Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/7tBE30lR9bCXQP2yjYfMYtF1qf8.roa
File: 7tBE30lR9bCXQP2yjYfMYtF1qf8.roa (raw, json)
Hash identifier: 6R3FmQjczj3XeRtIHq8uKigiP0rKA8hdwZVYT2ycwwA=
Subject key identifier: EE:D0:44:DF:49:51:F5:B0:97:40:FD:B2:8D:87:CC:62:D1:75:A9:FF
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018847967EE19254233729FF830B8BE9E189
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/7tBE30lR9bCXQP2yjYfMYtF1qf8.roa
Signing time: Tue 23 May 2023 07:50:25 +0000
ROA not before: Tue 23 May 2023 07:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202279
IP address blocks: 31.133.48.0/22 maxlen: 24
31.133.48.0/21 maxlen: 24
31.133.55.0/24 maxlen: 24
31.133.53.0/24 maxlen: 24
31.133.52.0/24 maxlen: 24
31.133.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:96:7e:e1:92:54:23:37:29:ff:83:0b:8b:e9:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: May 23 07:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed044df4951f5b09740fdb28d87cc62d175a9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:c6:e5:81:0e:d3:06:49:83:26:0d:98:e0:
95:82:60:26:f3:cd:10:b4:67:1a:10:1c:b1:de:7c:
47:bb:3b:65:ad:58:29:22:76:f3:6a:07:a8:07:c7:
17:ab:a9:65:22:f2:50:5f:8e:bd:5e:e2:9d:cb:14:
bd:43:8a:30:fd:83:8f:47:c4:0c:86:01:c8:c8:d8:
78:48:7d:54:da:e1:73:8d:5f:ff:96:f0:54:15:de:
94:52:0c:af:0d:ee:cc:f9:d7:be:2c:61:05:b6:3d:
ce:3f:21:8a:4a:aa:e9:78:d2:cc:f2:14:51:6e:38:
09:c5:7f:ec:f8:84:53:b0:a6:f2:a7:30:9f:a4:56:
98:5c:8a:97:03:2d:45:5f:5d:b0:2d:71:36:25:17:
51:af:4d:fc:1b:08:5b:9d:5f:79:3f:3d:b5:61:ae:
eb:f8:db:be:77:ec:7f:78:d0:5e:58:a1:69:bd:f4:
f3:b1:f2:e6:e6:a1:6f:66:17:16:83:47:04:02:8a:
51:e2:5f:c6:33:2e:62:c9:f9:dd:b0:93:31:e3:4a:
f9:9e:fa:6d:83:4d:dd:07:2d:a8:6f:58:4e:dd:ec:
a1:4f:01:3b:55:bf:9c:19:69:e2:3b:78:45:e4:64:
e4:3c:c0:33:2a:e6:71:f4:a5:99:ca:c6:4d:30:da:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:44:DF:49:51:F5:B0:97:40:FD:B2:8D:87:CC:62:D1:75:A9:FF
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/7tBE30lR9bCXQP2yjYfMYtF1qf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.48.0/21
Signature Algorithm: sha256WithRSAEncryption
40:d1:7d:f3:73:4e:1e:ae:0b:82:29:da:ff:4a:45:ea:4e:c5:
8e:8c:29:2e:f0:48:60:dd:d2:7b:89:10:79:e3:82:0e:34:96:
83:bc:ca:d9:1d:89:35:7b:20:31:62:7f:fc:80:b3:ca:3d:3c:
b5:ed:e7:1e:68:81:52:20:54:8c:50:11:57:7f:67:74:48:83:
15:25:e0:d6:48:a5:e3:4c:f4:26:16:10:0f:0d:cf:e8:f8:1e:
12:8a:a6:ce:c1:4e:71:8d:c5:88:c6:af:7b:80:2e:ee:0f:64:
17:b7:51:34:77:85:8f:d7:f4:57:fd:8f:b9:96:ec:d1:aa:ce:
d8:ce:3c:dd:e4:42:de:7b:00:54:98:b5:9f:b6:d5:e9:20:84:
fb:5b:73:17:9c:d2:30:ec:13:01:92:57:f5:f9:51:4f:cd:50:
10:fc:8a:46:01:89:fb:68:c3:db:2f:f5:c1:d7:18:83:45:a7:
5a:c5:11:8d:76:8b:ad:8a:d6:cf:c7:76:0e:25:db:ea:84:e0:
08:b7:39:0c:49:b7:9e:d4:c3:67:97:c9:2c:d0:cc:21:57:97:
5f:b8:ac:45:72:82:02:ec:ff:65:de:de:45:7a:dd:4f:08:d7:
06:bd:3e:b1:14:46:67:33:ae:2e:da:ba:f9:81:95:10:ac:e1:
7e:72:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org