Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/QjEfP8ROyLGkoOq0Q1IHK6G6msU.roa
File: QjEfP8ROyLGkoOq0Q1IHK6G6msU.roa (raw, json)
Hash identifier: MJdWrVofxbS0r6LVP4i9W2F11IAcFPI5clT6/jjCZAo=
Subject key identifier: 42:31:1F:3F:C4:4E:C8:B1:A4:A0:EA:B4:43:52:07:2B:A1:BA:9A:C5
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 018571953AFA5EE67DF73273F591F0698CD3
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/QjEfP8ROyLGkoOq0Q1IHK6G6msU.roa
Signing time: Mon 02 Jan 2023 08:24:43 +0000
ROA not before: Mon 02 Jan 2023 08:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 31.130.240.0/23 maxlen: 24
178.212.56.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:3a:fa:5e:e6:7d:f7:32:73:f5:91:f0:69:8c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jan 2 08:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42311f3fc44ec8b1a4a0eab44352072ba1ba9ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:3e:45:98:72:56:64:f1:99:16:ee:6e:13:
01:c7:6b:36:00:69:63:51:91:5b:98:73:69:6d:3f:
35:de:bb:db:fc:68:16:7c:b7:a8:80:e2:99:70:6b:
25:22:54:b9:1f:1d:36:42:30:63:c4:6a:79:e2:da:
d5:30:e6:24:2e:5d:1e:d9:e3:12:10:5f:99:15:d1:
f4:a8:6e:3b:f6:df:a4:20:3f:91:52:34:32:0a:5a:
a0:90:85:2a:4f:98:04:e5:12:a0:89:65:28:e1:da:
42:01:7d:0a:54:f8:b9:71:eb:6e:ab:98:c0:3e:25:
0c:c2:78:cc:32:27:54:f9:20:a3:eb:f2:2b:74:59:
d4:ea:e1:8c:2d:68:52:0a:50:97:c7:77:a2:2b:85:
ec:67:73:33:58:5b:a1:c2:66:07:73:9c:28:a3:07:
8f:2b:4c:05:0f:57:d8:c4:11:7f:3f:64:e4:05:32:
b3:08:06:ae:8c:3c:f2:60:e0:7b:6b:c7:7e:be:77:
a4:36:b6:59:0c:99:ef:d3:6a:ee:85:5a:eb:81:e5:
c2:aa:02:6b:7f:7e:48:a4:b6:d1:1f:43:73:cb:93:
1f:08:d0:bc:a9:bb:b1:23:14:d1:fb:0b:89:5b:41:
7f:28:29:2d:b8:23:43:59:70:13:bd:8e:c7:65:33:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:31:1F:3F:C4:4E:C8:B1:A4:A0:EA:B4:43:52:07:2B:A1:BA:9A:C5
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/QjEfP8ROyLGkoOq0Q1IHK6G6msU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.240.0/23
178.212.56.0/23
Signature Algorithm: sha256WithRSAEncryption
64:6e:08:05:07:06:50:70:3b:aa:de:f0:b9:ed:44:54:43:a1:
9f:7d:7a:7b:00:f8:eb:ec:0a:af:ce:f8:82:c9:6c:06:11:f2:
a0:eb:06:a8:ec:8e:25:84:67:ab:64:7e:97:2d:ec:a7:2a:32:
cd:0f:0a:a7:16:d3:6b:d1:31:d6:6b:a1:e6:80:f5:15:cf:63:
3b:24:77:d3:7a:8e:85:1a:27:ab:72:ef:29:5a:72:2b:62:62:
59:65:5e:fd:0f:89:9e:5b:82:a1:b5:f2:52:e1:17:37:e7:9c:
21:d6:4b:3f:72:9f:fc:04:47:0d:24:a7:96:17:05:90:99:dd:
f1:26:39:ab:f8:5b:45:8a:b8:59:4b:29:95:ea:1d:7b:dc:2a:
2c:c0:6c:17:09:7f:ed:4a:96:0d:0b:a5:12:40:37:85:81:af:
82:d3:78:97:26:56:5f:8b:7b:cb:82:9c:9d:0b:42:be:02:a6:
b3:22:36:d4:27:64:73:17:e5:ea:cc:7c:68:d6:ae:9e:ca:6f:
9f:28:f4:74:10:7f:99:a6:09:3f:fb:43:a6:04:54:9a:b4:c1:
e6:19:54:ed:65:56:93:81:d8:55:3f:5c:44:03:0f:e8:29:cb:
9a:1c:22:94:45:87:fa:0e:d0:bf:46:92:45:8a:0a:95:30:32:
cb:b6:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:00 2024 by rpki-client on console-ams.rpki-client.org