Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/potjIcTLO0dRkgycyh6C0dIoG-A.roa
File: potjIcTLO0dRkgycyh6C0dIoG-A.roa (raw, json)
Hash identifier: Rq7WUn6hVNEtCVNC1rdPHpcXktDeIoNGkB60iemZ+YI=
Subject key identifier: A6:8B:63:21:C4:CB:3B:47:51:92:0C:9C:CA:1E:82:D1:D2:28:1B:E0
Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial: 01856D818BC5D2BA8C9ABEC48AA297FF300A
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/potjIcTLO0dRkgycyh6C0dIoG-A.roa
Signing time: Sun 01 Jan 2023 13:24:44 +0000
ROA not before: Sun 01 Jan 2023 13:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199311
IP address blocks: 134.19.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:8b:c5:d2:ba:8c:9a:be:c4:8a:a2:97:ff:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Validity
Not Before: Jan 1 13:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a68b6321c4cb3b4751920c9cca1e82d1d2281be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:5e:b8:07:bd:84:c3:99:e3:69:a1:7b:bc:
cb:48:e2:9f:d1:9c:70:e3:96:7c:2d:67:09:5e:65:
69:2e:f5:75:e0:46:17:35:00:08:73:33:76:7d:e3:
1a:28:88:67:37:95:b3:87:21:95:b0:66:44:1b:d1:
dd:99:12:72:17:5c:00:f4:7d:7d:d3:32:a1:b2:7d:
92:6d:30:79:fd:b5:e1:49:58:a2:17:d6:f9:2f:83:
9a:e1:28:8c:7b:a5:c9:26:90:c6:95:50:c9:85:b1:
c8:42:89:c8:f5:0b:85:64:6c:88:25:a1:3e:89:aa:
de:0f:66:d4:d3:9d:a3:0b:12:9e:cd:19:18:38:86:
53:7e:1a:17:04:23:bc:4f:b6:0d:02:2e:cc:18:db:
2a:db:99:e0:65:08:18:69:25:c0:4f:b6:b6:dc:c0:
27:8d:f9:87:79:aa:d6:17:bb:bb:9c:87:96:8e:f1:
26:0e:ad:b7:64:b1:40:e1:5a:e7:39:cd:f9:97:47:
86:f9:e7:c6:ae:d9:72:d3:d7:51:55:5f:1e:78:4b:
57:6e:f3:c5:4f:0e:ce:59:b5:29:97:1a:bb:85:f6:
c9:0e:b5:5b:bc:c7:55:6c:b9:89:1a:a9:f3:25:a7:
0e:81:f5:e7:c5:2f:30:de:d2:5d:54:7e:b0:07:f9:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8B:63:21:C4:CB:3B:47:51:92:0C:9C:CA:1E:82:D1:D2:28:1B:E0
X509v3 Authority Key Identifier:
keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/potjIcTLO0dRkgycyh6C0dIoG-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.19.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7a:0b:c7:3e:2f:79:cd:02:12:84:1f:e1:fa:b4:84:59:ca:
0b:d5:eb:4e:e5:c7:e8:0f:65:28:2d:dd:ba:c3:77:27:e7:ad:
1d:00:d9:4b:bf:fc:fb:29:62:84:55:a2:f4:e8:c3:55:a1:5b:
aa:b8:f2:83:10:89:75:bd:5d:3e:1a:d5:21:00:fe:f9:05:61:
92:f3:99:9c:e0:94:b8:6c:2a:d3:24:bd:fb:0e:ee:bd:f5:3c:
4e:2a:7d:ad:2a:ed:98:94:c4:d0:f2:51:47:64:fb:f3:b1:96:
ec:63:28:74:69:6b:e8:49:f8:da:ec:0e:46:e0:3a:de:28:03:
47:33:66:c7:1b:36:f4:60:8d:ee:64:2a:af:39:3f:af:65:97:
a0:40:40:a3:57:fe:6b:b2:26:cb:41:a4:93:ea:ae:92:41:57:
65:6a:b7:14:5d:70:21:6b:b3:96:92:33:37:b2:91:ff:79:5c:
db:90:11:e9:e2:04:28:08:6d:77:bd:64:7d:86:c2:be:94:88:
62:65:dc:c3:cb:ca:53:68:08:22:cd:96:68:c0:d0:02:ec:61:
3a:b8:2d:79:d8:60:ce:8c:9f:f0:2e:19:84:8d:b1:7a:02:ca:
0f:17:58:ed:f6:e4:4f:06:b1:9d:e5:9e:2b:46:2e:f4:06:98:
94:d9:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:30 2024 by rpki-client on console.sobornost.net