Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/UU9h6CiHdmUDDUY0AFtocehRcwU.roa
File: UU9h6CiHdmUDDUY0AFtocehRcwU.roa (raw, json)
Hash identifier: 1FWG1yjukdMWr/mGq+Yro9SArVSccOFxh8Mo6oxMj5U=
Subject key identifier: 51:4F:61:E8:28:87:76:65:03:0D:46:34:00:5B:68:71:E8:51:73:05
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F3F0D09ED8BF7C6E182D9BA41B74
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/UU9h6CiHdmUDDUY0AFtocehRcwU.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42041
IP address blocks: 31.128.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f3:f0:d0:9e:d8:bf:7c:6e:18:2d:9b:a4:1b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=514f61e828877665030d4634005b6871e8517305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:cd:ce:9e:72:c1:67:bb:bc:e7:b7:7d:11:
11:d5:1f:2f:4d:e1:05:9f:2f:9b:7d:ce:ca:51:c6:
61:42:f1:43:50:cd:d3:a7:8c:a1:e1:9f:00:28:7e:
a7:f4:14:46:f2:0f:ca:f2:f7:e2:08:2e:c5:e0:6a:
2c:a5:e5:71:99:76:14:36:81:3b:82:93:cd:38:2b:
59:11:24:0b:87:fc:bc:2f:fd:c1:da:37:6f:26:d4:
4e:b4:b0:24:3f:a6:fd:6a:d2:a7:cd:7b:6b:ad:e6:
fb:1e:a6:fc:9f:0e:ed:47:46:bc:62:86:4d:f0:43:
3a:98:e8:12:69:5e:f8:2a:12:35:fd:7f:3e:8b:5f:
6d:28:f9:49:19:aa:ba:89:7c:9e:05:0c:44:04:7f:
9b:4d:63:4c:84:f5:20:1d:da:2e:f3:07:50:1a:56:
3e:2a:26:f4:fd:cb:b1:87:1f:53:4b:21:d8:11:dc:
69:b6:72:1e:0e:30:a0:13:67:0f:42:23:e8:50:15:
65:41:d7:ad:ec:92:f5:93:0f:dc:b3:6e:dc:d0:08:
94:6a:88:be:b2:d3:f8:a5:5a:53:3b:df:c7:8e:9c:
39:c1:73:6b:b4:4f:b2:d2:76:68:07:76:fe:e5:a2:
04:7a:a6:14:8c:1f:31:b9:b7:ea:80:ec:60:8e:49:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:61:E8:28:87:76:65:03:0D:46:34:00:5B:68:71:E8:51:73:05
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/UU9h6CiHdmUDDUY0AFtocehRcwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:16:15:0a:5d:88:1c:f1:de:64:09:5b:33:34:05:d6:81:91:
fa:0f:10:63:cc:da:31:21:cb:f8:bf:d7:81:a9:b7:79:cb:c8:
7e:07:8c:16:74:de:e5:3e:e7:91:e9:64:c5:9d:48:f1:55:0c:
34:40:bc:06:f3:bc:94:81:c3:a5:96:a7:5f:31:47:e5:d9:6b:
5c:a8:35:e9:99:d1:bb:6b:b6:4c:48:c2:5b:65:b9:f6:6f:d4:
d4:6f:0d:fd:4c:3a:7c:4e:61:ce:10:10:bb:a9:d8:a1:cf:78:
9a:2d:b4:be:9d:67:1c:5b:a0:68:a7:bd:59:e8:2f:1a:83:b6:
6a:74:fe:b7:78:61:39:2a:3e:ac:9a:cc:75:d0:55:bd:a1:c0:
56:02:45:d2:9a:c8:67:9d:02:47:da:5d:56:cc:2a:d1:02:d5:
ef:c1:39:55:8c:74:8f:96:4a:4f:ce:26:cc:be:8a:55:a8:95:
d6:66:d2:d7:f3:d2:91:a7:8f:1c:f6:de:97:b2:9f:23:cf:38:
b0:ac:27:94:37:91:ab:54:f5:04:e8:29:bc:7b:12:1c:97:52:
d8:60:a4:89:90:8d:3b:0b:30:2b:29:f3:70:09:08:3c:7d:4a:
d8:9f:67:7c:75:4a:c0:6e:99:8e:af:54:f9:e6:d9:59:bb:a1:
db:39:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org