Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_nGeM29afZnD1EVK2jaKRfbR2v8.roa
File: _nGeM29afZnD1EVK2jaKRfbR2v8.roa (raw, json)
Hash identifier: l45evJhgx96HbqfocEXzztCowB41zzOy8z1H8QYecdk=
Subject key identifier: FE:71:9E:33:6F:5A:7D:99:C3:D4:45:4A:DA:36:8A:45:F6:D1:DA:FF
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018771CE275FC8DA69E2FAE874CA83758B5A
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_nGeM29afZnD1EVK2jaKRfbR2v8.roa
Signing time: Tue 11 Apr 2023 19:32:28 +0000
ROA not before: Tue 11 Apr 2023 19:32:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 81.19.131.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:ce:27:5f:c8:da:69:e2:fa:e8:74:ca:83:75:8b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Apr 11 19:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe719e336f5a7d99c3d4454ada368a45f6d1daff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:8f:4e:c8:42:c5:17:68:c9:04:04:64:7d:
2b:c4:71:c5:7a:25:7c:7a:40:8a:c1:ce:e4:bc:3d:
e6:60:72:cf:24:41:1d:0e:50:00:aa:ed:a8:02:c3:
95:76:62:29:fa:4b:da:e7:6d:90:c5:31:82:bc:bf:
24:7a:00:b2:9b:ff:18:9a:7c:8b:cf:44:89:51:7b:
5c:dc:fd:92:ed:b2:31:c7:b8:c0:14:ba:93:9f:8d:
21:5b:2d:35:34:d8:18:5e:33:47:12:65:2a:1f:97:
88:2f:17:c5:81:69:c1:50:c6:ed:77:02:4c:6a:0a:
e8:f1:9c:d9:76:bf:d0:d8:94:27:f6:35:26:98:93:
55:4a:a3:13:59:e1:9d:e7:47:33:4d:10:63:99:bd:
68:ab:6b:8e:8b:27:25:5e:41:f8:55:64:65:aa:a7:
16:e7:6f:23:e6:c0:b0:f8:64:df:c2:48:ec:99:bf:
4e:23:dd:a3:98:bc:87:b8:96:3e:5d:69:33:64:aa:
b1:4e:c0:4a:68:f5:96:0e:ad:0e:18:51:8d:a4:db:
ff:09:74:cc:30:7f:03:98:12:14:87:76:69:11:74:
8f:42:d4:62:9c:9c:13:43:3f:26:76:0a:e1:92:43:
05:db:3a:e9:45:63:37:7c:68:9d:7c:50:c9:c9:6a:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:71:9E:33:6F:5A:7D:99:C3:D4:45:4A:DA:36:8A:45:F6:D1:DA:FF
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_nGeM29afZnD1EVK2jaKRfbR2v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
Signature Algorithm: sha256WithRSAEncryption
35:de:c4:78:31:36:33:cc:54:22:ac:fa:ab:19:28:0c:78:57:
e1:8d:0c:6e:a6:fd:57:29:44:4a:73:ce:60:e1:82:26:bb:15:
99:18:6f:9d:02:44:ad:dc:2b:23:7e:ee:39:45:69:8d:ca:12:
bb:05:e4:bc:d5:2c:a1:ff:cb:74:0e:d2:6f:ed:ee:70:7c:7f:
18:10:f3:8e:53:ef:ad:cb:9b:c4:d7:bb:fd:33:61:61:80:2a:
bf:b0:aa:47:d0:dc:94:27:16:46:bc:2c:53:a1:10:2e:84:8f:
1c:6a:c1:61:44:0c:e3:52:e4:fc:77:53:df:0e:c6:41:eb:ca:
db:59:15:b0:8c:05:af:a4:d8:1f:31:12:c8:7a:51:75:51:70:
93:18:4e:d9:42:41:f4:b0:20:51:fb:a6:2f:b3:2c:e5:fb:9a:
4e:87:2c:bf:77:49:0a:65:f6:50:95:71:7e:04:d2:2d:11:4a:
0e:98:fa:b2:70:64:5d:92:27:c2:92:e8:c9:bd:92:2c:e5:a7:
88:99:bc:fd:ad:78:66:ad:f2:6d:e5:f7:f7:30:fb:ca:13:ec:
15:91:77:d3:ea:c8:8b:9e:d8:66:29:5a:09:14:2f:a7:e2:56:
96:a0:46:6a:1b:ac:65:fe:0b:d9:37:49:74:a7:45:d2:15:87:
59:d9:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org