Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/kdfNzn8HIUbStkPS8IuYVbwX6Hg.roa
File: kdfNzn8HIUbStkPS8IuYVbwX6Hg.roa (raw, json)
Hash identifier: SHGtXmmnlo0j8goXjV0P6tyO3pvmZFI3W9CgtI6OtAc=
Subject key identifier: 91:D7:CD:CE:7F:07:21:46:D2:B6:43:D2:F0:8B:98:55:BC:17:E8:78
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01856E2667C2FA5616783E8B6AE146A67AF9
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/kdfNzn8HIUbStkPS8IuYVbwX6Hg.roa
Signing time: Sun 01 Jan 2023 16:24:48 +0000
ROA not before: Sun 01 Jan 2023 16:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197658
IP address blocks: 31.41.8.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 23 May 2023 07:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:67:c2:fa:56:16:78:3e:8b:6a:e1:46:a6:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 16:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91d7cdce7f072146d2b643d2f08b9855bc17e878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:3b:ff:7e:17:2b:b4:1b:52:e0:0e:db:30:
e3:91:1e:7c:39:86:9e:85:20:55:e5:f6:45:db:f1:
01:89:25:da:50:a4:f8:b2:72:15:11:05:82:9f:2d:
e4:4e:6a:20:8e:cf:b4:f0:4e:3e:c7:c8:6e:21:65:
63:29:dc:75:66:56:c0:92:a9:07:c6:66:d9:4b:f6:
a4:01:6d:ad:2a:8d:05:74:91:85:14:87:0a:21:f6:
8c:73:55:51:b8:02:13:2b:6b:47:e4:99:71:f8:8d:
01:31:b0:bb:a6:8c:92:27:0c:d6:f0:04:4e:36:73:
16:ee:15:6e:d3:85:78:5d:d5:2a:66:32:4b:8b:94:
d0:81:be:b4:e1:59:87:a1:f1:9d:39:73:6e:7f:13:
13:2c:79:1f:c8:cf:41:10:3a:ce:8a:55:b6:85:03:
3f:cd:0e:f5:5a:52:59:dc:8a:6e:a6:12:19:fa:3b:
ce:ba:04:42:bd:16:bb:61:69:d2:41:07:c0:e2:fd:
81:0d:8e:74:73:8a:ab:61:16:d1:35:70:b2:2f:ec:
0c:37:78:ca:b6:c2:80:28:01:69:a0:e6:f4:13:f2:
a2:ec:e1:80:3e:91:0e:65:b9:5f:34:cb:89:d6:38:
0d:4d:08:6f:ee:51:9a:e5:86:56:2a:ae:52:9b:71:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D7:CD:CE:7F:07:21:46:D2:B6:43:D2:F0:8B:98:55:BC:17:E8:78
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/kdfNzn8HIUbStkPS8IuYVbwX6Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.8.0/21
Signature Algorithm: sha256WithRSAEncryption
85:20:3d:44:89:c7:43:8c:d4:9e:d9:b9:81:a9:ab:5a:85:28:
f8:c4:8b:3f:9b:07:28:1e:e2:00:e9:fe:96:dd:1b:f3:28:fd:
0c:b5:0a:da:5f:cf:ef:a7:a3:de:4f:0a:d6:4d:11:61:c5:89:
43:68:ee:ad:71:15:dd:4f:0d:ee:bc:a0:c9:db:07:65:7d:92:
b9:d2:e2:4b:1c:15:f3:27:2a:43:2e:54:04:45:a3:ec:8f:b2:
6a:7d:cd:ed:35:b2:0e:a5:87:66:33:11:64:e5:fa:1b:14:a1:
55:f4:ab:a9:f0:84:bd:5a:75:33:7d:d0:fb:5a:df:56:e0:35:
9c:a4:02:99:6c:3d:9e:06:b4:93:b6:36:a0:f0:a7:9d:f0:92:
f7:8a:3a:be:f1:8d:55:89:a5:5b:22:b8:b0:8a:4d:34:54:00:
5d:74:59:b2:36:e5:a5:ef:56:34:b2:c2:fb:58:00:eb:74:af:
12:40:ec:87:1f:2a:28:af:b6:b1:0c:9b:53:db:02:46:f4:6e:
0e:ae:d6:97:48:bc:d8:da:92:be:85:73:1b:22:19:de:51:27:
90:ac:fd:f6:6d:09:59:28:36:d3:dd:b7:62:06:96:41:39:6f:
02:3c:fa:77:09:d8:e0:84:50:17:8c:7b:d2:aa:21:cb:87:7e:
e8:df:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:48 2024 by rpki-client on console-ams.rpki-client.org