Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9B7245yHaPYDyTJCROMfMgDCp98.roa
File: 9B7245yHaPYDyTJCROMfMgDCp98.roa (raw, json)
Hash identifier: D2IW02NYAgP+eCsqJgD05roAGU5/58PrtStoDFHKL3s=
Subject key identifier: F4:1E:F6:E3:9C:87:68:F6:03:C9:32:42:44:E3:1F:32:00:C2:A7:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FECC471095968A807F24B67C8467C7D6F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9B7245yHaPYDyTJCROMfMgDCp98.roa
Signing time: Thu 06 Jun 2024 08:57:27 +0000
ROA not before: Thu 06 Jun 2024 08:57:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 31.13.248.0/24 maxlen: 24
94.156.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 15:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:c4:71:09:59:68:a8:07:f2:4b:67:c8:46:7c:7d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 6 08:57:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f41ef6e39c8768f603c9324244e31f3200c2a7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:72:7a:e6:26:f4:68:3b:5e:ce:c0:d0:1b:
0f:77:8a:4d:40:4a:93:32:9f:3e:12:93:c4:2b:d6:
c5:de:09:02:03:69:96:1f:f0:be:52:58:6d:44:ca:
46:6f:32:39:ab:c3:e8:a9:cf:16:57:54:2f:a3:e7:
2a:c7:7c:52:fe:f7:78:11:b3:77:59:09:aa:28:03:
51:c2:3d:af:07:44:5e:01:9f:bb:7d:6d:af:3d:4f:
85:96:19:8a:06:79:a4:a6:7f:53:9b:74:c3:50:60:
4d:6d:7e:4b:c6:41:c1:9d:d0:5f:4f:31:c8:c0:e4:
e4:75:58:bf:87:28:10:fc:f3:cf:79:f4:dc:d4:66:
94:ee:97:5a:d6:87:58:b1:eb:f9:9d:b4:8b:5e:72:
3f:9c:b8:6f:bf:bc:31:5f:87:53:57:44:7a:97:d2:
c0:c6:59:46:74:55:c0:2a:5e:43:e3:58:ea:12:fe:
e5:40:bd:44:da:68:be:c9:7f:de:e1:94:bd:bb:1a:
ea:31:9a:f3:97:5e:43:af:8c:85:95:1a:24:2c:bf:
7d:b0:55:ee:be:37:38:e4:ea:14:70:f9:29:7c:3a:
75:ac:ca:30:eb:6d:7b:95:15:2f:5f:03:cf:12:9e:
31:24:0b:d1:a5:6f:66:c7:9c:d2:c4:45:d2:13:70:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:F6:E3:9C:87:68:F6:03:C9:32:42:44:E3:1F:32:00:C2:A7:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9B7245yHaPYDyTJCROMfMgDCp98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.248.0/24
94.156.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e9:5a:2f:4d:d8:ac:11:09:79:db:7a:15:89:c3:2d:86:89:
b5:b9:26:d0:4c:0c:8b:59:09:09:2a:44:e4:6e:0c:e4:3f:0c:
b4:2f:d0:89:b3:2c:83:6d:7f:69:34:2b:5e:ee:a1:38:12:32:
d8:25:65:11:d8:3e:c7:2c:f4:99:88:a3:47:67:c8:2c:c8:78:
05:12:a2:27:f8:df:08:9c:2e:52:02:8d:10:7b:24:ce:61:91:
75:07:4f:5b:cf:c6:45:a3:7c:24:83:cd:98:cb:7b:50:f6:b8:
53:cc:e2:34:a8:73:78:37:77:90:df:cf:b6:a7:bc:c5:ef:23:
c3:15:f5:90:ce:ee:39:6e:86:b6:b8:4c:73:b8:da:60:4b:7e:
c6:7f:9f:1b:2c:31:2b:54:58:33:e1:ba:dc:85:fc:04:d8:a9:
23:98:6b:9b:59:50:20:09:8c:2c:05:ec:aa:b7:43:8b:c8:47:
6b:2e:1b:bf:ad:27:a1:f9:ab:73:32:35:a8:02:0d:67:ca:ce:
f5:b0:67:24:cc:1f:a3:d9:0e:0f:09:fb:ca:bf:65:28:22:76:
78:c5:ad:51:eb:4f:35:cc:e8:1e:db:7f:b0:ed:18:ad:37:6a:
a4:84:e1:f9:ed:a7:f9:06:0a:50:47:78:c3:21:7a:ad:da:be:
ee:9f:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 19:14:39 2024 by rpki-client on console-fra.rpki-client.org