Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/uMCGGQlP32Lh9k7-kFvf4Udfkpg.roa
File: uMCGGQlP32Lh9k7-kFvf4Udfkpg.roa (raw, json)
Hash identifier: iNOc2J7lLXxcQeVS0o0PCHZ5hOKOy/NB7PIsE0CtFS4=
Subject key identifier: B8:C0:86:19:09:4F:DF:62:E1:F6:4E:FE:90:5B:DF:E1:47:5F:92:98
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 0187E5AFE768D550287882F49377198702BE
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/uMCGGQlP32Lh9k7-kFvf4Udfkpg.roa
Signing time: Thu 04 May 2023 07:35:23 +0000
ROA not before: Thu 04 May 2023 07:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56749
IP address blocks: 31.130.183.0/24 maxlen: 24
31.130.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 08:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:af:e7:68:d5:50:28:78:82:f4:93:77:19:87:02:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: May 4 07:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8c08619094fdf62e1f64efe905bdfe1475f9298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:e3:06:87:74:92:95:1c:be:6c:6f:33:fd:
25:6f:05:ae:9c:e5:9e:69:63:96:64:19:30:ee:0b:
fd:ea:03:c6:ca:87:a8:89:4a:b7:f7:06:ca:2c:28:
d7:f6:27:65:51:d1:e1:35:39:67:6b:bf:68:f8:5d:
41:04:40:da:82:f7:de:ef:67:5f:51:dd:32:d6:20:
86:22:bd:bb:d3:7f:69:fb:b9:66:a9:b4:58:1a:b8:
37:c0:8c:c7:34:d6:2b:aa:b6:ba:e6:91:95:af:4a:
46:ad:d0:51:cf:b8:94:a4:02:d8:92:75:7e:45:cb:
de:f1:2d:84:33:77:8c:e3:b0:d3:b6:e0:34:e8:89:
a3:05:4f:dd:02:02:5c:6c:78:f9:ad:6b:08:c5:26:
7d:3e:8a:ac:d6:71:39:48:a3:50:93:a9:7d:9c:9d:
97:e7:d6:f6:e6:5c:4a:e5:a6:f6:dd:b4:5d:4c:5c:
4b:53:ea:f4:37:c1:e1:b6:e6:4d:3f:a8:13:dc:62:
14:b4:0a:a8:5b:40:a4:6a:ed:d4:5f:e4:37:8c:56:
95:d8:3b:5d:ec:5a:8d:5a:e8:72:06:06:53:06:19:
41:64:d1:2d:4b:24:9a:f1:05:c9:ce:af:a9:30:40:
24:4b:85:6b:fb:70:ff:fa:92:45:7e:96:71:7f:6b:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C0:86:19:09:4F:DF:62:E1:F6:4E:FE:90:5B:DF:E1:47:5F:92:98
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/uMCGGQlP32Lh9k7-kFvf4Udfkpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.182.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:89:6b:30:bc:12:0a:ed:01:16:a4:70:44:0f:5c:63:04:15:
3c:46:b1:f0:16:1b:bf:10:4a:e1:79:96:3b:8d:17:52:3c:18:
13:db:0e:be:93:f9:05:7f:8a:b1:e5:1a:32:85:38:0b:98:cc:
c3:40:84:36:d4:60:43:f5:21:9c:3f:4d:e1:33:50:b7:4d:64:
64:5d:73:fa:13:ad:43:58:67:15:63:b6:1d:aa:f7:fe:74:4d:
a4:62:4a:89:b0:8c:c8:a9:93:0f:63:86:b9:41:f4:ef:eb:3a:
df:a9:b4:2a:0a:e6:cd:97:76:31:98:e0:7d:d7:f0:cf:e2:b2:
6b:fb:39:37:55:70:c7:9f:1c:8c:d6:94:37:36:15:18:b6:8f:
01:a5:ca:d8:10:15:42:f3:43:3e:c6:4b:43:bb:f4:a5:fb:60:
66:37:82:1e:ae:da:5b:12:b5:e2:72:58:39:a9:e2:18:90:fb:
28:05:bc:26:a0:e0:57:34:d2:70:1b:be:df:86:ba:54:9a:ac:
38:6d:c7:13:4f:e2:2e:72:fc:04:97:7c:dc:90:ba:18:98:1a:
4d:a8:b9:e3:73:d8:d2:20:30:a3:77:27:21:f6:a0:23:da:1d:
52:39:09:4e:76:c9:ad:10:81:e8:85:a1:11:e9:02:b8:a4:5b:
57:cf:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org