Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/77o7Uiv2LQPeXGv8OP11Jx_wrCU.roa
File: 77o7Uiv2LQPeXGv8OP11Jx_wrCU.roa (raw, json)
Hash identifier: uXjZcRMfdifc6KAR3MherjirhXjD8FHz5sDHnYeAxRQ=
Subject key identifier: EF:BA:3B:52:2B:F6:2D:03:DE:5C:6B:FC:38:FD:75:27:1F:F0:AC:25
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018847967EAB4F1DE2A4D61E374650CCB7B9
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/77o7Uiv2LQPeXGv8OP11Jx_wrCU.roa
Signing time: Tue 23 May 2023 07:50:25 +0000
ROA not before: Tue 23 May 2023 07:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197658
IP address blocks: 31.41.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 02:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:96:7e:ab:4f:1d:e2:a4:d6:1e:37:46:50:cc:b7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: May 23 07:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efba3b522bf62d03de5c6bfc38fd75271ff0ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:ba:d8:39:88:89:fb:e5:2a:90:26:9d:85:
68:79:5c:34:70:5a:de:fe:7e:6b:c3:a9:6b:40:41:
0a:a2:f3:e3:ca:d1:ad:c5:b4:90:3d:c0:b9:c4:99:
44:07:da:83:aa:91:16:9b:97:23:eb:c6:dc:f8:28:
4c:fb:26:b9:13:95:4f:a8:af:39:1f:e6:38:d5:30:
d5:64:39:d7:7a:56:0e:60:6b:a0:cf:57:ec:c6:9c:
3b:1d:9c:6f:a8:53:be:92:a9:34:82:ab:7e:b0:03:
89:70:45:78:71:21:44:12:ae:fc:ef:df:c5:e5:b4:
01:b3:0d:34:5f:76:01:9f:61:18:7e:de:c9:ac:a7:
bd:15:2e:bd:3c:95:54:14:8e:ca:a8:50:d6:2c:27:
97:73:8e:aa:f6:82:47:f3:6d:c4:fe:80:64:92:af:
d1:b1:ad:b7:d1:72:3b:74:73:c9:db:48:11:a8:7d:
33:4c:35:cc:30:5c:6b:72:7e:c2:9c:10:79:01:6a:
c3:ac:c3:68:7d:b7:e5:c9:b9:8e:b1:ba:13:e8:ec:
97:e7:ae:99:7c:06:c0:13:de:82:ac:26:1f:db:d8:
41:12:59:ed:3b:8c:e6:3c:d5:97:e6:79:78:df:c8:
01:33:fb:bd:b5:f3:39:70:83:43:3e:6e:b2:ad:70:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BA:3B:52:2B:F6:2D:03:DE:5C:6B:FC:38:FD:75:27:1F:F0:AC:25
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/77o7Uiv2LQPeXGv8OP11Jx_wrCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:ec:78:14:31:ca:39:32:18:1b:14:cf:c9:ca:d7:e7:4c:87:
23:20:53:dc:c9:4c:1d:a4:51:2f:ac:da:ef:94:5c:6e:02:d4:
03:23:b5:7d:cf:cf:70:cb:e9:67:ae:2b:de:3f:de:4b:f5:34:
08:7f:43:9d:02:d8:18:0c:7e:a2:a9:2c:37:fa:e6:36:55:28:
f2:cd:f8:dd:6b:b9:75:7c:dd:3f:82:54:a3:0c:d8:a2:39:5e:
b8:ea:85:d0:42:ec:7b:c6:0e:8d:7a:21:92:f5:e8:4b:21:31:
dd:e6:6c:b3:a6:89:0a:8c:18:2d:cb:02:85:7a:97:63:4a:fc:
d3:b6:5d:00:56:4c:cc:8a:ac:b9:87:bd:88:01:63:d5:49:ae:
27:fc:f9:3c:91:21:92:46:07:53:0a:27:96:9e:c8:1a:7d:41:
bb:3d:27:87:1c:07:f5:23:c6:77:0d:df:f2:b6:0a:8d:6c:92:
6a:1a:18:30:c6:99:91:f2:3e:fb:4d:c8:28:3c:9d:a1:48:7a:
37:b8:82:b1:a8:e6:8f:11:52:f5:bd:3c:e0:1e:a0:e3:14:df:
7f:19:ec:54:ad:f7:56:68:7a:7f:83:e8:a6:6d:0f:bd:ca:f6:
06:db:f1:b3:a6:d6:85:c0:0a:27:ad:2d:9a:b0:fd:ec:cc:c5:
4b:dc:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org