Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v3IHMK24LMjBuydN-issKOO7Hsg.roa
File: v3IHMK24LMjBuydN-issKOO7Hsg.roa (raw, json)
Hash identifier: HLqaxJbSC4h/p+2LcdSBX4H3Pfzrx79wRSZj0XUEcgw=
Subject key identifier: BF:72:07:30:AD:B8:2C:C8:C1:BB:27:4D:FA:2B:2C:28:E3:BB:1E:C8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01886CBED319CC74CD3D53990DE4E1A88826
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v3IHMK24LMjBuydN-issKOO7Hsg.roa
Signing time: Tue 30 May 2023 13:00:25 +0000
ROA not before: Tue 30 May 2023 13:00:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 31.210.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:be:d3:19:cc:74:cd:3d:53:99:0d:e4:e1:a8:88:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 30 13:00:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf720730adb82cc8c1bb274dfa2b2c28e3bb1ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:0c:80:33:84:29:c4:88:6c:c8:41:f4:75:
18:84:6e:4a:f4:5d:63:bd:1c:11:4d:d3:ab:df:2c:
18:21:26:66:a2:c8:d1:26:3d:56:a7:63:62:f8:cf:
c2:5a:15:82:6c:a6:85:54:8d:94:f3:ac:a7:6c:3a:
6f:ac:43:a3:9e:4a:31:d1:95:93:c9:d4:13:c7:7b:
29:0d:90:32:3a:d9:f7:cf:04:69:4c:39:86:a6:2c:
80:7a:d3:e0:41:6a:13:2d:86:23:46:69:e2:3b:75:
fc:11:ea:a4:f2:b2:a7:2f:4f:bd:19:fb:f9:db:26:
1d:76:99:34:61:74:dd:c1:0a:e6:0c:43:40:0a:ae:
32:a5:96:47:b4:a4:f3:0c:46:b5:53:d5:86:2b:81:
ee:c4:d4:7b:aa:a2:52:c5:67:99:e5:5f:95:70:df:
23:ae:6e:4c:fa:16:e0:ce:1d:c9:9e:fd:46:19:bc:
c1:ec:b7:40:66:a9:f8:8e:91:7a:99:1c:60:97:91:
85:58:0a:ab:a0:f2:f7:d1:08:21:36:a3:48:b4:3a:
87:c0:27:5f:02:4f:5e:f0:ce:90:7b:68:18:05:2a:
ba:6e:23:7b:61:d3:66:c3:7f:e2:9d:a2:a3:12:79:
64:7f:c4:ba:07:a9:74:c3:4f:23:62:3b:2d:1c:3c:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:07:30:AD:B8:2C:C8:C1:BB:27:4D:FA:2B:2C:28:E3:BB:1E:C8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v3IHMK24LMjBuydN-issKOO7Hsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5d:1c:93:23:62:53:74:14:e7:85:f7:93:d9:bb:13:6d:48:
cc:f4:5d:f2:79:a3:9f:fc:a9:36:a3:0d:3e:1a:a2:e9:62:09:
10:c8:b3:ee:30:ae:d3:62:76:ba:ed:f3:f8:6d:8d:22:8e:74:
55:c6:bd:78:56:70:0d:c5:9a:e9:1d:ed:ff:56:bd:fc:6e:d6:
9e:96:6f:9e:af:ea:6b:a4:43:50:ba:25:e9:4f:f9:ba:3e:67:
50:f8:2a:6b:3d:ba:1f:ca:92:ac:9d:17:42:56:5b:46:63:65:
78:b7:70:bc:41:42:3c:73:d7:66:92:85:9b:c8:1f:36:79:99:
1b:d6:34:48:14:be:53:c8:50:12:94:ae:29:63:19:34:83:9d:
6c:e3:ce:61:af:f3:c4:72:da:33:07:e3:47:3f:a3:cd:4b:89:
56:75:68:53:61:f4:04:39:4f:6a:3c:3e:31:72:a5:26:39:2a:
32:c6:96:d1:b3:f6:3d:07:c1:0b:aa:fb:c9:f5:20:45:6f:17:
f0:dc:a9:5d:77:f2:8b:1a:79:28:77:51:3b:e0:19:0b:e5:ec:
89:d6:d1:5f:1c:4b:59:1d:33:2c:f4:d9:45:f8:72:37:26:65:
34:f4:b9:3e:c9:32:cd:48:29:39:63:96:b0:31:88:87:a1:a0:
15:ff:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org