Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/UuhPxMHF5F6ZbgTpYdNOjpSohdQ.roa
File: UuhPxMHF5F6ZbgTpYdNOjpSohdQ.roa (raw, json)
Hash identifier: i6Pm9bUgxRFlonIilxOa9XKhb97pEQDiLm75KBlrHG8=
Subject key identifier: 52:E8:4F:C4:C1:C5:E4:5E:99:6E:04:E9:61:D3:4E:8E:94:A8:85:D4
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 018DCFDFD14CDDA003727F581901621F083F
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/UuhPxMHF5F6ZbgTpYdNOjpSohdQ.roa
Signing time: Thu 22 Feb 2024 08:12:48 +0000
ROA not before: Thu 22 Feb 2024 08:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215457
IP address blocks: 31.128.56.0/22 maxlen: 22
31.128.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 10:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:df:d1:4c:dd:a0:03:72:7f:58:19:01:62:1f:08:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Feb 22 08:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52e84fc4c1c5e45e996e04e961d34e8e94a885d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:8f:81:cd:16:d7:38:54:87:d2:1a:84:22:
79:6b:56:61:8b:2f:24:0e:5b:b4:3d:9e:15:c6:6f:
a2:c6:c4:d7:f1:63:a3:86:c0:ed:06:af:1d:43:29:
2f:7b:63:54:e0:f8:72:8b:e7:b5:3d:3c:8b:31:1f:
ba:ee:fc:b9:1b:5e:79:3e:c7:8f:fd:01:61:80:3c:
3d:ef:5f:ac:50:2f:e9:ca:f2:a3:62:27:6f:61:4f:
a2:48:6d:51:51:33:fc:1a:c3:f8:1c:c1:6d:10:c6:
09:58:30:e5:d6:21:76:d9:a1:7a:86:84:84:40:c8:
8c:cc:ba:94:05:0a:84:92:31:f3:a3:b2:74:fe:4b:
18:f5:46:5c:90:8c:26:2b:cb:c9:11:10:33:ed:73:
2c:18:36:50:f6:81:7f:34:70:95:9d:d5:90:8f:eb:
e8:63:44:ec:ae:23:fa:28:bf:b4:89:a5:81:51:50:
cf:96:5d:52:4c:8a:b8:76:80:e0:d1:fa:8b:13:2d:
78:35:ea:76:0a:2d:06:84:2a:49:b9:5a:33:9b:43:
68:cb:70:93:2d:18:47:f4:dd:da:0c:e7:d3:71:74:
08:57:4c:62:af:2e:64:98:70:5c:5e:41:c6:d9:7b:
d1:cd:a3:4e:9f:be:5f:4c:d4:f0:97:82:38:9b:a2:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E8:4F:C4:C1:C5:E4:5E:99:6E:04:E9:61:D3:4E:8E:94:A8:85:D4
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/UuhPxMHF5F6ZbgTpYdNOjpSohdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.56.0/22
Signature Algorithm: sha256WithRSAEncryption
82:42:b9:76:dc:1b:a2:44:92:e8:07:75:1b:b9:fe:94:f4:8d:
c4:8d:30:6d:1c:e6:b5:5a:59:c0:d2:74:b4:2b:0c:d9:a1:0c:
3f:0a:08:4e:5a:c5:8d:e7:b5:36:25:51:74:6b:73:59:51:01:
c7:71:4e:f5:10:78:13:d7:17:9a:98:d2:c8:4e:97:7b:1a:e0:
23:ed:e1:8c:2b:2b:f8:e6:e2:c6:cd:6d:42:f5:c3:73:c2:a5:
08:a0:cb:b2:5f:53:bb:84:50:61:3f:9a:47:0d:68:22:de:eb:
b0:c9:f9:33:45:7c:2f:b3:67:55:34:7c:60:cb:e6:ee:e6:45:
be:13:ec:e6:e7:94:b8:34:d8:f7:38:67:64:59:c4:be:1e:84:
0c:c5:a0:3e:08:56:d0:32:fb:ff:1c:3c:97:e1:44:a8:ab:4b:
4b:aa:82:6f:cd:cb:8a:15:16:61:0a:9f:1d:ef:ac:07:5c:06:
ea:f7:e6:b3:9f:49:ee:14:fe:71:40:37:ba:b5:27:14:34:21:
85:99:47:5d:35:a0:14:fd:42:58:61:3f:f0:83:ec:c0:d0:60:
65:be:d7:22:61:9a:b1:cc:ca:b0:ae:49:b8:06:55:c0:a8:99:
ca:e5:8d:2f:ce:bc:af:f6:45:98:f7:93:99:55:77:a6:4b:e7:
06:52:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:50 2024 by rpki-client on console-ams.rpki-client.org