Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/v35a7YEZhufFknY7nqwpZcJCTXE.roa
File: v35a7YEZhufFknY7nqwpZcJCTXE.roa (raw, json)
Hash identifier: tlV0b7ONyYgJ/WZ1TrhiZttRvhbQDI3akTtoZUyXwvQ=
Subject key identifier: BF:7E:5A:ED:81:19:86:E7:C5:92:76:3B:9E:AC:29:65:C2:42:4D:71
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 018CC424959F33CAB26CBF13C0EB18086159
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/v35a7YEZhufFknY7nqwpZcJCTXE.roa
Signing time: Mon 01 Jan 2024 08:29:41 +0000
ROA not before: Mon 01 Jan 2024 08:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56802
IP address blocks: 31.134.192.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 25 Apr 2024 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:95:9f:33:ca:b2:6c:bf:13:c0:eb:18:08:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Jan 1 08:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf7e5aed811986e7c592763b9eac2965c2424d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:10:e5:de:43:c9:83:59:2a:01:5b:c8:60:
9e:2a:d5:51:73:1a:39:23:a1:b4:f3:67:51:a0:30:
d2:09:2b:2e:f5:23:8c:dc:32:a6:30:34:d7:98:1e:
3b:ca:d3:97:97:c4:5a:7a:13:91:8d:db:70:b6:44:
15:bc:0a:36:c5:26:07:4b:0c:dd:f9:76:32:dd:1c:
f7:79:cf:4c:bf:12:55:e9:60:15:1c:6b:82:13:26:
91:0d:ef:d0:aa:b5:c2:08:a6:2c:eb:0f:a1:b6:68:
b1:fd:a5:b5:08:63:03:3d:29:7f:62:e3:c7:ec:a8:
19:ba:02:76:ea:40:93:35:d9:57:aa:e5:a3:6b:db:
02:79:51:bd:b6:cc:67:39:69:76:1f:18:fe:c7:3b:
ce:55:e8:f5:22:6d:97:fc:11:d7:21:4f:e3:d3:fb:
ab:97:17:2f:78:80:68:54:12:67:b9:00:d8:ae:d3:
75:aa:f9:a7:17:0a:cc:4d:f4:ce:3c:b5:91:e9:14:
5a:ef:9d:64:15:c7:13:89:7c:ca:3a:34:da:19:65:
8d:dd:18:82:ad:54:02:d2:89:70:2d:02:f8:2e:b2:
41:38:be:37:00:e0:71:f5:f6:5a:73:29:45:83:bb:
a3:aa:20:62:b3:1e:3e:29:6c:18:41:be:88:33:0e:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7E:5A:ED:81:19:86:E7:C5:92:76:3B:9E:AC:29:65:C2:42:4D:71
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/v35a7YEZhufFknY7nqwpZcJCTXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.192.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:0d:d4:3b:b0:1f:3a:77:2d:da:7e:ac:ee:94:a8:60:2e:60:
1e:a0:f8:1e:5c:bf:2e:6b:05:37:53:a9:39:b8:f2:2f:7d:c6:
15:fc:71:af:ed:8f:7b:4f:a3:48:d4:5f:0e:18:94:3e:c3:8a:
de:98:cb:cf:3e:30:c4:44:bf:86:c0:69:b6:f2:5d:f1:18:30:
ed:cc:74:9f:d7:e8:c3:f2:68:0a:68:6c:ee:65:6d:91:8a:83:
1c:58:b0:fb:03:32:82:60:69:a0:5a:6a:d1:44:7c:24:d1:a0:
27:ed:19:d1:e6:4b:52:01:8c:bc:56:4c:b4:22:f2:c5:4a:b2:
ff:69:2e:ac:e9:1e:b8:4c:de:80:e9:d2:55:ac:89:61:96:95:
cb:3d:8d:c6:e5:37:27:72:a4:24:6a:74:79:28:e7:03:9b:4d:
9a:de:ec:70:87:7d:fc:af:7e:e0:a8:af:10:78:03:b1:b2:11:
77:eb:9a:d3:3b:94:bd:83:cf:75:f0:29:0e:73:36:73:62:36:
3c:5c:d6:c9:7b:50:c2:f6:24:2f:db:f2:16:72:ce:50:92:10:
c5:57:13:7a:3a:c4:0b:14:e0:80:c9:0c:c4:db:5b:f6:6c:f4:
0b:c7:29:4d:2d:9f:6a:2f:5c:0b:d8:96:95:3c:bb:63:cb:9a:
bf:ec:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:25 2024 by rpki-client on console-ams.rpki-client.org