Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0Rffs2qX1myr8KDp68Y6gPznJ0k.roa
File: 0Rffs2qX1myr8KDp68Y6gPznJ0k.roa (raw, json)
Hash identifier: 3qoWAwQdhR9jwdMWqiFhMagKjZXDCZFQ2v9R06PYq0c=
Subject key identifier: D1:17:DF:B3:6A:97:D6:6C:AB:F0:A0:E9:EB:C6:3A:80:FC:E7:27:49
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018C81EFF7A554B45B77D6A4C0CE7B141FCA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0Rffs2qX1myr8KDp68Y6gPznJ0k.roa
Signing time: Tue 19 Dec 2023 11:57:16 +0000
ROA not before: Tue 19 Dec 2023 11:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49565
IP address blocks: 31.210.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:ef:f7:a5:54:b4:5b:77:d6:a4:c0:ce:7b:14:1f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 19 11:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d117dfb36a97d66cabf0a0e9ebc63a80fce72749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:d1:39:0b:f4:85:2b:b3:0d:c6:65:26:7a:
ba:27:c1:b1:19:81:cf:c3:f6:d1:0e:a6:4b:ee:84:
79:36:aa:c4:35:59:2d:ba:a7:4c:de:65:fc:3c:01:
2d:8b:74:8c:be:a4:b7:e0:ca:c6:12:b8:fc:38:ae:
60:c6:8f:5c:18:9d:27:7c:48:44:5e:38:f5:d7:05:
0c:58:5e:20:65:45:db:eb:89:b1:d2:03:3c:9b:13:
9e:ba:5d:a4:f6:50:f1:0a:a4:8c:b4:11:ee:ef:47:
16:5e:af:5a:4e:ff:cc:0e:ce:b4:d2:ab:54:be:54:
6b:be:a0:c1:14:4f:09:fa:ac:cd:11:a1:6a:b5:50:
75:6f:1e:30:69:35:2f:3d:3f:29:b5:90:89:fc:7a:
5a:6b:04:3c:a7:b8:6e:3d:12:9e:db:41:7f:0b:33:
5c:94:46:b3:2c:ea:1c:02:7a:d8:87:18:32:a2:08:
29:be:e7:57:8c:d4:53:bf:78:1d:08:33:33:78:65:
5c:93:4f:3c:2b:71:03:50:26:30:86:23:0a:55:e6:
60:08:81:b9:20:03:aa:a6:26:cb:ae:53:b5:3d:3d:
29:62:4f:8e:2c:fb:23:f4:2d:c9:55:df:e5:e4:f8:
2e:f9:fd:5a:c6:9a:62:27:74:d7:9d:de:2d:32:ef:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:DF:B3:6A:97:D6:6C:AB:F0:A0:E9:EB:C6:3A:80:FC:E7:27:49
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0Rffs2qX1myr8KDp68Y6gPznJ0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6c:cc:d6:d0:cb:00:2a:99:e1:8d:c8:0e:e9:65:1a:75:18:
95:fd:4e:d9:08:18:da:ff:07:c8:d6:bc:62:11:39:f3:41:53:
40:ab:19:79:e8:68:e3:bd:d4:2f:80:3c:a8:60:ab:2b:32:6b:
9a:5b:b4:11:85:38:b7:46:18:4c:8d:c7:18:f7:50:bb:f5:ba:
2d:9d:65:e2:67:d3:43:0f:24:6a:e4:6e:cb:99:6d:93:c3:d1:
82:cb:2c:0f:32:c1:6a:c0:3d:37:2a:1c:fd:84:40:f2:f8:9b:
18:d1:92:5f:c8:9d:4d:15:70:e2:66:f8:68:65:15:46:4c:f5:
a4:43:ab:5f:04:70:0d:c5:41:11:21:bf:94:6e:d5:89:5e:a5:
9f:ef:a3:e6:06:8f:bf:75:02:0a:7f:51:63:a2:bb:77:c6:25:
61:a5:2e:80:4f:98:5c:e2:2f:43:00:6f:27:8c:5a:db:20:dc:
f5:75:51:b0:41:80:4d:0e:d3:8a:ee:24:44:09:e2:80:be:97:
08:79:d9:65:7c:ee:bf:11:f2:3b:5c:94:6f:6b:1f:55:43:16:
53:08:e2:33:be:ce:11:76:de:5f:ca:c4:ea:c4:87:d2:20:16:
2f:d3:74:55:3d:5b:99:b9:f8:e6:a1:b6:4a:48:12:33:c8:15:
2e:5e:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org