Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/o8e0qZPQEWdb8Dqr4tTlBqUl2M0.roa
File: o8e0qZPQEWdb8Dqr4tTlBqUl2M0.roa (raw, json)
Hash identifier: 0Ugszn9LwLSePYWO0yQdlLHqZgNxdo2bLauLnGhJaAk=
Subject key identifier: A3:C7:B4:A9:93:D0:11:67:5B:F0:3A:AB:E2:D4:E5:06:A5:25:D8:CD
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018B850988BEC25AEBB04BF515BE24B5D100
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/o8e0qZPQEWdb8Dqr4tTlBqUl2M0.roa
Signing time: Tue 31 Oct 2023 09:21:16 +0000
ROA not before: Tue 31 Oct 2023 09:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216184
IP address blocks: 31.210.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 10:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:09:88:be:c2:5a:eb:b0:4b:f5:15:be:24:b5:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 31 09:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3c7b4a993d011675bf03aabe2d4e506a525d8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d0:fc:bd:86:2b:7f:6f:6d:8c:b4:ea:69:1d:
60:67:22:00:a6:4b:75:68:86:b4:cd:63:07:a9:f2:
4c:d6:a5:67:e3:50:4c:c4:44:a9:0f:7c:8e:c2:3f:
6a:9d:1b:e8:9e:de:be:fd:70:be:69:cc:2d:80:cc:
2b:66:aa:e8:08:34:67:31:c2:0a:e6:a9:ac:f9:96:
0b:8f:09:5e:69:b3:de:d8:33:cb:cb:8d:df:e1:04:
5e:59:2e:de:d4:dd:39:45:1f:be:99:07:8a:b8:93:
fc:b2:4c:19:ec:cb:81:3c:2d:70:07:4d:33:31:28:
be:ab:5b:9c:b3:b1:c6:36:d6:30:fe:62:02:ef:ea:
da:72:a1:a0:22:01:06:46:18:6a:6e:9e:84:7e:33:
fb:89:b2:a6:a0:b7:d0:77:0b:91:95:b4:81:11:59:
65:6c:e4:52:3e:e6:6e:14:d4:86:77:fd:de:40:03:
c8:70:09:2e:8a:94:e9:17:cc:41:58:37:ac:d8:66:
34:05:50:39:7e:70:be:10:79:a0:d2:1e:ac:e4:6e:
6a:48:76:fa:6c:8d:c4:71:5f:00:72:33:40:e6:bc:
04:c9:d3:24:d0:07:e6:c5:20:a7:e6:7e:fe:da:d6:
7e:0f:48:1e:74:2d:c4:17:a5:5b:67:37:be:9a:32:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:B4:A9:93:D0:11:67:5B:F0:3A:AB:E2:D4:E5:06:A5:25:D8:CD
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/o8e0qZPQEWdb8Dqr4tTlBqUl2M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.39.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e0:f0:2a:69:dd:62:58:18:7b:09:9a:af:68:dd:77:08:35:
93:77:61:1a:04:dc:5f:ff:60:d4:81:4d:73:6e:fd:27:6b:ac:
09:2c:94:74:63:5e:7e:74:fd:4e:45:ca:4f:32:07:a8:79:7e:
f6:2b:b3:f5:1c:74:2f:3a:b8:48:74:b5:19:69:77:1c:08:15:
d8:cb:06:58:9b:2f:5c:e9:36:7b:6e:63:01:50:96:fe:0b:e1:
cd:3f:82:6a:73:89:ff:b5:87:cb:bc:dc:a6:4b:1d:3c:58:a9:
e4:21:b0:86:dc:2c:86:24:01:30:a2:90:49:6d:89:2f:1a:39:
e3:a1:5c:e3:31:b6:d5:e2:33:a2:ab:2b:c4:7e:d1:dc:f1:cb:
eb:5f:3e:f2:8d:1c:38:e5:54:9d:0e:20:b1:7e:d1:82:ca:26:
78:4b:29:e3:dd:4d:e2:db:7a:07:8b:02:5e:8d:1b:fa:b9:9f:
c9:6a:e8:be:a5:03:7a:0a:c9:1d:c0:a3:09:04:79:03:e9:e9:
91:a1:b4:73:9a:c2:ce:1b:71:d4:ef:14:09:82:f7:e3:88:a5:
08:a6:09:1d:d1:08:60:2a:f4:8b:40:4c:f3:69:0b:82:db:04:
0a:cf:6f:a3:96:04:68:9e:62:eb:36:21:58:cb:41:06:0a:49:
a7:f4:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org