Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ZGI2H1sfOZa_SON013WWEY0SX_k.roa
File: ZGI2H1sfOZa_SON013WWEY0SX_k.roa (raw, json)
Hash identifier: sLeSi4gcH/XCOXB6iK8rmuNbTKIoR+BQsk8KAaPfw4I=
Subject key identifier: 64:62:36:1F:5B:1F:39:96:BF:48:E3:74:D7:75:96:11:8D:12:5F:F9
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018B93F087D8CBD4BC3630E5DE47A492E164
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ZGI2H1sfOZa_SON013WWEY0SX_k.roa
Signing time: Fri 03 Nov 2023 06:48:16 +0000
ROA not before: Fri 03 Nov 2023 06:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216158
IP address blocks: 31.200.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:f0:87:d8:cb:d4:bc:36:30:e5:de:47:a4:92:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Nov 3 06:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6462361f5b1f3996bf48e374d77596118d125ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:2a:54:86:a6:5b:b9:c9:2e:d4:05:09:a1:
6a:eb:b7:21:44:40:f9:61:55:31:65:c3:c6:ce:48:
68:34:a3:6c:bb:ed:f1:35:c5:de:d5:4c:8d:58:f8:
9a:c1:e9:fc:ad:7d:3e:db:54:31:5c:3e:e0:ce:43:
a8:21:49:8d:87:e0:35:1d:00:e3:bf:17:5f:04:2b:
50:5c:22:e5:32:dc:d8:cb:8f:b2:52:29:2b:1c:ec:
97:f9:bd:d6:00:8e:f3:95:dc:ae:46:af:69:53:6d:
de:6b:c6:19:ff:d8:eb:23:2a:15:4b:eb:04:b2:e3:
a5:62:67:69:65:02:25:39:77:d0:6e:44:97:60:7a:
a5:e6:f1:e9:3d:a6:11:bd:c8:a4:39:6c:4e:22:bb:
9c:be:74:14:6b:53:2f:ad:48:cc:54:32:45:e6:15:
60:ac:5d:66:18:97:f3:e5:1c:1c:33:fc:8e:b2:72:
f6:64:c5:a4:0a:1a:38:d5:cf:b8:10:a1:ee:07:c7:
ab:a7:5e:2d:56:19:7e:96:87:16:76:f1:df:32:ae:
38:b5:78:f7:6e:8d:c9:6a:c9:6b:b9:43:8e:63:37:
f7:3d:03:9d:2a:ec:9d:da:9b:28:0c:90:42:9e:a6:
ea:a8:47:ec:22:27:91:59:f4:08:f0:64:09:82:d5:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:36:1F:5B:1F:39:96:BF:48:E3:74:D7:75:96:11:8D:12:5F:F9
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ZGI2H1sfOZa_SON013WWEY0SX_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:82:39:e4:18:8f:b2:e6:af:69:18:e0:03:e3:1b:d7:e1:06:
6f:08:f8:8e:f5:95:be:7f:e8:f7:fc:90:78:93:01:65:a2:79:
b5:e6:21:8b:30:0d:a2:b4:9c:a5:4a:ad:23:d1:18:a5:30:36:
f9:33:63:6b:14:36:52:82:b1:0e:2e:62:1f:8f:6f:99:34:75:
e1:a9:eb:2a:f6:5c:bb:3a:dc:35:0b:32:15:67:fc:3e:59:47:
6a:83:f5:fb:f8:0e:58:d4:79:61:4b:66:18:c8:76:de:a8:63:
1b:38:b0:2b:ed:5a:48:0a:82:06:44:6d:71:2d:62:9a:aa:c0:
96:0e:ac:19:0a:14:a2:a2:ad:a4:f6:f6:08:02:54:ef:5c:b3:
0c:21:b6:09:c3:51:71:ca:60:cc:9e:fa:28:33:72:72:ce:9c:
ab:9c:25:97:93:76:e5:83:aa:d4:80:01:94:45:a2:ef:2c:33:
5a:5e:d5:60:1f:8a:52:90:42:6c:7f:54:40:fa:7d:e4:67:f7:
27:ff:6f:74:10:d0:09:eb:26:73:9e:30:70:46:a7:2e:52:6b:
ae:b6:bf:65:bf:98:1d:1b:38:ef:5f:49:20:5d:28:6e:f1:a5:
e2:7b:48:7d:4d:c1:31:f0:48:e5:bf:23:6a:5f:cc:b2:84:03:
57:88:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:23 2024 by rpki-client on console-fra.rpki-client.org