Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LjppgOokfeB9wi5Gq8gSRQDzStg.roa
File: LjppgOokfeB9wi5Gq8gSRQDzStg.roa (raw, json)
Hash identifier: hSpiR6wU2F0Lu2xUH1GF4XPe7xFFRnSJMgamb+VZf8I=
Subject key identifier: 2E:3A:69:80:EA:24:7D:E0:7D:C2:2E:46:AB:C8:12:45:00:F3:4A:D8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01857002976A47E823B906DA05FEDDA6EDFF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LjppgOokfeB9wi5Gq8gSRQDzStg.roa
Signing time: Mon 02 Jan 2023 01:04:56 +0000
ROA not before: Mon 02 Jan 2023 01:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 31.210.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 19:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:97:6a:47:e8:23:b9:06:da:05:fe:dd:a6:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e3a6980ea247de07dc22e46abc8124500f34ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:92:88:43:b6:72:cd:6a:d9:27:a5:8a:12:
61:e3:6f:7a:02:06:8e:5e:0f:d7:da:c5:7b:bf:a1:
6e:1d:71:30:42:d3:00:fa:79:df:c1:53:9b:82:03:
4b:8a:b0:d8:55:83:5a:09:71:40:05:ef:96:de:fa:
14:80:cd:36:74:26:bc:30:d2:d8:5a:5b:0a:c3:f4:
81:e9:e8:56:01:48:12:e9:6f:40:d4:55:2a:a2:11:
c3:28:36:cb:07:df:2a:d5:b4:11:f0:ec:22:b5:1f:
ae:a4:c5:88:f6:a3:00:a3:5b:f0:91:72:e3:0b:10:
45:d5:8e:ff:3c:a9:3f:e4:3c:8d:75:5d:9a:ac:13:
4c:2a:be:a4:26:ad:b8:2b:84:32:8f:db:b9:32:58:
f1:10:26:5c:ca:bc:aa:a9:1b:ea:92:4d:3d:9d:56:
85:f4:44:af:d3:7f:8f:e0:88:b8:85:de:91:34:1c:
69:b0:7e:bb:9e:90:c9:71:a8:d4:0a:6b:6e:eb:43:
5d:71:32:5d:4d:ae:54:ac:35:21:51:f1:50:e9:fa:
ed:50:57:57:9e:57:d0:db:45:e4:39:95:c2:ca:ac:
a2:e0:59:32:ef:cc:9d:b6:9b:4e:35:f6:6d:09:38:
c7:80:fb:1b:d3:7e:ff:87:67:69:e8:fd:8b:0e:86:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:69:80:EA:24:7D:E0:7D:C2:2E:46:AB:C8:12:45:00:F3:4A:D8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LjppgOokfeB9wi5Gq8gSRQDzStg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.39.0/24
Signature Algorithm: sha256WithRSAEncryption
25:39:9e:f2:35:1f:a3:ea:92:9e:a5:17:73:90:f1:41:de:a1:
e7:da:f4:d6:e6:43:98:19:75:08:72:f2:ee:0a:ab:13:bf:12:
7a:24:c8:d8:72:15:9c:3d:bb:1e:0b:6c:67:eb:a2:31:8d:2c:
a7:c2:74:d2:12:5d:d3:3d:33:94:5e:16:00:51:36:7b:bc:41:
92:4c:1b:0c:41:86:67:8f:1b:44:da:03:04:9e:bc:8f:ba:d3:
8d:ca:ae:45:ed:d6:11:27:28:dc:28:64:5d:c6:9b:63:57:f3:
34:6f:82:b8:ea:09:46:43:8c:ba:52:e7:bc:dd:6e:dd:3a:fd:
e3:6b:a2:7b:9d:33:11:8e:a4:f5:dd:1c:7b:42:7c:fb:80:2c:
ad:54:b8:ef:41:5f:67:c4:c2:37:ed:7f:20:c6:e8:02:6d:64:
d6:5d:66:5c:37:4b:55:c0:1b:cd:1b:22:ff:67:91:a3:7e:66:
79:41:85:a3:04:d6:db:2c:78:01:11:9c:dc:da:57:72:f0:88:
25:65:0b:e2:45:b4:bd:ac:b1:13:cf:b7:2a:e2:84:8f:38:da:
69:78:98:4c:da:ed:57:54:97:34:77:85:71:27:87:31:2a:7d:
fe:16:ad:db:27:20:a5:91:0c:1e:4a:ca:ce:5d:c4:b3:a2:a2:
f4:74:da:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org