Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/2wqKOVk-tkwSD082mJ1-Vkae85U.roa
File: 2wqKOVk-tkwSD082mJ1-Vkae85U.roa (raw, json)
Hash identifier: g3cb63DXFmhWx27g9uB8grV2G2PywNq2rJ7KcimtUPQ=
Subject key identifier: DB:0A:8A:39:59:3E:B6:4C:12:0F:4F:36:98:9D:7E:56:46:9E:F3:95
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 01856F0B604BA526EBD87543C28D1FCC15EC
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/2wqKOVk-tkwSD082mJ1-Vkae85U.roa
Signing time: Sun 01 Jan 2023 20:34:54 +0000
ROA not before: Sun 01 Jan 2023 20:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60798
IP address blocks: 5.181.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:60:4b:a5:26:eb:d8:75:43:c2:8d:1f:cc:15:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 20:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db0a8a39593eb64c120f4f36989d7e56469ef395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:c3:81:ab:47:be:df:6a:70:aa:e2:af:6a:
f3:30:a6:a4:98:97:40:14:91:53:6c:d6:cd:ba:d0:
8d:e4:f3:0d:b6:7b:a7:9f:51:4a:87:fb:04:b3:b1:
f0:eb:72:b3:86:84:06:22:9b:36:5e:22:a8:73:d2:
0c:06:72:9a:c5:87:11:6c:66:fc:b4:92:6c:9c:19:
13:3a:b8:5a:f4:b4:90:c7:13:0a:3f:64:f7:db:95:
96:78:c6:19:41:a0:2c:e6:31:a2:4b:61:fe:ba:c0:
40:fa:54:2d:d5:93:e6:3d:78:31:f0:94:aa:40:62:
00:54:db:65:93:df:78:65:e7:28:55:db:20:b5:68:
61:39:92:03:c9:a3:80:66:e4:b0:d1:e9:c8:25:41:
45:ce:82:76:b9:28:77:53:64:b4:a9:da:e0:9d:ec:
f8:dd:68:17:22:7f:ee:c5:f3:8f:ae:ef:26:27:d0:
6a:ac:be:0d:a8:c8:28:74:ce:d0:63:7a:f5:7d:5f:
04:3a:e6:07:f8:91:55:01:9f:e3:7e:9b:8c:c9:d0:
45:1b:47:e0:7f:48:02:9c:9a:9e:39:dd:a8:66:cb:
fd:91:25:31:79:3f:37:46:63:a3:9a:fe:3e:4a:97:
ab:ed:03:7c:c1:5a:64:f9:e5:30:3d:2d:66:bb:a5:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0A:8A:39:59:3E:B6:4C:12:0F:4F:36:98:9D:7E:56:46:9E:F3:95
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/2wqKOVk-tkwSD082mJ1-Vkae85U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.31.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:72:c7:11:53:52:55:ab:28:ee:01:94:b1:50:6d:4a:3c:48:
00:01:a5:9a:6b:7c:13:f4:47:b7:8d:26:fc:87:f1:cd:9f:29:
d4:00:64:95:2b:9f:09:03:a7:c2:49:78:05:18:c9:ce:8c:98:
d6:dd:7a:a7:57:ff:00:3e:64:2a:da:02:c7:5f:40:1d:11:47:
7c:9d:b0:8a:a5:22:db:32:d0:33:a2:2e:a0:fb:04:8d:91:d7:
98:a5:28:9c:49:87:ac:6c:5c:44:b7:58:a1:65:24:66:53:f5:
df:ad:28:65:da:05:9e:a8:92:2c:ea:be:53:53:27:3b:a2:2a:
ea:e3:3e:00:af:ca:a9:37:a8:74:0d:eb:c9:d0:27:84:9f:65:
04:86:45:41:9f:b8:78:5b:9e:f3:0d:34:07:7b:f1:9c:65:16:
84:d7:4f:3f:e8:f3:f2:4a:3c:0e:39:52:57:38:99:e4:fc:72:
44:a2:3b:95:2d:f3:8b:5d:e2:b0:4a:7b:c4:9e:99:c3:a4:05:
92:5f:23:22:80:33:2a:ac:1c:1b:fd:38:32:d5:4d:c8:51:f5:
ca:c3:6c:f8:73:e8:bf:a2:af:0e:68:56:bd:29:b9:2c:23:9f:
ac:96:c1:8b:65:f7:be:91:54:65:57:c7:b8:78:5e:46:ff:1d:
5f:14:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:39 2024 by rpki-client on console-ams.rpki-client.org