Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2uz_4pwSUl4f7KMChXd6Alr1fpc.roa
File: 2uz_4pwSUl4f7KMChXd6Alr1fpc.roa (raw, json)
Hash identifier: +YkRCPRKF4cWDIDMJTX/UUNvmCVqHBkRhGh4oS/s5iY=
Subject key identifier: DA:EC:FF:E2:9C:12:52:5E:1F:EC:A3:02:85:77:7A:02:5A:F5:7E:97
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01856E26695203E48E53D05ECD8080F1F0D9
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2uz_4pwSUl4f7KMChXd6Alr1fpc.roa
Signing time: Sun 01 Jan 2023 16:24:49 +0000
ROA not before: Sun 01 Jan 2023 16:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208167
IP address blocks: 31.133.42.0/24 maxlen: 24
31.133.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 17:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:69:52:03:e4:8e:53:d0:5e:cd:80:80:f1:f0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 16:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daecffe29c12525e1feca30285777a025af57e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:2f:dd:83:6c:7f:7b:46:5b:a9:5e:d4:11:
82:0a:a0:cd:ea:74:64:49:41:82:51:77:2c:00:0e:
f5:eb:bf:08:5d:bd:da:da:4a:39:54:6d:04:74:db:
c2:7f:b3:94:e0:13:e1:a7:53:20:a4:df:9f:93:31:
b8:8c:16:63:24:d4:8f:15:23:9a:69:d3:9e:56:a0:
5a:57:ee:03:0c:4c:26:97:08:08:4c:f0:d2:56:df:
9a:4c:c6:19:11:ab:ad:43:5b:a3:7b:b1:1c:ed:ab:
d9:9d:ef:65:87:77:65:b3:fa:79:1c:f8:c5:09:08:
67:57:89:4e:ed:ae:b2:da:94:c8:e8:46:24:0e:f0:
4b:07:32:11:1a:65:f2:5f:3c:1a:17:c1:78:00:57:
c0:15:fc:0b:10:7b:58:20:e5:59:b8:02:95:8a:4e:
e6:9b:f7:f6:5a:55:d4:32:76:e5:4d:a4:6f:e5:6c:
0d:1a:33:8b:3e:82:d8:9f:cd:29:a0:77:cc:0c:6c:
a6:e8:e8:0c:c2:e3:47:ad:b1:93:4c:04:79:03:cb:
e2:4a:3e:5a:2b:25:85:ae:16:32:da:c3:57:8a:43:
07:1a:ba:f6:31:34:a4:22:4d:87:a9:16:f8:10:2b:
e9:e1:f2:a2:36:ce:36:81:4d:d4:53:8b:83:c7:cc:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EC:FF:E2:9C:12:52:5E:1F:EC:A3:02:85:77:7A:02:5A:F5:7E:97
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2uz_4pwSUl4f7KMChXd6Alr1fpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.42.0/24
31.133.46.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fa:a6:7c:f2:5a:70:ed:c1:4f:68:90:db:24:26:ab:72:a2:
42:7e:82:40:93:d2:0b:8c:cc:75:88:8c:26:87:8b:e5:6d:37:
1d:f9:7b:33:d1:e0:a7:e0:de:62:f4:84:30:b8:01:1b:a8:09:
0d:c0:4e:d3:fb:99:fa:b7:49:43:65:8d:6c:3e:a1:cf:7d:1e:
0f:7b:47:09:94:bb:35:cd:e6:ee:0b:5b:7a:1d:c8:e7:1e:1c:
eb:a3:f2:ba:ec:c5:a3:58:7d:87:5c:a9:8d:d6:ac:fb:a3:64:
7b:4e:e1:bc:e6:c8:fe:e0:8d:be:48:f6:db:7f:2e:98:c0:08:
07:c4:32:c8:ac:7e:33:3a:b6:16:8c:a3:02:32:9a:56:12:f4:
76:02:78:fa:99:ba:1c:15:7b:b8:3b:03:18:fe:9f:93:1b:63:
9f:a4:81:2f:3b:b4:3a:5b:84:13:bc:2d:f5:82:4c:4d:d6:ed:
aa:28:49:56:a8:54:89:07:9b:2d:73:f0:0c:90:52:85:00:ea:
1f:81:e2:3e:fd:88:a0:58:fb:1f:3d:f8:0f:52:6f:2e:70:87:
ea:23:98:5e:79:b4:cd:0c:d4:88:66:6a:ce:36:86:ec:0f:af:
a7:38:92:83:06:03:07:1e:e4:67:5e:3d:9c:dc:60:7f:4a:f1:
3a:82:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org