Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/fBnNFhmZsDFi_SvOBsinGPcd9go.roa
File: fBnNFhmZsDFi_SvOBsinGPcd9go.roa (raw, json)
Hash identifier: va95SMgtMHfgNE6/zFVsgZ+9f4cA61FLwHaMXV6iDeo=
Subject key identifier: 7C:19:CD:16:19:99:B0:31:62:FD:2B:CE:06:C8:A7:18:F7:1D:F6:0A
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0185722818F09269EC7A84D57C1283E5DFD5
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/fBnNFhmZsDFi_SvOBsinGPcd9go.roa
Signing time: Mon 02 Jan 2023 11:05:08 +0000
ROA not before: Mon 02 Jan 2023 11:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35608
IP address blocks: 81.19.131.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Apr 2023 07:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:18:f0:92:69:ec:7a:84:d5:7c:12:83:e5:df:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 2 11:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c19cd161999b03162fd2bce06c8a718f71df60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:cf:01:43:54:57:97:44:8b:02:2e:eb:5f:
af:b1:8e:e4:69:ec:2b:ed:0c:3c:a8:3f:bf:b7:ba:
dd:8f:31:e3:f1:72:13:a2:ad:6e:75:d3:89:b3:b0:
1e:ff:db:23:89:05:46:44:04:21:e5:d1:8c:79:dd:
48:17:52:16:c0:b2:5f:f4:53:6b:e3:05:8e:ca:1f:
f1:02:46:5b:b3:c1:2c:af:cb:16:dc:8c:69:33:bd:
1c:bf:f5:46:5b:07:02:03:d8:0c:41:12:04:02:97:
37:ed:95:9c:e0:04:16:1b:fe:1a:6f:97:53:4a:33:
bc:43:53:ad:e2:fc:f1:a1:02:ac:a4:12:1f:9a:e0:
3b:2c:2e:e3:59:37:68:dd:c0:d0:e4:7c:9c:f5:11:
76:d3:b2:bb:e2:c0:48:a6:4a:96:ef:39:18:25:68:
1a:f5:8f:e4:67:b2:20:d7:02:99:c8:7a:8f:f0:5d:
b7:99:b3:16:9b:55:05:87:62:fd:36:bd:73:86:27:
16:2b:0f:d4:4c:a3:bc:35:37:0c:50:b3:7f:00:bd:
19:78:ea:a9:65:a3:a3:2e:f5:4a:c2:b8:ad:fc:29:
f8:d7:10:a0:9f:7c:da:3d:8a:81:d7:47:04:5e:3e:
0a:c7:bd:d9:fd:4d:8c:5f:19:fd:da:0e:2c:7d:21:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:19:CD:16:19:99:B0:31:62:FD:2B:CE:06:C8:A7:18:F7:1D:F6:0A
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/fBnNFhmZsDFi_SvOBsinGPcd9go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2f:e0:60:eb:24:61:20:2c:29:9b:b4:5f:2a:46:e9:69:af:
7b:3c:63:bb:00:41:b7:f2:e6:b7:50:8d:70:42:d7:8f:4a:82:
94:75:ce:d7:ba:7f:7a:c1:1e:97:36:68:35:62:d9:05:c9:d8:
ce:0e:a5:4b:18:68:05:b4:00:9e:f5:16:e4:88:a9:e7:33:74:
0e:e1:0a:72:d8:5a:b4:f2:1b:11:30:50:68:f4:5e:e7:bb:81:
6a:f8:c2:b8:71:d2:1b:9d:3d:0a:06:dd:6f:ef:3a:1c:cd:81:
99:83:84:77:df:13:b2:86:1c:de:fe:a4:01:ae:e2:47:15:0a:
e0:c1:0b:f9:64:39:6a:1f:98:3f:7f:f4:54:c7:df:f6:51:15:
6f:d8:75:d0:d3:d2:c9:83:8d:b8:42:09:2e:34:86:ff:cb:ad:
f0:a3:74:f2:08:df:81:ab:47:f6:91:a7:af:bf:84:99:9c:e6:
32:1a:21:99:71:02:23:64:e3:5e:22:88:45:36:9b:80:f9:19:
e3:a7:8b:e0:6f:3a:fe:92:a2:b0:41:86:19:21:a6:4e:61:9d:
43:aa:47:2c:4a:58:10:8a:e9:36:a0:bb:39:a1:02:c5:32:52:
41:81:12:8b:78:64:5e:57:ca:9d:dd:57:cc:09:79:c9:ee:8d:
41:a1:fb:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyKBjwkmnseoTVfBKD5d/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh
N2M3NmIwHhcNMjMwMTAyMTEwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzE5Y2QxNjE5OTliMDMxNjJmZDJiY2UwNmM4YTcxOGY3MWRmNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0XPAUNUV5dEiwIu61+vsY7kaewr
7Qw8qD+/t7rdjzHj8XIToq1uddOJs7Ae/9sjiQVGRAQh5dGMed1IF1IWwLJf9FNr
4wWOyh/xAkZbs8Esr8sW3IxpM70cv/VGWwcCA9gMQRIEApc37ZWc4AQWG/4ab5dT
SjO8Q1Ot4vzxoQKspBIfmuA7LC7jWTdo3cDQ5Hyc9RF207K74sBIpkqW7zkYJWga
9Y/kZ7Ig1wKZyHqP8F23mbMWm1UFh2L9Nr1zhicWKw/UTKO8NTcMULN/AL0ZeOqp
ZaOjLvVKwrit/Cn41xCgn3zaPYqB10cEXj4Kx73Z/U2MXxn92g4sfSFdfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwZzRYZmbAxYv0rzgbIpxj3HfYKMB8GA1UdIwQY
MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt
MjgzZmU1NGE2ZjJmLzEvZkJuTkZobVpzREZpX1N2T0JzaW5HUGNkOWdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm
LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURODMA0G
CSqGSIb3DQEBCwUAA4IBAQBgL+Bg6yRhICwpm7RfKkbpaa97PGO7AEG38ua3UI1w
QtePSoKUdc7Xun96wR6XNmg1YtkFydjODqVLGGgFtACe9RbkiKnnM3QO4Qpy2Fq0
8hsRMFBo9F7nu4Fq+MK4cdIbnT0KBt1v7zoczYGZg4R33xOyhhze/qQBruJHFQrg
wQv5ZDlqH5g/f/RUx9/2URVv2HXQ09LJg424QgkuNIb/y63wo3TyCN+Bq0f2kaev
v4SZnOYyGiGZcQIjZONeIohFNpuA+Rnjp4vgbzr+kqKwQYYZIaZOYZ1DqkcsSlgQ
iuk2oLs5oQLFMlJBgRKLeGReV8qd3VfMCXnJ7o1Bofup
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org