Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/sVrIR6FGFs280xaGX0av0X41I0A.roa
File: sVrIR6FGFs280xaGX0av0X41I0A.roa (raw, json)
Hash identifier: +oYkMg98aeJ5sbCZAk9tIKuO4M3QkNFdhM/25XvYKis=
Subject key identifier: B1:5A:C8:47:A1:46:16:CD:BC:D3:16:86:5F:46:AF:D1:7E:35:23:40
Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial: 01856D8189DFA501040E2C6B3BE8654F96A5
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/sVrIR6FGFs280xaGX0av0X41I0A.roa
Signing time: Sun 01 Jan 2023 13:24:44 +0000
ROA not before: Sun 01 Jan 2023 13:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39232
IP address blocks: 134.19.210.0/23 maxlen: 23
134.19.208.0/23 maxlen: 23
134.19.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:89:df:a5:01:04:0e:2c:6b:3b:e8:65:4f:96:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Validity
Not Before: Jan 1 13:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b15ac847a14616cdbcd316865f46afd17e352340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:37:9a:6b:38:16:e7:c1:dd:fb:85:6e:8e:
17:a3:6f:73:8c:a1:9f:4e:62:f7:5d:1b:e7:12:97:
4b:74:bf:bd:ff:81:7a:62:8f:83:90:4f:00:0a:2b:
30:a6:33:cf:4d:e8:b9:91:2f:76:d6:a8:d2:6f:45:
88:aa:12:40:fe:ff:82:96:eb:ad:bc:a7:1b:fd:be:
b4:01:47:7e:ea:3e:b4:40:03:77:bc:3c:23:f4:20:
08:fa:ff:4d:5a:fb:2b:55:bb:23:82:ea:ee:8e:4a:
34:1d:4d:33:42:d6:bb:35:a3:71:85:e8:4f:ea:3d:
c3:75:b7:19:45:98:82:40:31:69:77:ce:51:ee:df:
8e:c4:7e:4e:27:96:0f:08:cb:76:b5:67:20:2b:78:
77:e3:46:43:d7:fd:78:fb:01:8b:27:14:37:14:69:
eb:dc:4a:0e:63:93:5d:8f:d9:ff:a9:64:e4:df:21:
16:83:0c:08:73:ae:0a:b1:eb:de:4c:fe:ad:90:04:
21:48:8b:d9:87:6a:d9:58:4b:ba:5f:9a:18:8f:ff:
59:62:18:6c:8b:07:cb:45:a5:9b:11:93:af:50:3c:
32:27:31:db:af:d1:6c:b9:ca:fd:4d:7f:5d:3e:de:
f2:ab:e0:26:9e:d5:96:d6:51:ee:78:01:cb:89:d7:
93:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5A:C8:47:A1:46:16:CD:BC:D3:16:86:5F:46:AF:D1:7E:35:23:40
X509v3 Authority Key Identifier:
keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/sVrIR6FGFs280xaGX0av0X41I0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.19.208.0/22
Signature Algorithm: sha256WithRSAEncryption
59:00:d0:86:7f:49:ec:3d:83:db:29:51:7f:d3:f4:6f:6a:cf:
59:44:84:47:63:5c:e2:67:28:a6:b0:c3:83:f2:8c:b5:01:0f:
b3:b8:6a:b8:30:16:d1:bf:eb:f8:f9:91:3a:85:2c:2b:b4:1e:
de:7a:d1:42:d0:41:ec:71:07:69:61:e2:9b:fd:f1:1c:4a:73:
da:f4:13:3b:03:ce:26:d5:74:33:30:d4:9f:55:f1:83:e8:53:
d5:17:09:e0:f6:67:f4:fb:c3:68:84:d3:16:3e:49:11:dd:e8:
dc:8e:b5:d2:00:9a:10:06:82:7c:d9:c5:2d:b5:90:fa:7c:13:
b3:8c:bd:8c:68:04:a0:54:08:95:b6:b3:87:b0:2d:2f:59:79:
20:68:40:48:00:98:fb:49:13:cf:8a:69:ca:a3:76:8b:8d:60:
99:4d:68:df:b5:91:81:da:55:54:b1:60:ce:f1:ae:7e:7f:e5:
a1:fa:b4:ab:07:e9:b4:6d:eb:2e:a2:b6:c4:5e:57:e2:fe:95:
1d:df:86:d9:40:f4:1d:96:2b:9a:bc:79:b9:2b:45:2e:75:44:
60:e4:74:25:18:1a:70:f5:67:e3:3c:f5:20:ed:e8:43:7e:10:
ea:df:cf:f2:7a:29:83:03:e9:37:82:27:75:eb:87:e6:22:61:
c5:72:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:32 2024 by rpki-client on console-ams.rpki-client.org