Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/8llSGdmtkDDSK3hiCOXPqp_CrO0.roa
File: 8llSGdmtkDDSK3hiCOXPqp_CrO0.roa (raw, json)
Hash identifier: 6ohzYS2ulNAgDijYE+54RC6cAUt8ZigWnGyB43+BG5U=
Subject key identifier: F2:59:52:19:D9:AD:90:30:D2:2B:78:62:08:E5:CF:AA:9F:C2:AC:ED
Certificate issuer: /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial: 01874CDA673292A9FE684EF7738458DAD677
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/8llSGdmtkDDSK3hiCOXPqp_CrO0.roa
Signing time: Tue 04 Apr 2023 15:19:54 +0000
ROA not before: Tue 04 Apr 2023 15:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 31.204.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:da:67:32:92:a9:fe:68:4e:f7:73:84:58:da:d6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Validity
Not Before: Apr 4 15:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2595219d9ad9030d22b786208e5cfaa9fc2aced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:6a:a5:e9:d3:ac:62:77:41:7e:8f:ff:92:
40:dd:ff:a9:05:11:a3:7a:5a:38:cc:06:02:0b:c4:
54:8d:ca:f7:8d:04:9c:49:3b:ab:98:9f:4f:c1:75:
18:91:c8:ab:f8:ac:0e:44:7b:bd:3e:c2:fa:6a:42:
10:db:54:78:f3:3c:b9:c5:f2:e3:d4:5e:d5:72:43:
9e:3e:f0:56:f4:a4:97:be:b1:d8:87:4f:a8:3a:1a:
67:4f:bd:87:0b:3f:37:45:4b:79:35:af:b5:bd:58:
49:57:c4:79:59:9c:b3:93:60:ec:23:06:79:10:94:
53:91:9c:7c:fa:33:f1:d5:98:64:87:f8:13:b0:ab:
35:b4:66:e0:39:d6:ae:b4:49:a4:13:89:90:4f:2b:
d5:85:f8:a7:27:5e:64:97:2a:c0:5e:e3:b3:f3:2f:
82:91:f2:c3:72:86:23:78:53:77:57:c4:5b:1f:ee:
45:e0:89:61:b5:9a:eb:8f:90:74:28:ea:90:67:66:
78:50:64:d5:99:d4:28:f1:3b:c5:42:5b:4d:d1:9c:
ee:ba:27:ac:43:56:7b:41:9e:61:4a:4a:c8:39:8c:
fe:16:82:49:84:1a:64:b3:cc:20:0e:ed:c9:10:67:
57:d6:61:8f:84:89:70:14:1a:ab:4d:2a:77:bf:55:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:52:19:D9:AD:90:30:D2:2B:78:62:08:E5:CF:AA:9F:C2:AC:ED
X509v3 Authority Key Identifier:
keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/8llSGdmtkDDSK3hiCOXPqp_CrO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:64:9d:76:66:b2:86:63:1d:5e:39:93:04:10:7d:54:a2:49:
47:70:31:a8:7d:f7:98:5c:01:9d:65:cf:22:e6:34:b9:9c:bf:
16:6a:6b:d8:d0:ad:4f:54:02:3e:8f:76:57:38:eb:0c:21:09:
bb:69:b2:92:9b:5c:df:46:bf:64:db:f5:8c:7c:1a:bc:58:41:
ac:fa:a6:fa:b3:19:38:dc:1a:1d:10:61:8d:b6:4f:a5:2c:fa:
11:a3:7a:00:5f:27:df:4e:a6:74:58:aa:7d:5b:fb:9f:65:f6:
46:03:48:02:a9:6b:9c:ed:95:27:6a:93:df:9b:eb:cd:79:b7:
24:65:aa:a1:e1:47:5f:63:0d:f4:60:44:08:89:20:b1:e2:10:
05:9b:d2:75:1c:58:67:aa:cf:1b:68:24:2f:00:1c:44:e8:46:
3b:93:1f:27:9c:99:3e:51:5b:9e:3c:26:8f:e5:85:c4:71:df:
82:70:06:ae:43:ff:bc:dd:95:e9:8b:4e:e3:11:5c:fc:a4:ed:
22:77:c6:87:39:cb:65:f6:93:de:85:5b:f5:24:55:97:48:7c:
70:d0:73:2f:5d:7b:f1:d1:03:7c:63:9a:e2:fa:82:82:cd:6d:
46:80:16:0b:9b:e0:05:d3:a0:23:1c:4e:2a:57:6f:b9:56:ae:
2d:ad:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:20 2024 by rpki-client on console-ams.rpki-client.org