Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/j1bTZQI9t0jsuTZyvlM1yE-WqqM.roa
File: j1bTZQI9t0jsuTZyvlM1yE-WqqM.roa (raw, json)
Hash identifier: MYGU0p6tbVEn4knHEYBCAGYfjXvTk8QjbUnxP3shUrg=
Subject key identifier: 8F:56:D3:65:02:3D:B7:48:EC:B9:36:72:BE:53:35:C8:4F:96:AA:A3
Certificate issuer: /CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Certificate serial: 01856D4ABF0FCB3CC5DAFE823C1E1273E70D
Authority key identifier: C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/j1bTZQI9t0jsuTZyvlM1yE-WqqM.roa
Signing time: Sun 01 Jan 2023 12:24:53 +0000
ROA not before: Sun 01 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61001
IP address blocks: 185.19.40.0/22 maxlen: 22
185.19.40.0/24 maxlen: 24
185.19.41.0/24 maxlen: 24
2a04:1000::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:bf:0f:cb:3c:c5:da:fe:82:3c:1e:12:73:e7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Validity
Not Before: Jan 1 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f56d365023db748ecb93672be5335c84f96aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:e2:05:4b:45:ba:9a:22:44:89:6a:c3:5a:
db:b3:e0:4a:73:fa:6c:a0:aa:6e:e0:78:c1:e0:2b:
4d:1f:0a:a6:7e:64:fd:43:fd:5c:24:bb:a7:b8:a6:
81:2f:cb:92:8d:64:be:97:3f:20:c0:11:17:23:4e:
46:aa:4c:28:00:a3:b9:76:5e:d6:5e:3f:19:86:6d:
10:7c:ef:5a:d4:64:9b:fd:4d:29:ff:6a:67:b9:f1:
87:d0:f3:c2:d2:26:0a:24:ba:d1:38:41:43:d1:02:
36:b7:d8:54:97:fd:ca:f9:c5:99:2b:ec:10:8f:26:
dc:ed:f4:aa:bc:ee:c9:ae:43:58:21:c9:b2:ea:d1:
6a:13:97:6e:5b:bd:c6:a0:c9:57:ed:04:4d:2f:f1:
78:fc:45:86:39:ee:e0:3e:f0:47:ad:d6:be:fa:1b:
77:a4:54:5a:dc:55:2d:d8:a8:38:e1:38:a7:23:6b:
6e:79:4a:02:3f:fd:05:71:04:44:01:23:83:75:0b:
65:b7:9e:4b:cb:18:b2:e4:e2:8f:2e:c7:0f:22:8a:
52:2b:cb:0e:92:fe:c7:90:de:5a:e4:bc:6d:0e:73:
69:72:31:00:38:be:f0:a6:2b:ae:3c:54:63:29:27:
87:4b:f1:f3:01:aa:13:89:c2:62:0b:01:ec:f1:39:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:D3:65:02:3D:B7:48:EC:B9:36:72:BE:53:35:C8:4F:96:AA:A3
X509v3 Authority Key Identifier:
keyid:C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/j1bTZQI9t0jsuTZyvlM1yE-WqqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.40.0/22
IPv6:
2a04:1000::/29
Signature Algorithm: sha256WithRSAEncryption
42:3d:76:80:d1:d7:5c:b3:2e:6d:34:7e:85:66:99:94:87:0a:
a0:a3:61:5e:0b:b8:63:e7:d5:5e:bd:d1:07:4a:6a:b7:10:11:
d3:76:13:61:c6:2e:d0:b5:07:7c:bd:b0:21:ec:ac:13:10:f9:
15:4e:f2:1d:0d:cb:3b:03:c6:fa:54:4a:11:a1:a8:e4:21:0f:
8e:5a:52:8e:90:f8:2e:cb:df:38:e3:81:6f:ef:de:64:60:07:
6f:f9:d6:75:82:f0:5c:6a:d3:36:cc:d6:87:33:ee:1b:15:29:
9b:67:31:2b:9d:26:db:e0:dd:b5:5e:8c:69:4a:ad:43:72:94:
d9:b8:50:68:cc:df:15:f3:db:37:80:4e:f6:c4:93:82:46:18:
dd:59:69:b5:71:be:77:6c:a2:55:82:d7:21:c3:29:9e:41:50:
79:c6:d0:62:f8:5b:e5:55:39:d4:9a:b5:92:ef:7d:a8:c9:57:
19:ba:e2:ec:cd:5a:1b:0f:78:39:6b:c7:87:c3:98:7d:0b:85:
be:37:5b:ce:a9:c5:cc:2e:d6:0e:51:fc:23:f8:42:ae:db:7f:
48:e0:54:37:f4:7c:81:11:55:6e:a6:7d:11:a4:70:0a:99:af:
20:6a:d9:5d:0e:22:25:5a:72:36:87:20:42:56:55:40:f6:e6:
51:25:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:21 2024 by rpki-client on console-fra.rpki-client.org