Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/lxofX3XP0p3XWpf0d_xQMm9a2Hk.roa
File: lxofX3XP0p3XWpf0d_xQMm9a2Hk.roa (raw, json)
Hash identifier: 1gm0DRZduf0HOV4tl1l63E0keW1xQR1/qkVB8d14mx8=
Subject key identifier: 97:1A:1F:5F:75:CF:D2:9D:D7:5A:97:F4:77:FC:50:32:6F:5A:D8:79
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 01857228177553A50B750DF468234704218D
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/lxofX3XP0p3XWpf0d_xQMm9a2Hk.roa
Signing time: Mon 02 Jan 2023 11:05:08 +0000
ROA not before: Mon 02 Jan 2023 11:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24658
IP address blocks: 81.19.128.0/20 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Apr 2023 12:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:17:75:53:a5:0b:75:0d:f4:68:23:47:04:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 2 11:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971a1f5f75cfd29dd75a97f477fc50326f5ad879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:d3:e6:8a:a2:fe:9f:31:6e:91:f1:c1:b4:
67:ce:1a:89:7d:5b:69:2f:94:ea:34:04:03:51:f5:
70:b1:f9:5e:9b:3f:13:d4:e4:28:78:1b:46:43:61:
51:e5:48:34:d4:40:08:55:cc:5a:e1:7f:bb:5c:66:
a3:a9:50:9b:8d:63:32:d3:c9:04:24:b4:df:d7:ff:
89:34:3b:37:36:b4:80:77:5d:65:99:ed:39:c0:48:
80:e4:fd:b9:31:d5:2a:1e:24:e6:28:b0:ea:e1:1b:
12:ca:7e:c1:ac:19:92:de:50:41:b3:e3:15:c9:1e:
a9:8a:47:8b:29:35:95:98:34:e5:f2:87:8f:43:bd:
6e:66:71:14:01:3a:a0:f9:3d:a3:d9:33:0c:97:eb:
62:3c:88:3f:ed:ff:03:09:8b:10:bd:6b:7c:23:72:
ff:b5:92:7a:b0:14:de:7b:7c:9b:9c:9d:66:62:98:
ea:6b:0e:b2:ee:a2:e0:2d:a1:7c:a5:9a:97:ef:cc:
6e:98:02:ea:aa:2f:d4:49:40:f9:11:5a:0d:7f:bb:
4b:d0:96:18:00:21:a3:0d:d5:94:41:0e:cd:6d:1b:
74:17:54:6e:1b:6d:a6:61:c1:06:76:0e:73:e9:80:
2f:91:67:42:68:16:aa:b2:6e:ce:48:da:62:f4:0b:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:1F:5F:75:CF:D2:9D:D7:5A:97:F4:77:FC:50:32:6F:5A:D8:79
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/lxofX3XP0p3XWpf0d_xQMm9a2Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.128.0/20
Signature Algorithm: sha256WithRSAEncryption
04:81:1c:76:36:23:5b:e5:ba:6b:3c:b4:d1:44:19:6f:3c:0c:
f1:a7:67:75:dc:90:eb:28:40:3b:73:78:e7:08:06:cc:ad:b7:
90:11:f4:c6:63:cd:77:22:83:11:a2:36:56:b9:4e:bd:2e:48:
a9:37:7f:1a:60:0a:af:9a:b1:e1:73:71:f7:01:9a:b4:94:22:
bf:9b:c4:8b:2b:c3:9c:cf:96:05:5e:7a:44:af:23:00:79:f5:
1e:f0:43:f2:97:31:91:ca:6c:0a:56:f8:cb:fa:05:45:9d:72:
1a:1d:56:a8:56:39:27:88:6a:ca:ea:52:86:1e:ee:de:a6:d7:
28:58:b2:6b:1d:fe:6e:70:73:e8:a0:18:4a:93:15:ab:04:00:
ca:85:11:71:ba:71:cf:45:09:19:6c:04:79:af:70:65:61:7b:
08:1d:ad:72:e0:1b:67:7d:68:2d:3e:0f:1e:2c:e1:1d:e3:23:
cd:ce:46:6d:e6:15:6a:b1:c4:46:1f:55:b1:d7:b9:f4:1d:e6:
79:b3:d4:e6:a2:f6:41:a0:d3:97:a1:1c:3d:c6:b5:fc:d4:b4:
28:ad:a8:66:d9:4a:d2:3e:00:54:64:dd:ef:ab:9a:3f:09:fa:
ba:30:35:8d:06:84:c1:6d:11:63:d2:f7:37:ab:25:69:9e:17:
e0:5e:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org