Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hhieejL0p93bWDCUHXIfAr2wBZ8.roa
File: hhieejL0p93bWDCUHXIfAr2wBZ8.roa (raw, json)
Hash identifier: GUxUj3yLDzaRWDgkWMNE4b6fkprtcMPK/eT3UhPY8Tw=
Subject key identifier: 86:18:9E:7A:32:F4:A7:DD:DB:58:30:94:1D:72:1F:02:BD:B0:05:9F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185700289BC7912FC30946BFC99BA080653
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hhieejL0p93bWDCUHXIfAr2wBZ8.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 31.210.43.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:89:bc:79:12:fc:30:94:6b:fc:99:ba:08:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86189e7a32f4a7dddb5830941d721f02bdb0059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:88:60:5b:a0:99:5c:b1:dc:d8:c4:df:4c:af:
0b:35:3a:87:38:f6:e3:5e:8a:8f:f3:fc:46:8e:ab:
0e:03:46:b4:bd:fc:0d:97:99:0e:81:a3:4e:14:08:
1e:2f:28:55:69:a4:66:7a:a7:14:00:07:37:ca:ea:
ba:11:6e:9b:ba:e3:42:d3:30:8f:a6:bd:6b:07:0a:
3c:4e:ab:6f:3b:02:52:cc:e3:16:c5:5c:64:e0:9b:
9c:fa:43:14:f0:c3:63:d2:3d:08:8a:ad:ca:6f:ca:
48:96:8f:5f:0b:e2:bc:d4:0a:7e:c4:f3:09:43:fc:
8d:63:ab:7a:dc:8e:ea:e1:0a:f7:d2:00:57:15:6f:
44:e3:1e:66:0b:25:b7:f1:e1:17:1b:6d:18:49:64:
4f:1b:39:e4:91:49:c9:29:ee:87:3c:a0:bb:5b:05:
97:b7:91:2a:0b:a4:06:9e:6f:8d:88:b0:6d:ba:b1:
6f:70:a1:42:8f:38:63:b5:2b:39:ac:d4:88:3d:54:
ee:32:a7:10:b2:db:73:19:33:2b:bd:88:f1:c9:fe:
4d:63:99:70:a7:44:c1:ef:34:26:f0:cc:e8:60:75:
57:98:59:bd:ac:00:e4:88:5b:0c:f4:f4:57:4d:04:
93:d2:02:0d:f8:0e:90:b2:3d:3c:a5:69:a7:ec:4d:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:9E:7A:32:F4:A7:DD:DB:58:30:94:1D:72:1F:02:BD:B0:05:9F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hhieejL0p93bWDCUHXIfAr2wBZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.43.0/24
31.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
19:de:48:09:37:e1:07:72:a3:f0:43:45:30:c3:fe:b1:1c:6d:
62:07:bd:24:fa:3d:bd:de:4b:8b:5c:e2:d7:86:2e:a0:35:d7:
f9:f7:f2:a4:17:3f:4e:22:01:92:88:6e:ea:6d:b3:1f:23:50:
dc:cb:6f:7d:0a:16:15:fc:60:9a:a5:6b:36:32:b1:3b:dd:70:
74:03:58:9b:22:9a:4d:e8:97:d0:41:8b:c4:ab:26:8e:9c:74:
4a:98:9a:93:da:00:e2:3a:77:6a:99:2a:51:15:bc:24:7f:22:
86:0b:09:2c:01:7c:1e:f8:0a:5b:3f:75:85:6b:39:0b:da:ab:
f5:ec:46:92:dd:fd:b1:c8:17:7d:2d:5d:1b:0e:94:38:4a:ee:
57:48:00:a4:d4:69:d4:44:83:9b:18:3e:15:e7:a4:18:d1:8d:
09:d9:57:ef:e7:d7:31:e0:19:6d:b9:ac:88:c0:58:06:4b:6b:
40:23:27:e0:33:25:fe:f0:ee:e0:4f:42:f8:fe:e6:69:12:28:
aa:38:b1:cb:a4:26:29:44:9a:ea:33:c3:36:a1:b5:bb:ba:ce:
75:45:32:41:c3:fa:96:03:c7:fe:7a:ee:8c:06:fa:9f:fa:c2:
ad:56:b6:67:9e:14:77:81:1a:ec:c3:df:27:c4:a9:d6:9b:8e:
8c:56:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org