Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5QIpdtVLL6vyWxEAG4_s0xjVp_s.roa
File: 5QIpdtVLL6vyWxEAG4_s0xjVp_s.roa (raw, json)
Hash identifier: cIgk6tIvC+BcbrlwwAxe4rI9eRG2tHf1ixnrkGMp/n0=
Subject key identifier: E5:02:29:76:D5:4B:2F:AB:F2:5B:11:00:1B:8F:EC:D3:18:D5:A7:FB
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01883F2C41224A52BD0867244F8CABB03DAE
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5QIpdtVLL6vyWxEAG4_s0xjVp_s.roa
Signing time: Sun 21 May 2023 16:37:24 +0000
ROA not before: Sun 21 May 2023 16:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59867
IP address blocks: 31.133.36.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:2c:41:22:4a:52:bd:08:67:24:4f:8c:ab:b0:3d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: May 21 16:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5022976d54b2fabf25b11001b8fecd318d5a7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:8b:94:01:16:5e:5a:ea:25:fd:88:95:2c:
bb:9a:1a:21:92:c6:ac:92:e1:55:e4:1c:b0:ac:62:
b0:5e:db:f1:a1:f5:57:77:f3:73:f7:a9:eb:61:1b:
a9:ba:33:c3:e7:3b:24:82:f7:3c:af:41:1a:87:5f:
20:ca:fc:1a:9a:53:24:8b:47:30:f2:6f:a1:24:0f:
60:b6:fb:31:d3:1f:00:31:4b:70:37:d0:83:36:99:
83:1b:85:e7:a9:be:6f:db:b7:24:4c:c3:63:95:e2:
c9:01:fb:44:96:d5:71:2b:ed:a7:da:40:01:d9:51:
b3:7e:55:54:97:69:75:5a:e2:96:86:92:49:74:58:
27:b1:08:a6:47:46:d9:a9:61:a8:9a:e8:1f:c9:b5:
00:85:31:5a:ef:1b:9f:ad:ab:73:ad:73:1f:63:1c:
b5:74:2e:d0:48:3b:3a:67:38:a2:d5:bf:24:61:62:
12:fa:29:5e:fe:88:ee:65:16:b1:9b:07:7d:b8:24:
ac:f7:e7:db:10:7a:a3:8c:63:e7:c2:10:fc:86:bb:
25:51:e4:89:95:bd:b3:f3:c1:06:62:60:4c:7f:f6:
0f:77:63:88:77:ad:db:1a:01:98:27:cd:0d:cd:17:
a1:9b:e0:9e:16:54:b2:56:95:7c:10:71:6b:04:11:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:29:76:D5:4B:2F:AB:F2:5B:11:00:1B:8F:EC:D3:18:D5:A7:FB
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5QIpdtVLL6vyWxEAG4_s0xjVp_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.36.0/23
Signature Algorithm: sha256WithRSAEncryption
17:f6:82:18:69:55:5c:37:5f:05:f9:c7:83:c9:9a:eb:78:95:
e3:80:c4:ac:ce:f1:64:e9:36:04:44:c3:5a:37:4c:12:8d:00:
8b:d9:bd:31:21:e6:e4:43:60:03:aa:27:16:33:67:fd:5a:2f:
58:10:ca:b0:cc:1b:dd:e5:15:72:81:60:2a:11:62:7b:8d:9e:
60:9d:9d:f3:7c:b8:f8:28:57:50:39:cb:22:79:1e:12:51:4d:
08:2c:e8:37:17:1e:6d:86:d5:0c:97:ae:8e:a3:c4:1a:66:8e:
1b:cd:dd:65:3a:5a:fe:c6:15:ba:d1:79:6b:ca:eb:3d:2b:a9:
9b:be:1f:81:54:ee:af:49:e2:e0:47:a3:e4:f8:ef:a9:5f:15:
f5:34:02:de:20:66:7b:e5:9c:32:57:5c:67:77:f2:ad:30:6c:
50:b0:23:c9:a6:6d:83:e6:f7:b1:df:f7:a1:ff:1e:c8:1e:de:
a8:8c:19:57:c0:a6:8e:1f:64:c1:19:8e:6b:6c:c9:d0:1d:71:
43:ae:9f:3f:d8:77:b0:1a:e5:fc:ad:38:c4:57:c2:91:e1:3f:
53:eb:39:cc:4e:a2:4c:ef:04:d1:fb:72:97:0f:cc:42:5a:b9:
60:c5:c8:04:2c:89:f2:9f:3f:06:2a:ad:0c:5a:58:d7:4c:9f:
8a:2f:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org