Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QmmGbxEUcgkJ5N46UsNIc2-o3Rc.roa
File: QmmGbxEUcgkJ5N46UsNIc2-o3Rc.roa (raw, json)
Hash identifier: imkcn8/psfnYQrmp3JB/KOBMeocvsddbdKojCHIhl4g=
Subject key identifier: 42:69:86:6F:11:14:72:09:09:E4:DE:3A:52:C3:48:73:6F:A8:DD:17
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028360F118B597C3DEB344D7B638DD
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QmmGbxEUcgkJ5N46UsNIc2-o3Rc.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47185
IP address blocks: 31.145.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:83:60:f1:18:b5:97:c3:de:b3:44:d7:b6:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4269866f1114720909e4de3a52c348736fa8dd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:c4:cb:1b:19:a2:c9:99:38:e1:18:46:91:
7e:2d:7c:6c:b6:4a:f1:f5:c9:d7:fa:0b:31:44:2c:
7f:a7:03:59:bd:20:73:2f:7b:61:f8:dc:24:b9:82:
9e:61:fc:80:4d:b5:80:47:d1:c0:72:e8:15:1e:4a:
f9:7d:f7:93:59:b6:52:ab:80:f2:f6:78:d2:a6:68:
1e:4e:f4:98:b1:cb:a8:71:cc:ba:fb:85:f5:b6:61:
7d:d7:03:81:06:f6:4e:40:d3:1f:25:91:2f:a7:ad:
3d:c0:e9:66:85:4a:84:41:f3:9c:b0:63:c1:79:94:
12:30:ed:f1:15:8e:c2:56:a9:42:0a:77:cd:26:57:
ac:e1:48:b7:f9:94:69:97:7b:c7:eb:66:13:e7:8f:
38:91:ea:19:9d:cc:18:f3:0c:40:ac:fc:f4:b4:4a:
36:d7:d9:28:9a:30:4b:39:91:22:08:05:2b:8b:dc:
6c:b1:c7:2f:e0:4b:59:39:f3:ac:27:7f:59:8d:b3:
3a:0f:53:02:29:65:25:63:be:51:db:02:59:0a:4e:
70:36:7b:72:bd:a3:26:27:39:f8:92:ce:4c:70:55:
fe:cc:b1:c9:16:68:ba:86:51:0f:9f:61:a5:3b:39:
ee:29:69:a6:66:15:06:a8:2f:10:26:91:33:d8:b6:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:86:6F:11:14:72:09:09:E4:DE:3A:52:C3:48:73:6F:A8:DD:17
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QmmGbxEUcgkJ5N46UsNIc2-o3Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.88.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a8:e7:de:3f:8e:e2:ab:a7:4f:0b:70:e2:c8:97:f0:d3:58:
65:35:99:8b:0a:a2:34:bd:0c:b5:ce:c1:e1:0c:0e:d8:c1:9a:
d0:9d:9c:df:8e:b6:2f:55:d8:ee:7d:9c:74:fe:5a:c4:f8:45:
60:19:6b:f4:8c:b9:79:7a:7c:d2:26:0f:79:e4:24:f8:56:3c:
f5:f3:2b:4c:b0:dc:10:08:9a:e3:cb:7d:8e:f0:20:ba:b1:68:
a7:f9:53:7a:62:45:5f:6a:6f:f5:13:dc:a0:a7:c2:a2:c1:88:
6b:a4:8e:60:57:df:e5:2f:c5:41:71:ba:30:46:68:af:00:c5:
1f:bf:2f:01:83:17:4a:88:40:08:e4:16:3e:be:a8:be:63:1f:
a1:15:e0:b4:1e:e2:dd:dd:a1:b5:c9:8d:8d:89:f0:43:9e:9d:
9a:de:28:85:28:29:5f:78:f8:01:d6:ca:de:77:6f:fc:9c:e7:
cc:c5:ee:7f:e9:61:c2:1d:1d:cc:b0:aa:df:4d:d3:75:4f:c1:
bb:cf:02:df:a8:b7:7c:b1:d5:86:54:43:f9:2f:3f:86:a2:37:
23:c0:8d:eb:62:7d:43:2e:0a:a8:8c:99:1f:f3:a1:5e:1d:a5:
ce:d0:7f:c8:35:91:e4:53:ba:d3:37:82:6b:b0:ff:c8:f5:35:
71:0b:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org