Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5u19N2WNZ8VSbvO9KPbSw2N8zUA.roa
File: 5u19N2WNZ8VSbvO9KPbSw2N8zUA.roa (raw, json)
Hash identifier: UAFtJg38uAcDbCiWcV4YPU7DAA06+bQd6wDdQoiUSRg=
Subject key identifier: E6:ED:7D:37:65:8D:67:C5:52:6E:F3:BD:28:F6:D2:C3:63:7C:CD:40
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01856E2663655FDB4FDF42B72B33BE92A2A0
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5u19N2WNZ8VSbvO9KPbSw2N8zUA.roa
Signing time: Sun 01 Jan 2023 16:24:47 +0000
ROA not before: Sun 01 Jan 2023 16:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44660
IP address blocks: 31.133.44.0/24 maxlen: 24
31.133.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:63:65:5f:db:4f:df:42:b7:2b:33:be:92:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 16:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6ed7d37658d67c5526ef3bd28f6d2c3637ccd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:a7:50:da:73:7f:92:d8:c9:02:f8:6b:4b:
1b:2b:7d:65:f1:0c:fb:7e:15:01:67:0e:69:0c:b7:
10:c9:ca:77:ca:0a:3e:05:f6:49:0a:84:96:df:40:
cf:d7:2a:4c:a7:93:e6:15:5b:41:c7:91:86:07:03:
9d:02:8e:d3:b1:91:76:e4:c5:9b:39:80:9f:0d:fc:
18:d7:d5:31:36:b6:8a:0f:be:3d:a6:96:1e:0e:a7:
49:3f:b4:6f:74:d3:9a:28:17:66:09:14:5f:ad:f3:
31:37:c4:90:33:76:7b:27:1d:ac:e7:76:ed:ca:19:
02:46:7a:a2:1a:52:c2:cf:db:e8:c1:99:7d:70:fb:
e0:6c:40:76:f9:eb:b0:12:4c:8e:d2:05:48:3d:e6:
d4:1e:18:76:6b:d5:42:dc:8a:00:c2:2f:58:99:a2:
32:16:3f:67:5b:7f:44:8c:94:bf:51:47:f6:57:f5:
ac:a5:44:8b:75:68:63:6e:44:ef:c6:7e:dd:2e:0a:
49:91:db:8b:38:90:53:55:55:27:79:d6:6e:b2:6a:
a5:29:50:0c:e0:bc:c1:54:4f:c0:4c:d4:41:ff:1b:
e3:68:c9:00:2f:ae:96:21:3f:76:50:0d:4d:45:e3:
6d:94:98:be:30:05:06:04:70:dc:14:25:ce:42:d4:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:7D:37:65:8D:67:C5:52:6E:F3:BD:28:F6:D2:C3:63:7C:CD:40
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/5u19N2WNZ8VSbvO9KPbSw2N8zUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.44.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:04:7e:d3:ff:3a:73:01:bc:ba:4b:57:c1:77:b6:1c:2e:2d:
83:91:ba:fc:d4:34:ae:5c:c7:08:39:62:f9:27:ac:a4:61:71:
b9:87:75:a2:3f:38:5f:be:dc:67:12:ba:44:c3:1b:03:f2:04:
bc:82:6f:0b:5f:e4:bb:f0:c6:f0:6a:d0:93:cc:2b:9b:12:fd:
33:74:4a:85:ae:8f:45:82:58:b5:f2:dd:0c:a9:8b:d3:57:32:
32:43:b1:28:8f:e6:f4:99:7e:fb:e8:53:e4:c9:19:5b:69:5f:
c1:4f:e9:2d:81:01:b1:92:3d:55:c5:f2:0d:76:40:65:47:fd:
12:92:3e:10:47:9e:0d:ff:aa:e6:75:56:95:34:3d:41:82:6a:
29:fd:fe:96:b4:06:8a:46:f4:ca:69:22:b9:bb:f1:45:43:9b:
5b:e7:c1:ce:de:76:c2:c0:99:60:04:ca:32:25:e9:79:30:43:
70:37:45:fd:dd:c7:3f:29:a3:e6:bf:e9:7e:da:c9:cf:5c:77:
5d:6f:9a:ae:79:9a:e5:0a:26:81:6a:ed:f8:23:33:c2:29:6e:
dc:4f:74:af:ea:19:ab:cf:38:c2:0d:31:95:78:d9:07:eb:26:
e1:85:f1:1d:38:86:66:6e:35:24:13:a6:bd:cd:fd:fa:b9:f4:
4a:64:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org