Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/fkF1z1dplBU9Ib9mMP2zrFbpTqw.roa
File: fkF1z1dplBU9Ib9mMP2zrFbpTqw.roa (raw, json)
Hash identifier: s8G8jpMsOBfGXQ02c8Zh1PluEQQwecY1labFnSJg56Q=
Subject key identifier: 7E:41:75:CF:57:69:94:15:3D:21:BF:66:30:FD:B3:AC:56:E9:4E:AC
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018847967E30B0947A6D4FFF430BB6D5FFF9
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/fkF1z1dplBU9Ib9mMP2zrFbpTqw.roa
Signing time: Tue 23 May 2023 07:50:24 +0000
ROA not before: Tue 23 May 2023 07:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52091
IP address blocks: 31.133.40.0/24 maxlen: 24
31.133.40.0/23 maxlen: 24
31.133.41.0/24 maxlen: 24
2a0d:df80::/31 maxlen: 31
2a0d:df80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 16 Aug 2023 07:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:96:7e:30:b0:94:7a:6d:4f:ff:43:0b:b6:d5:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: May 23 07:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e4175cf576994153d21bf6630fdb3ac56e94eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:41:ca:27:9e:82:5c:f1:ce:29:48:2d:93:
19:d2:f9:4d:84:dc:12:88:bd:b1:65:a7:60:97:27:
1a:3c:d7:77:bd:1e:f1:3e:76:d3:c6:21:77:8e:f4:
2b:e9:50:63:57:bd:53:9b:71:e8:28:b9:99:a7:a5:
a2:f6:8a:32:30:e5:a9:fc:e7:96:06:e7:4c:d3:83:
01:c0:95:af:3a:69:bb:20:03:5f:7a:60:70:95:0a:
df:12:8e:43:d4:17:21:cd:04:d0:e7:f1:d9:08:95:
76:ec:b0:31:60:18:bc:9d:8a:68:f7:6d:49:4d:ca:
05:64:96:85:c0:30:71:b5:be:79:a9:f5:d7:01:65:
59:a0:17:cd:26:28:fe:01:5d:20:d7:48:e0:ee:59:
a1:b9:de:ef:4d:d1:4d:2d:05:28:be:66:5e:16:c5:
12:38:3f:fc:18:fe:c6:84:ec:15:82:d0:3c:ac:ca:
b8:b0:85:28:5d:ed:4e:41:2e:c6:4e:64:32:b3:87:
47:97:96:fd:15:37:3e:a5:c3:79:38:60:39:17:c7:
2f:ca:49:8b:f3:aa:46:e0:b8:a1:86:e5:ff:59:6a:
e4:ae:1c:d2:90:36:1b:b8:2b:51:fc:f9:19:b4:1a:
55:e6:cb:e0:24:04:84:52:0f:0c:1a:6a:51:33:71:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:41:75:CF:57:69:94:15:3D:21:BF:66:30:FD:B3:AC:56:E9:4E:AC
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/fkF1z1dplBU9Ib9mMP2zrFbpTqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.40.0/23
IPv6:
2a0d:df80::/29
Signature Algorithm: sha256WithRSAEncryption
28:96:d3:6a:e8:e6:16:af:48:d3:7e:c0:c3:37:e2:97:d3:c1:
d9:ca:7a:0b:d5:a2:a5:c2:1e:74:3b:69:20:65:91:e7:f0:4f:
21:86:10:3b:e0:ba:d0:6a:6d:17:ac:33:cf:ad:14:e5:4b:62:
a3:39:b1:35:49:de:a8:0c:e4:03:81:cc:eb:c2:e9:3c:c5:fa:
98:e5:45:7a:3e:51:07:a3:3a:bb:c8:d8:f1:8a:ba:4a:dd:de:
87:b9:70:75:6c:b9:46:f8:c5:d2:40:fa:8f:32:33:5c:c8:b5:
02:44:ff:5d:ce:0c:24:e2:db:cf:53:bf:b2:b2:4c:8b:f7:2c:
0a:04:44:ff:7a:25:f6:f1:47:97:d9:10:e1:50:fd:c0:36:4f:
70:70:e2:67:df:12:ea:31:19:ea:d2:ec:96:8f:38:c3:70:de:
53:77:7a:b4:8c:27:d3:10:6f:5a:4e:96:25:13:45:14:d5:49:
43:14:4f:7e:96:5d:6b:a8:2e:c3:07:b5:79:6a:e7:1b:89:9e:
4f:af:b2:d8:d0:a9:f2:5b:84:72:17:28:b0:6d:b6:14:91:f4:
13:00:c7:be:0e:48:b1:43:6f:08:af:7d:84:ba:57:7c:6b:5b:
a8:1f:cd:fc:a2:2a:26:64:f3:a9:b5:b8:e3:4a:8f:f3:b0:29:
54:c3:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org