Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/A0shf1KA0BxrhZT91WbuF9mM8h4.roa
File: A0shf1KA0BxrhZT91WbuF9mM8h4.roa (raw, json)
Hash identifier: 0xxVizrwN9mVIw9k27ken+Qd4TGry03n7WoM+JxvM4A=
Subject key identifier: 03:4B:21:7F:52:80:D0:1C:6B:85:94:FD:D5:66:EE:17:D9:8C:F2:1E
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 01856F42DAB12FD716EB0E8749725BFD8FF0
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/A0shf1KA0BxrhZT91WbuF9mM8h4.roa
Signing time: Sun 01 Jan 2023 21:35:30 +0000
ROA not before: Sun 01 Jan 2023 21:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197943
IP address blocks: 31.211.168.0/22 maxlen: 22
31.211.172.0/24 maxlen: 24
2a03:7360:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:da:b1:2f:d7:16:eb:0e:87:49:72:5b:fd:8f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Jan 1 21:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=034b217f5280d01c6b8594fdd566ee17d98cf21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:38:bb:8c:2b:03:30:f2:b2:db:33:d6:53:
e7:ef:6b:67:fa:43:8d:5a:7b:ab:16:4e:cf:cb:1d:
03:bd:9c:a2:ca:3f:66:35:a2:9e:77:10:2a:92:12:
0a:68:8e:9c:22:17:4d:0b:6f:72:83:33:34:79:0a:
f0:d4:68:82:33:11:f6:84:9f:50:b3:76:69:00:a6:
ec:9d:67:cd:c1:c2:a3:a7:28:d8:82:8e:12:73:e1:
e3:91:45:96:20:19:be:8f:22:1c:a7:4a:eb:13:ad:
9b:8f:79:8c:e8:3a:fc:61:70:fb:e5:7c:56:7f:1e:
d3:0c:38:16:7b:91:c6:b1:43:5f:6b:15:87:bb:47:
54:a5:b3:b5:aa:a0:a3:bc:be:de:4d:08:d2:d8:6f:
58:1a:4d:10:b5:70:c3:2a:17:9d:68:c7:fb:e3:c0:
76:28:ab:24:2b:4c:45:a3:9c:6f:3b:56:31:d4:bb:
88:63:d6:f4:1c:30:e2:32:b8:54:eb:75:05:f1:aa:
44:d1:1f:1e:30:78:e9:d8:ea:e1:2e:34:ac:fb:67:
dd:bb:87:35:eb:e2:7b:14:7f:7a:fd:2c:e4:0f:b2:
53:63:5a:dc:2e:cf:cb:cd:2d:53:ce:4b:bf:8a:fb:
60:28:a5:d5:68:af:3c:78:1b:d4:0e:ef:0d:54:cf:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:21:7F:52:80:D0:1C:6B:85:94:FD:D5:66:EE:17:D9:8C:F2:1E
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/A0shf1KA0BxrhZT91WbuF9mM8h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.168.0-31.211.172.255
IPv6:
2a03:7360:1::/48
Signature Algorithm: sha256WithRSAEncryption
1d:44:1c:b4:f5:3a:1e:19:14:37:20:ed:77:76:b1:a1:09:7f:
ae:f3:ae:46:6c:01:4b:9a:2d:6c:00:a1:2a:e4:56:30:19:ff:
5c:33:2c:dc:23:44:56:56:5d:c4:78:fc:82:79:fb:6f:5e:36:
c7:72:38:1f:f7:5e:6f:18:7f:68:bd:21:ec:28:91:36:f3:58:
69:44:a1:79:f3:6e:9b:9f:4f:b9:a0:83:fd:88:32:8a:36:07:
7e:5f:ed:d2:73:5d:72:2a:89:04:5e:5c:89:db:48:66:9f:4f:
3f:a9:82:da:b4:6f:a0:ec:b0:fd:2e:22:83:48:ac:fc:f8:4e:
3d:24:81:83:a1:8b:eb:62:95:29:01:24:b0:13:cc:a2:69:17:
49:c1:cb:b3:c3:a9:3d:9a:a2:4f:90:80:b2:37:e4:80:fe:c1:
59:3d:59:81:0a:fe:cc:38:88:3e:15:f6:d8:cc:63:84:63:bf:
2c:e1:d0:ce:2c:9e:c4:56:7f:00:69:04:87:5b:45:60:21:82:
4f:e0:ff:6c:c5:1b:c2:1d:06:66:85:8b:8c:5f:02:38:b9:df:
c0:06:bb:ae:81:44:0a:70:68:b5:2a:43:bf:f9:93:c3:05:8c:
e8:e1:83:f6:43:9b:5b:ad:7b:cf:f3:bd:96:36:f2:5d:2e:2b:
21:70:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:25 2024 by rpki-client on console-fra.rpki-client.org