Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_Vw3mmSF3_sTfhpVQxZkjlScZZw.roa
File: _Vw3mmSF3_sTfhpVQxZkjlScZZw.roa (raw, json)
Hash identifier: 9RMYNfpqiYaltfONbZFYdP8HLUtszsUQrFudBWRyy6c=
Subject key identifier: FD:5C:37:9A:64:85:DF:FB:13:7E:1A:55:43:16:64:8E:54:9C:65:9C
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0185E3C6D84D096E3F12D59F20F15593976A
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_Vw3mmSF3_sTfhpVQxZkjlScZZw.roa
Signing time: Tue 24 Jan 2023 12:35:37 +0000
ROA not before: Tue 24 Jan 2023 12:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 81.19.134.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 23 Sep 2023 20:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:c6:d8:4d:09:6e:3f:12:d5:9f:20:f1:55:93:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 24 12:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd5c379a6485dffb137e1a554316648e549c659c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:2c:72:00:87:b5:c7:cf:a0:c8:6f:2c:98:
5a:08:13:45:33:4a:fd:4d:6b:53:ef:77:a9:40:8f:
fb:b0:c6:d9:e8:b3:99:bb:0f:11:76:17:26:63:10:
87:58:5d:97:01:bd:6f:0f:02:88:de:42:50:6c:ab:
b5:f4:24:a0:24:e3:44:ac:27:d0:b4:53:e0:20:a3:
12:9f:75:48:43:42:1a:75:97:0a:b5:41:0e:c4:9e:
96:5b:f2:41:a4:11:da:79:b0:d3:c0:1b:87:6d:2f:
bb:eb:3f:51:d9:88:db:15:9e:8c:71:f0:1f:1f:73:
4b:ad:ca:61:e0:6c:ce:60:64:1d:47:d4:0a:80:e0:
46:bd:6b:d0:f6:74:a9:8a:70:c6:de:b9:fb:32:e4:
ee:05:47:6a:dd:54:00:ee:f6:cf:b3:07:45:ee:11:
a2:86:0f:e6:86:75:18:00:e0:38:b9:72:d5:e8:11:
59:aa:e4:26:16:8e:07:a4:40:1c:d0:e7:9d:4c:f7:
48:01:85:84:63:5f:28:bb:3a:23:35:f7:3a:be:9b:
86:01:0f:cd:b3:86:79:3f:b1:59:83:03:f8:63:4c:
0c:37:9f:85:cc:18:fb:56:cf:8d:b8:da:a3:70:48:
ec:02:81:f1:af:e9:ac:33:53:31:90:6f:f0:58:05:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5C:37:9A:64:85:DF:FB:13:7E:1A:55:43:16:64:8E:54:9C:65:9C
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_Vw3mmSF3_sTfhpVQxZkjlScZZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.134.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f2:aa:e2:2b:9b:80:39:cb:05:3d:87:74:e8:bf:bf:87:07:
9b:27:8e:25:b3:bd:20:e8:c4:bd:f7:58:d1:2b:d2:ee:94:5a:
03:33:e8:a3:fa:1c:82:da:ea:26:8e:0f:53:80:df:83:a1:98:
ee:dc:2c:f8:42:6d:67:d7:33:4e:9b:69:fe:f3:d3:9a:c1:36:
d1:b4:98:7f:72:c1:33:74:a0:f6:1e:b0:9c:88:eb:0e:aa:1f:
f5:7b:27:5e:c0:78:4f:95:1d:b2:4d:e4:90:cb:88:6e:ba:cf:
99:25:fb:c3:16:a7:f0:e6:1a:6a:e2:47:f6:f7:ea:85:30:ab:
0b:a5:b0:41:30:8a:95:58:59:48:78:91:a9:c6:e9:c7:57:f2:
6c:c3:bb:c1:e6:0a:67:00:ad:b0:dc:12:08:62:dd:d9:4a:77:
9a:d0:fb:83:0c:11:f7:44:3f:0d:3f:4e:77:70:fb:3d:83:ed:
ba:e3:31:2b:cb:5d:98:bc:71:60:c3:e2:9e:1d:83:46:c3:7e:
7e:60:97:c1:f7:97:a3:5d:06:39:7d:ad:87:6b:14:4e:65:cc:
11:b5:b7:00:68:9b:46:45:d8:79:91:39:2e:9a:66:06:0f:87:
ee:d3:35:e9:a9:a8:5b:de:3b:7e:4e:e5:16:55:3a:36:09:3d:
b5:b9:dc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org