Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/hc76nQ0w23nLZ0FU1v7daCfmmdY.roa
File: hc76nQ0w23nLZ0FU1v7daCfmmdY.roa (raw, json)
Hash identifier: Rd5UiXu0F4E6pL8mjZbQhDihQz65qfX1DQ4e1pENBj8=
Subject key identifier: 85:CE:FA:9D:0D:30:DB:79:CB:67:41:54:D6:FE:DD:68:27:E6:99:D6
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018AD602DFC9242F5B29BBC523566E3878F6
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/hc76nQ0w23nLZ0FU1v7daCfmmdY.roa
Signing time: Wed 27 Sep 2023 09:40:27 +0000
ROA not before: Wed 27 Sep 2023 09:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197658
IP address blocks: 31.41.8.0/21 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:02:df:c9:24:2f:5b:29:bb:c5:23:56:6e:38:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Sep 27 09:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85cefa9d0d30db79cb674154d6fedd6827e699d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:a0:f2:bb:a5:d1:cc:03:68:6d:00:c7:80:
b7:14:aa:85:22:6e:86:49:72:d5:57:b2:89:6d:ac:
56:e6:21:58:49:0f:ee:7f:7d:4c:16:35:95:86:0d:
cb:26:c9:96:52:68:72:5f:dd:f5:78:e6:e9:33:a8:
11:45:42:e3:c2:b7:f8:16:d6:95:09:53:45:d3:f2:
85:a5:7c:ad:10:04:29:6b:4f:41:55:80:d6:99:83:
46:40:01:e2:da:b4:22:bb:aa:bc:69:9b:c3:69:e5:
fb:2f:54:df:04:c7:06:0a:90:33:c6:65:00:b5:c6:
92:70:ed:88:95:4b:c4:f9:47:40:64:21:80:db:94:
02:c4:38:3b:ad:b4:d8:8b:55:b4:9e:34:0c:ce:00:
48:b6:98:94:7d:c8:07:ca:89:38:8e:d7:ae:34:f0:
0e:12:2e:3e:ad:e9:98:23:4c:a1:2b:f2:ed:c8:88:
bd:d2:b7:b9:2a:43:c1:ea:8a:70:dd:d4:63:8d:dc:
ec:94:2a:00:46:fe:4a:4e:25:42:ec:6d:c1:5e:b6:
c9:fc:6c:65:81:0e:0d:af:4d:03:25:33:be:e7:45:
59:f1:39:62:bb:34:f4:db:3c:58:f3:b9:92:28:0c:
10:20:31:b2:22:6d:a7:b4:18:6a:a3:78:41:95:c7:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:FA:9D:0D:30:DB:79:CB:67:41:54:D6:FE:DD:68:27:E6:99:D6
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/hc76nQ0w23nLZ0FU1v7daCfmmdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.8.0/21
Signature Algorithm: sha256WithRSAEncryption
51:1b:61:6f:88:34:61:86:be:9c:94:ea:5d:70:d5:62:ec:8f:
fe:ae:ab:2f:34:4b:13:75:c9:50:f7:5b:66:d1:62:5f:d4:bb:
34:1d:ba:50:91:e9:85:e6:ed:b6:a4:7d:b7:ca:8b:08:a9:38:
5a:46:cb:19:e7:9c:8f:c2:e3:61:1b:5a:95:0f:3b:20:f5:1d:
29:f2:1e:02:e2:aa:19:45:f9:1a:08:14:e7:81:a3:f6:39:b7:
38:80:b8:37:f4:5f:08:b1:ec:02:56:cb:fb:7c:82:6c:63:7b:
e5:07:86:cc:1f:ec:4f:4a:66:15:10:f4:57:89:7d:33:99:e6:
a8:4a:47:1d:60:20:33:d3:a8:c7:ab:0b:82:54:42:54:b6:71:
1a:46:d6:27:45:84:09:1d:72:8f:6b:72:a7:44:e0:31:88:18:
9d:2d:bb:f0:a5:04:45:6b:67:4a:58:b0:e2:9f:b8:67:b3:d4:
8b:46:3b:10:fa:dd:ae:51:7c:83:ff:1b:be:4e:81:7f:1a:90:
47:38:a2:2b:00:6d:f6:91:d0:f4:73:f1:2c:c8:6e:34:61:ce:
98:1d:94:82:2b:4e:2a:07:a0:9f:8b:1b:31:fe:a3:4f:a0:a3:
85:25:80:ef:11:53:f5:6f:b6:fc:78:08:43:ab:97:7d:1f:ac:
fd:a7:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:48 2024 by rpki-client on console-ams.rpki-client.org