Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/kdjnreoyyEzvMmjhf6rlNd2CiuQ.roa
File: kdjnreoyyEzvMmjhf6rlNd2CiuQ.roa (raw, json)
Hash identifier: 7vBQKUWMYcdYsao3rnof0DCHhvlZCHwfVaZxvGTirG4=
Subject key identifier: 91:D8:E7:AD:EA:32:C8:4C:EF:32:68:E1:7F:AA:E5:35:DD:82:8A:E4
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01856FD528A1CF5000A1FB87377CB82A7840
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/kdjnreoyyEzvMmjhf6rlNd2CiuQ.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 31.186.168.0/23 maxlen: 23
2a02:40c0::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:28:a1:cf:50:00:a1:fb:87:37:7c:b8:2a:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91d8e7adea32c84cef3268e17faae535dd828ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ef:a2:c9:86:23:78:41:fc:e6:22:41:53:f7:
f9:c2:b2:8b:89:9a:13:dd:1d:fd:ff:4d:23:6c:d6:
0d:69:17:1c:0f:d9:5e:76:95:69:98:bd:5d:55:22:
c9:6a:54:c4:ba:9a:89:f0:89:00:b3:c8:47:83:c7:
23:da:59:64:09:22:6d:3a:b5:d7:f5:33:78:54:0e:
4b:de:55:97:c2:68:6f:72:97:93:57:b6:91:58:a7:
2b:cd:10:14:44:bb:f5:da:c2:6e:7b:f3:35:a2:ff:
51:2d:8b:0b:35:5f:c0:7d:d9:65:6f:e7:d5:fe:93:
95:22:83:44:53:22:c2:6c:47:85:d3:1a:0f:0d:75:
c4:ff:35:2f:cf:af:cb:aa:0f:d1:c9:7f:8f:2c:80:
17:58:d8:52:5d:37:51:82:75:ef:87:38:3f:0f:c9:
57:21:ed:77:b5:48:92:92:a7:a5:76:8a:6d:6d:df:
1f:6f:0d:55:de:ff:0f:d3:66:17:73:be:a6:4e:7e:
64:06:7d:0f:d2:75:52:2e:0c:8c:be:8f:1e:53:ed:
df:53:79:89:22:c2:c3:3a:63:f7:67:56:7f:6f:e2:
56:26:52:11:eb:27:f5:68:70:cc:be:55:62:0a:f8:
94:ca:15:f8:81:1f:fc:28:09:c6:a3:c5:b9:80:02:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D8:E7:AD:EA:32:C8:4C:EF:32:68:E1:7F:AA:E5:35:DD:82:8A:E4
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/kdjnreoyyEzvMmjhf6rlNd2CiuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.168.0/23
IPv6:
2a02:40c0::/36
Signature Algorithm: sha256WithRSAEncryption
97:f5:3c:05:27:94:47:af:c0:af:0b:18:14:68:e4:ad:9c:28:
d5:a1:65:c4:7d:ab:50:8e:40:9d:fb:69:7b:79:f5:ce:2d:f9:
8d:9b:4a:97:19:0a:aa:83:1a:fe:65:6e:59:41:50:79:0e:8c:
5c:72:3e:80:c4:85:a4:bc:a8:fb:bf:25:47:02:c9:c2:45:9f:
01:ff:0d:c8:c8:aa:d0:3f:3b:86:05:ee:71:e8:a0:67:9e:35:
2b:93:d8:52:8d:89:3f:30:0c:2a:00:87:72:bb:74:9d:5a:3a:
8c:75:27:fd:2a:1b:cb:d4:f6:db:81:4b:e2:66:f1:1a:b5:48:
18:94:f4:a7:1a:4f:15:00:0d:40:af:e6:b3:f8:ce:df:b3:d0:
25:d8:00:4d:c1:fe:ac:c5:f6:16:b1:7a:05:7f:d5:9f:b7:13:
c4:42:99:0e:2f:75:52:9e:38:92:99:6a:90:6d:fa:fc:9b:06:
46:01:ee:6d:34:61:30:16:af:ed:7b:57:e3:ff:13:b4:7b:03:
bb:5b:aa:15:2a:85:80:45:7d:08:f4:11:82:b5:e7:1a:f6:1f:
c8:fb:1b:88:6d:f2:cf:05:3f:2d:aa:ef:e5:1e:28:87:dd:ba:
b7:9a:1c:ec:6c:a7:06:53:42:49:58:e2:e9:0f:ca:81:1e:a6:
19:94:13:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org