Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/xJT99ctKOoW5StH7fRkz_t26YfI.roa
File: xJT99ctKOoW5StH7fRkz_t26YfI.roa (raw, json)
Hash identifier: lxfScnEwmbxVlrthI0/tb4mAgMhUf8KcVXNQG7ep+e4=
Subject key identifier: C4:94:FD:F5:CB:4A:3A:85:B9:4A:D1:FB:7D:19:33:FE:DD:BA:61:F2
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 018721A7A16DB27BB4E9B0BB9BBEA20D112E
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/xJT99ctKOoW5StH7fRkz_t26YfI.roa
Signing time: Mon 27 Mar 2023 06:00:46 +0000
ROA not before: Mon 27 Mar 2023 06:00:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199110
IP address blocks: 31.44.251.0/24 maxlen: 24
31.44.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:a7:a1:6d:b2:7b:b4:e9:b0:bb:9b:be:a2:0d:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Mar 27 06:00:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c494fdf5cb4a3a85b94ad1fb7d1933feddba61f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:a1:72:2d:06:4b:cf:46:f1:60:00:b6:c1:
ec:75:64:5e:d9:ad:9d:b4:66:6b:1d:d0:62:a7:06:
5f:46:c9:86:6e:54:7d:66:eb:d5:04:d9:ec:be:c3:
fe:37:54:eb:26:5a:e3:35:65:6a:eb:f1:8d:23:a9:
b1:f0:a4:8a:5b:78:36:14:fa:d6:fe:cc:53:3a:f5:
a4:f6:5e:d0:ea:66:05:77:2f:b1:73:4b:f5:4d:00:
e3:c6:7a:9a:7a:9e:a9:20:2b:07:ff:f6:e1:9e:f3:
32:06:b8:78:46:74:0e:56:e5:04:27:76:64:bf:af:
f0:ba:44:88:7c:31:42:9d:5d:03:87:54:c5:91:9b:
6c:7d:c5:25:e6:3c:cf:f2:d0:75:13:54:59:36:e4:
aa:e5:0e:ff:9a:c1:8a:fb:b0:89:45:86:50:3c:a6:
88:78:50:0e:41:0b:83:30:47:2a:1b:8f:c5:0e:44:
56:18:6b:be:26:48:00:20:fa:aa:e9:7f:f1:fe:ba:
a1:b8:a9:db:f6:70:a0:62:d5:4b:66:8e:a1:2d:ef:
82:50:3f:21:d0:48:1b:47:46:b5:ac:c7:d6:8b:9e:
0a:42:0a:25:aa:b2:19:5c:f8:46:48:fb:31:3d:70:
b9:1f:07:0e:b9:f0:17:00:eb:5b:d2:e2:7a:24:78:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:FD:F5:CB:4A:3A:85:B9:4A:D1:FB:7D:19:33:FE:DD:BA:61:F2
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/xJT99ctKOoW5StH7fRkz_t26YfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.250.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a8:1e:50:75:97:bc:50:44:dd:28:63:25:97:24:63:f1:55:
f2:5e:f0:88:5f:82:ff:64:71:14:ee:66:75:7d:e8:bc:4a:a3:
c3:8f:9f:72:c9:01:ac:56:7c:25:cc:ee:9b:08:59:bb:af:10:
e0:40:75:07:25:1e:ef:dc:37:a9:fe:57:b4:3c:1c:56:a4:e0:
ad:be:b2:3c:12:0b:51:aa:b6:eb:26:b5:56:71:1f:ce:0a:78:
a1:14:29:60:22:5d:05:7e:86:62:a8:d1:61:7d:5e:7b:d4:9d:
ee:0f:4b:7f:e2:0c:aa:50:5b:85:4c:a2:b9:ea:18:78:d0:47:
4e:cb:af:bc:fd:35:bc:cb:34:c7:03:02:e0:39:fe:10:9d:71:
d8:9f:e6:fc:1b:7f:d1:9c:0e:2f:42:37:8e:84:af:ce:d8:6a:
fb:e0:93:2b:53:13:a5:ac:62:90:91:4a:e8:a8:50:ec:e6:80:
6d:0a:ee:46:81:3d:c8:a3:9e:c6:7c:c2:2a:84:a9:86:32:c1:
ac:4b:e2:b9:a0:02:de:d4:cd:f2:24:7e:26:33:ed:73:ee:cb:
70:90:21:5d:3a:5c:dd:61:a5:fe:a1:dc:a9:a5:af:4b:d5:e1:
10:9e:ec:b9:36:2d:1b:d0:27:c3:4a:fc:dd:c6:73:e0:b7:77:
79:21:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:22 2024 by rpki-client on console-ams.rpki-client.org