Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/Ii6f5pFhEI5N_tyxWbfLsrHTJBw.roa
File: Ii6f5pFhEI5N_tyxWbfLsrHTJBw.roa (raw, json)
Hash identifier: uiJdg8ds8Kj73X826xnIO/1qoxJVfKCiO+O9/3nhN8E=
Subject key identifier: 22:2E:9F:E6:91:61:10:8E:4D:FE:DC:B1:59:B7:CB:B2:B1:D3:24:1C
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01874E03F359D095E5AE1B7DBD032C4BF4E2
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/Ii6f5pFhEI5N_tyxWbfLsrHTJBw.roa
Signing time: Tue 04 Apr 2023 20:44:54 +0000
ROA not before: Tue 04 Apr 2023 20:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207422
IP address blocks: 31.129.245.0/24 maxlen: 24
31.129.244.0/24 maxlen: 24
31.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:03:f3:59:d0:95:e5:ae:1b:7d:bd:03:2c:4b:f4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Apr 4 20:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=222e9fe69161108e4dfedcb159b7cbb2b1d3241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:4a:fa:44:3f:3f:63:fa:a1:14:b0:fd:42:
1e:d3:c0:de:3b:3e:0e:37:d5:ce:b4:a5:13:ab:85:
17:02:ab:ba:2f:52:40:72:3f:04:de:98:f8:da:8d:
60:02:09:cd:66:a3:04:2a:85:66:e1:f7:17:da:6f:
ef:e2:6f:53:17:45:bf:54:ff:57:57:23:e7:12:04:
9f:f9:d5:6a:a9:c3:77:fe:97:87:e4:91:4d:ba:66:
07:24:7d:15:fe:81:03:19:06:88:03:40:f3:93:92:
a5:e7:60:c5:1c:3e:50:df:fe:60:50:a9:09:7e:b6:
ef:03:ba:30:3a:c6:37:61:ce:b4:d4:0e:46:51:31:
06:74:00:74:ca:3e:36:f1:a7:e2:df:e6:68:5c:16:
bb:62:ff:a8:14:05:f9:e1:b8:e7:fd:eb:c7:5b:b5:
6c:6a:e4:92:0d:cf:ba:aa:4c:ab:93:e9:ff:87:fa:
02:cf:0b:a3:53:92:89:fc:55:1e:65:00:6d:4b:6c:
f9:eb:99:a5:d3:0b:9f:d0:40:3e:cb:e3:86:83:1a:
ef:4d:b1:ea:53:61:3f:a3:ef:07:b8:6d:86:02:66:
2a:c3:5f:fb:60:f6:e5:2f:92:ec:17:15:04:3e:c2:
27:a8:e0:69:4a:5e:a2:33:86:8e:98:f6:ed:d3:17:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:9F:E6:91:61:10:8E:4D:FE:DC:B1:59:B7:CB:B2:B1:D3:24:1C
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/Ii6f5pFhEI5N_tyxWbfLsrHTJBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.244.0-31.129.246.255
Signature Algorithm: sha256WithRSAEncryption
22:cf:a6:1f:dc:fb:04:f4:4f:7f:82:e3:7d:00:32:28:97:51:
e5:c3:75:73:50:dd:2d:e6:72:dc:85:f1:3d:a1:ed:29:ee:7f:
59:cd:f3:dc:f0:1f:c3:c0:33:0d:f6:9a:45:8d:69:79:64:9a:
ec:b4:5b:ed:70:70:e5:03:c0:97:d4:b5:d0:bc:33:e7:fd:08:
fa:12:3d:a3:8f:9f:93:92:5b:e5:df:bd:18:fb:2f:fb:dd:bb:
69:72:9c:87:5b:3e:c1:cb:7d:77:13:87:0b:b8:7e:27:73:0d:
03:fd:67:f9:27:7c:8b:b9:b7:f6:9e:e1:30:18:cd:68:ad:45:
f3:8d:2d:74:ce:68:d9:3f:74:85:ff:d0:85:d4:ff:d0:aa:97:
bb:3e:f2:11:36:4e:38:e0:96:4d:30:2f:28:c1:f4:74:65:c4:
68:43:b6:45:8e:21:02:b4:89:b8:f7:1b:b1:a8:a7:17:b2:1e:
69:87:58:ad:ac:ef:52:6a:a7:fa:a9:d5:1b:8f:5d:b5:db:1a:
c9:71:7b:73:3e:19:53:65:c5:3e:9a:fa:18:45:91:8c:96:d4:
51:c3:e7:99:91:92:f2:46:7f:57:cf:ad:1c:4e:60:e1:a1:87:
02:64:0a:62:96:82:22:74:cf:d9:9c:8e:4e:59:42:6e:2c:5b:
1a:0d:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org