Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/woiSlPb3qF_usUgjUQe9XKDcf_E.roa
File: woiSlPb3qF_usUgjUQe9XKDcf_E.roa (raw, json)
Hash identifier: XgLOdHh+U+9s8HlyuRTl7QEXU/2SdVCI/xFLEesKk/k=
Subject key identifier: C2:88:92:94:F6:F7:A8:5F:EE:B1:48:23:51:07:BD:5C:A0:DC:7F:F1
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE99ABAB5076A737E4E0644AF94281561
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/woiSlPb3qF_usUgjUQe9XKDcf_E.roa
Signing time: Mon 08 Jan 2024 15:04:40 +0000
ROA not before: Mon 08 Jan 2024 15:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41091
IP address blocks: 84.21.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 07:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:9a:ba:b5:07:6a:73:7e:4e:06:44:af:94:28:15:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2889294f6f7a85feeb148235107bd5ca0dc7ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:5d:d2:72:65:2b:b8:ee:fb:5b:1c:bc:c8:
c0:b1:ed:22:f7:85:85:3c:0f:93:c9:55:29:ba:e0:
a3:ba:52:e2:95:fe:53:01:9d:27:65:3a:34:c3:d5:
ab:c8:24:cb:2c:0e:fd:73:2d:98:25:3c:ea:06:85:
23:18:e2:67:f6:91:c3:48:1a:72:bd:19:c8:85:6c:
6e:af:b7:86:f1:6a:2d:23:04:54:06:5a:da:cd:dd:
d3:2d:b7:47:6f:39:c5:9c:04:09:50:b5:08:f7:c5:
f6:eb:cf:6b:f4:a7:0d:9e:b8:98:61:b9:a0:d4:f2:
f2:73:9a:29:01:9c:e3:2f:e8:78:ca:8c:1b:d5:de:
97:90:73:37:7a:ba:97:2d:9c:99:12:07:51:3a:52:
ff:4b:b4:35:d0:b5:5a:4d:4c:bb:95:ac:33:fa:ce:
47:ae:d1:ef:73:15:a4:5e:dc:81:e0:c8:0a:6f:1b:
94:8c:b7:06:80:a2:ec:7b:8f:b7:60:93:64:77:35:
57:0f:f0:50:63:7b:f9:d3:bb:cb:d0:b3:41:f1:fa:
07:44:c3:9f:2a:26:33:3e:a1:07:d5:ab:9e:11:cc:
fe:8c:02:d8:e0:a9:16:9a:72:7a:01:65:d1:81:71:
bd:b9:bb:39:7b:73:01:0f:40:63:63:f6:6e:cc:7a:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:92:94:F6:F7:A8:5F:EE:B1:48:23:51:07:BD:5C:A0:DC:7F:F1
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/woiSlPb3qF_usUgjUQe9XKDcf_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.31.0/24
Signature Algorithm: sha256WithRSAEncryption
73:73:5a:ae:d6:2b:5d:4c:a0:59:39:77:9f:42:9b:f9:b2:12:
6d:08:a5:22:85:3f:bf:5d:a4:13:63:1d:10:45:67:4b:7c:36:
ee:31:d9:f9:6b:41:ff:c6:90:29:15:d5:46:b9:9c:22:e7:cf:
6d:6e:83:cc:2f:41:19:ac:b5:a5:2c:f9:60:d8:2a:95:d5:ae:
5a:5e:4e:16:6f:46:9e:64:e5:66:c8:62:fe:c7:7f:23:f5:6e:
75:02:bc:3c:9b:3a:5f:35:e1:52:53:cc:fa:cf:ca:cf:41:c7:
77:a8:dd:a6:de:91:5b:65:7c:56:73:cf:c7:cb:34:86:15:f5:
b0:c4:dd:ac:b7:57:6a:7d:19:4b:08:4f:64:81:c4:d7:7c:d1:
45:62:b5:64:4d:1f:ba:ed:b4:f9:d9:12:9a:18:d3:e4:8b:dd:
28:7a:f3:af:52:ea:91:4c:a2:58:0c:08:e4:3d:04:77:b0:73:
1e:f3:40:6b:bb:d1:52:1b:8c:d8:58:e7:2c:bc:8f:9a:29:89:
82:f1:c6:24:7c:5f:2a:40:a5:e7:ce:1a:b0:c7:dc:26:8c:cc:
14:ed:50:ec:7a:01:2c:d3:5a:63:e7:e6:ea:f2:23:64:9f:d4:
21:2c:c1:e6:b9:69:b5:b3:00:d1:a9:c7:be:72:57:a7:98:75:
64:51:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:38 2024 by rpki-client on console-ams.rpki-client.org