Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/elKtph1NdcePp8QGjfwYjN2Jqg4.roa
File: elKtph1NdcePp8QGjfwYjN2Jqg4.roa (raw, json)
Hash identifier: 078o5y03AXT8yv2D/2plLxFgMzIrfjWWiJf2U6MlDBI=
Subject key identifier: 7A:52:AD:A6:1D:4D:75:C7:8F:A7:C4:06:8D:FC:18:8C:DD:89:AA:0E
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 018721A6BA25670C7E397AA6C339C66BA1B9
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/elKtph1NdcePp8QGjfwYjN2Jqg4.roa
Signing time: Mon 27 Mar 2023 05:59:47 +0000
ROA not before: Mon 27 Mar 2023 05:59:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50187
IP address blocks: 31.44.245.0/24 maxlen: 24
31.44.244.0/24 maxlen: 24
31.44.244.0/23 maxlen: 23
31.44.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:a6:ba:25:67:0c:7e:39:7a:a6:c3:39:c6:6b:a1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Mar 27 05:59:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a52ada61d4d75c78fa7c4068dfc188cdd89aa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:ab:df:e7:e2:e1:e7:b0:46:8d:3e:ad:17:
a0:a4:24:34:fb:e4:61:8d:9f:a4:34:59:3e:9b:40:
55:39:93:34:21:f9:b0:e8:4d:e2:63:09:c6:dc:4a:
a8:3a:df:f1:70:5c:15:5a:b8:f7:a4:02:a0:e0:5f:
e7:70:ca:bb:f6:8e:95:1d:f9:16:52:4a:01:c6:56:
53:cd:c2:9e:1b:37:7b:37:ad:fb:76:d5:16:a8:12:
c7:55:db:04:ce:0e:37:9c:49:83:87:e0:39:dd:c7:
db:3a:5c:9d:08:56:59:ff:a2:43:c1:66:3c:b9:45:
2d:e3:5d:26:66:c2:5e:23:30:2d:57:e6:be:5c:de:
af:87:2b:56:d6:23:92:f5:87:6f:2a:31:26:31:8f:
32:54:a5:70:10:8e:70:a1:3e:0a:73:cf:ed:4a:29:
27:f0:82:2e:c6:c6:c0:4e:ec:b0:17:35:ed:7b:f8:
94:bd:f9:5d:93:aa:7d:d7:a2:0d:f8:76:8f:d2:2f:
35:08:64:0b:fd:85:19:99:62:fa:6e:72:eb:29:70:
79:32:31:0d:26:3e:9b:b5:74:62:ba:eb:0c:f1:a4:
d4:17:42:f8:a6:c1:47:31:6c:9d:fe:d3:fa:d9:62:
9e:84:2d:f4:f4:26:65:9c:23:cb:36:4d:b3:0d:3b:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:52:AD:A6:1D:4D:75:C7:8F:A7:C4:06:8D:FC:18:8C:DD:89:AA:0E
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/elKtph1NdcePp8QGjfwYjN2Jqg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.244.0/23
31.44.247.0/24
Signature Algorithm: sha256WithRSAEncryption
16:be:b2:db:cc:48:7e:d8:ff:65:1f:c2:86:1a:2e:f3:97:fc:
d7:40:4b:6a:a8:1b:f8:21:ce:4d:8b:bf:8a:c7:b5:11:46:94:
4d:04:4a:81:24:99:3f:61:15:2b:24:49:39:2f:36:c8:e3:a8:
a0:16:de:5b:17:c9:bc:13:62:5b:96:c0:0a:72:3f:4f:b4:e9:
bf:54:fc:91:c9:55:11:8e:dc:5b:51:00:63:b2:f4:20:36:a7:
d9:3a:fb:73:e6:93:de:8f:05:e0:87:5b:9c:08:8d:d0:ac:1c:
d0:ae:5d:30:21:22:4c:17:cc:b7:43:69:33:d8:7a:9b:7a:01:
09:67:d5:6a:ac:d1:08:3a:7a:b3:71:ab:ef:68:e2:76:12:cb:
45:0f:48:62:99:31:97:8e:75:cf:ca:e3:1f:7e:a1:b2:4d:c0:
c4:bc:99:d4:38:db:fe:12:f7:4f:bd:45:6a:07:3b:1b:57:c6:
fe:4a:ae:81:5b:6a:42:69:cc:85:12:c8:49:02:78:06:72:6d:
0e:31:52:d6:d7:1c:0f:1f:31:58:3f:a2:bd:d8:fe:cb:8d:29:
88:a0:00:06:64:c1:6d:61:84:7c:fb:3d:4f:2a:ff:9c:e3:7a:
9a:bf:ff:be:14:15:9f:8b:84:47:4e:89:5d:3d:9a:16:cf:73:
f5:cb:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:06 2024 by rpki-client on console-fra.rpki-client.org