Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/jfdKXcohHh-e0DbczQwkq1DZun8.roa
File: jfdKXcohHh-e0DbczQwkq1DZun8.roa (raw, json)
Hash identifier: uydVLaqkZHnx5zKXhe8p7ozRDEhfEZ6RH8etklVsgUI=
Subject key identifier: 8D:F7:4A:5D:CA:21:1E:1F:9E:D0:36:DC:CD:0C:24:AB:50:D9:BA:7F
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F51B3848CA5E1925BB42113B1C90
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/jfdKXcohHh-e0DbczQwkq1DZun8.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197743
IP address blocks: 31.3.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f5:1b:38:48:ca:5e:19:25:bb:42:11:3b:1c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8df74a5dca211e1f9ed036dccd0c24ab50d9ba7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fc:b1:b4:f5:9e:4d:15:32:b5:36:97:e5:fe:
cf:6d:74:72:01:aa:48:31:ce:29:3f:74:aa:f9:09:
22:a1:aa:f7:9b:10:cd:8b:30:94:d1:81:5e:55:08:
b8:6e:ed:72:74:73:bc:2c:7c:8f:cd:c9:89:3a:42:
05:77:24:64:cf:a2:a5:d5:ed:85:86:f8:20:29:d2:
64:fa:b4:4f:df:5e:2b:9d:5c:d4:74:d3:5e:e6:7b:
cb:72:61:03:a9:9b:6a:c5:65:eb:60:25:52:6f:fd:
ec:9b:13:55:22:6b:e7:68:dd:fd:07:72:0b:f7:70:
c7:3d:b5:ef:0a:fe:71:03:7b:fb:54:c0:f2:f6:23:
09:04:1d:3c:8b:02:4d:23:3b:a1:a0:e5:17:36:19:
48:a7:c1:e3:74:9a:f0:08:09:6d:ad:00:b4:ad:b7:
eb:bd:ce:64:5a:fb:88:10:20:e8:67:3f:6b:54:f2:
fc:e1:1c:47:28:ec:3b:e8:25:a3:81:04:89:5e:68:
40:b3:43:33:9f:71:8a:65:0f:0a:74:47:b5:6c:e0:
ef:89:54:d4:7c:11:c8:2c:60:18:c4:dd:b4:21:1c:
7c:08:f0:66:3f:6b:e2:d7:0b:1a:12:89:2b:78:6e:
f3:1b:09:3d:29:fb:69:3d:c2:2b:37:b4:a5:be:a2:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:4A:5D:CA:21:1E:1F:9E:D0:36:DC:CD:0C:24:AB:50:D9:BA:7F
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/jfdKXcohHh-e0DbczQwkq1DZun8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.192.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:2e:ea:ae:aa:03:6e:7b:86:32:fb:5a:14:50:bc:75:d0:2f:
c1:5a:b2:6c:82:8e:07:21:25:b5:7b:c1:5c:b5:7a:73:89:d7:
f3:92:ca:44:0e:5f:32:51:5c:26:bf:c6:c1:ad:69:17:86:52:
5c:78:05:54:be:dd:77:fa:b2:79:f8:94:49:64:08:ea:a6:53:
32:1c:a6:0c:51:fa:3e:19:3f:65:4b:be:35:83:71:eb:0c:8e:
1a:cd:24:56:af:9e:71:35:69:5a:1a:de:e6:25:dc:3c:ed:cb:
53:af:25:e2:19:6e:d9:48:06:6d:74:45:2d:12:87:12:50:16:
b4:65:50:14:0c:4a:04:7a:9c:96:6b:82:9b:50:41:29:76:71:
27:de:6b:7a:64:ab:c6:4c:79:d3:27:79:ae:42:45:d0:ae:7e:
8c:c5:bc:d0:3d:da:75:d6:54:41:98:ea:c4:78:aa:86:97:2d:
37:8b:1b:1e:d9:d2:90:88:08:1d:39:e8:0e:dc:c0:f5:c6:0d:
c0:6b:ec:8c:6b:8f:4f:cb:f6:d3:78:df:84:bb:c5:fe:72:94:
d9:c5:92:11:95:06:f6:34:5b:67:42:ae:92:77:67:89:ce:63:
0b:48:b3:d8:ba:e7:e6:20:44:d2:7f:23:a5:5f:3f:fa:63:e7:
87:eb:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org