:68:4A:08:22:48:71:F0:AC:46:F9:30:44
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018875EDB24C4111823A32ACD1A42F93B787
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/YQq9jQdso-FoSggiSHHwrEb5MEQ.roa
Signing time: Thu 01 Jun 2023 07:48:11 +0000
ROA not before: Thu 01 Jun 2023 07:48:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198369
IP address blocks: 81.19.132.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Aug 2023 12:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:ed:b2:4c:41:11:82:3a:32:ac:d1:a4:2f:93:b7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jun 1 07:48:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=610abd8d076ca3e1684a08224871f0ac46f93044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:ce:f8:38:9e:60:e5:dd:82:70:52:37:40:
15:05:7a:0f:b9:39:06:9a:ee:00:40:9b:c1:d1:3c:
02:3a:71:c9:c0:b4:f9:f7:01:88:b6:6f:81:04:50:
3d:11:96:3f:93:0d:24:68:94:7d:97:c6:91:21:08:
4e:42:98:59:a6:dc:85:2b:69:f6:b1:9c:ae:c1:a9:
ff:88:7e:07:66:3d:fc:24:80:ac:c2:fc:db:4f:0f:
3d:fb:4c:e7:1a:d3:c3:1e:70:cd:16:6d:67:d0:4e:
9a:66:dc:4c:fc:56:1e:7c:47:27:a8:29:e3:56:ca:
2a:21:b0:12:51:d1:58:f5:e0:6b:aa:e5:96:e5:a0:
06:d8:42:92:a6:21:a4:d1:d4:ea:73:e0:d0:73:61:
76:54:55:7b:3b:bb:c3:3f:66:d9:71:af:60:03:09:
bd:ee:02:f1:92:dd:18:12:41:21:90:59:4d:b7:39:
1c:a3:cf:6e:a9:17:ff:8a:ee:c8:78:f9:76:95:dd:
e7:29:24:c8:fc:1f:b9:aa:dd:fe:14:39:55:88:50:
57:b5:eb:2a:1f:43:5d:ad:6b:c6:c3:a5:15:9a:e9:
b7:2a:10:b7:5e:98:64:c0:1b:a5:09:d5:4f:f0:80:
e7:60:e9:69:cd:83:c6:cd:00:a8:ff:99:55:b4:20:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:BD:8D:07:6C:A3:E1:68:4A:08:22:48:71:F0:AC:46:F9:30:44
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/YQq9jQdso-FoSggiSHHwrEb5MEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e5:50:a2:52:8e:b2:57:5f:1d:2f:30:fd:a1:a6:5b:49:e8:
9e:f4:b1:a5:d7:d6:33:bd:ab:ff:8a:4b:6e:b7:b8:ea:ed:cd:
9c:23:01:01:59:b1:0e:91:8c:22:ee:18:35:c9:33:f5:54:c7:
d3:ab:d4:4c:bd:fa:5c:5a:ac:76:11:55:3e:f2:0a:78:a3:ba:
45:e5:4a:09:1a:6f:7b:94:db:eb:46:d4:04:bb:1a:0e:fc:31:
77:e9:56:f2:ae:2c:d3:af:e4:55:44:7d:8d:f2:8a:d9:04:68:
da:44:0c:76:a2:1e:8e:f0:ba:16:38:a6:4e:70:88:9b:b3:79:
f9:dc:12:ba:46:d5:8c:b5:7c:51:e5:5f:bc:bb:06:a3:f9:ac:
4b:5e:0c:eb:07:89:18:52:3d:98:4b:b4:a7:81:ec:11:f0:45:
75:9f:59:c5:3a:ed:df:78:b2:4e:73:29:3c:6b:ab:bc:c0:e3:
46:c8:f7:4e:d4:dc:42:21:b4:40:81:b3:63:88:c4:5a:d6:61:
2f:f7:a1:bf:b5:d3:62:30:1a:f0:66:78:e8:28:42:8c:a6:50:
4c:d4:23:ca:26:3f:12:9f:51:49:af:f0:ab:fe:46:60:3e:c2:
38:6d:f5:a2:bb:cb:b6:7c:96:a7:5d:c4:2e:72:42:32:8b:20:
22:12:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org