Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/qAD2ShAvYzJin_SebP1gXmJxX2Y.roa
File: qAD2ShAvYzJin_SebP1gXmJxX2Y.roa (raw, json)
Hash identifier: oZr0ul/HWGiyzqBRtHAzy17LEmom6OsYHLZ2w1wEDdk=
Subject key identifier: A8:00:F6:4A:10:2F:63:32:62:9F:F4:9E:6C:FD:60:5E:62:71:5F:66
Certificate issuer: /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial: 01856CF8607AC725769A35E70C9DB40CFF5A
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/qAD2ShAvYzJin_SebP1gXmJxX2Y.roa
Signing time: Sun 01 Jan 2023 10:54:54 +0000
ROA not before: Sun 01 Jan 2023 10:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 31.171.211.0/24 maxlen: 24
31.171.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:60:7a:c7:25:76:9a:35:e7:0c:9d:b4:0c:ff:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Validity
Not Before: Jan 1 10:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a800f64a102f6332629ff49e6cfd605e62715f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:25:7f:93:35:38:48:f1:7d:3c:92:5b:99:
d5:5e:08:05:e0:21:d4:b7:e9:3d:72:7b:16:88:8e:
a5:67:31:f6:c0:7f:76:81:b1:94:97:0f:84:a7:ea:
fa:4a:c0:6b:62:78:64:84:9e:ff:57:ba:0e:41:b3:
0b:85:66:65:07:1d:63:e8:01:db:6a:7d:55:1c:cc:
62:8d:50:d9:e2:ba:4d:91:a9:63:88:3e:c2:cd:78:
09:4c:dd:52:f8:a6:3a:e4:93:5b:b2:e2:17:09:50:
36:60:d9:d4:cb:a4:bd:d7:9a:52:12:a1:cb:8f:4b:
78:7b:47:c6:b4:92:78:93:d2:f0:c2:7d:c0:f7:5e:
ac:86:84:1c:96:32:b4:ae:5c:c5:9c:2d:5b:5d:ce:
27:b1:20:18:67:9d:97:1e:68:00:01:fc:b4:6a:1c:
ff:39:e8:2b:87:e6:15:2f:69:d7:ff:23:c4:86:c6:
bd:d0:68:a9:c4:b5:3c:fb:43:6e:e1:78:4a:53:ac:
52:32:a6:c7:d8:ae:93:d8:9a:c4:62:ee:b6:6c:c2:
df:24:44:b3:33:84:59:36:3c:c4:b1:30:b6:b4:c0:
96:16:48:a4:60:26:ae:16:bd:da:5f:d4:55:2c:a0:
6c:b3:86:8e:fd:32:dd:7a:42:13:3b:48:27:d4:a8:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:F6:4A:10:2F:63:32:62:9F:F4:9E:6C:FD:60:5E:62:71:5F:66
X509v3 Authority Key Identifier:
keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/qAD2ShAvYzJin_SebP1gXmJxX2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.211.0-31.171.212.255
Signature Algorithm: sha256WithRSAEncryption
6d:55:9d:1c:e9:b8:30:82:a7:9e:9d:b9:f2:8f:8d:d5:3f:44:
28:09:f2:7d:c7:bf:c7:84:32:51:80:9a:e4:06:a5:4c:81:10:
19:2f:e9:fe:ce:39:95:cc:a0:a8:43:bd:37:80:41:5b:96:ea:
8e:47:50:c9:2e:03:ef:4b:31:0b:4c:83:a8:f2:21:99:08:c2:
af:15:7d:a9:65:25:b9:ff:0e:43:4c:b9:ac:20:a4:49:b1:84:
42:79:9f:6a:5f:8c:92:3d:25:14:33:51:18:9f:a6:1d:b1:39:
5f:a3:f4:a7:79:e1:e3:7c:eb:26:4e:f4:d4:a0:82:f9:44:a6:
7c:6f:2f:f5:47:a8:a4:3a:64:46:b5:ca:e0:0d:cb:83:db:5a:
9f:0d:86:22:9a:62:e5:42:2e:92:ca:ba:b8:ce:49:a2:1f:31:
36:f9:30:0e:17:1c:f4:06:59:23:b0:ba:aa:a7:86:42:02:28:
1c:d1:a8:c2:4e:54:4d:b9:23:7c:98:6a:23:06:74:d7:b0:aa:
44:6a:be:ea:62:48:45:8c:4c:d6:6e:ea:05:d2:ab:d2:81:cf:
24:fd:6e:c8:f1:90:4f:c2:92:4e:40:87:8e:83:e0:45:ba:85:
3b:bd:1f:a6:9a:22:0d:c3:2d:84:b1:18:f1:c3:37:83:01:0c:
d1:d1:5c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:40 2024 by rpki-client on console-ams.rpki-client.org