Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/F5HImGh-7x_uqNYqoi6wuDIkTMY.roa
File: F5HImGh-7x_uqNYqoi6wuDIkTMY.roa (raw, json)
Hash identifier: A+TjuWoXZx/wVjvcVnWxcV/8Syh1AWUf6bjcn2E9BmQ=
Subject key identifier: 17:91:C8:98:68:7E:EF:1F:EE:A8:D6:2A:A2:2E:B0:B8:32:24:4C:C6
Certificate issuer: /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial: 01856CF8612BCF6EEE0E0BAAD25C599BAA4E
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/F5HImGh-7x_uqNYqoi6wuDIkTMY.roa
Signing time: Sun 01 Jan 2023 10:54:55 +0000
ROA not before: Sun 01 Jan 2023 10:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 31.171.212.0/24 maxlen: 24
31.171.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:61:2b:cf:6e:ee:0e:0b:aa:d2:5c:59:9b:aa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Validity
Not Before: Jan 1 10:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1791c898687eef1feea8d62aa22eb0b832244cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:33:f9:29:7f:4b:62:8a:f2:fc:f6:0c:13:
02:27:0c:8f:45:53:f7:e3:62:c8:d8:a9:0d:47:84:
80:84:fe:8a:27:c1:2e:55:40:c2:cd:6f:2b:7a:15:
08:2a:a8:4d:cb:34:be:50:c9:06:fe:98:de:cd:40:
95:2f:b1:71:25:ee:aa:e1:b5:82:65:1f:fd:47:5b:
3d:2c:40:3d:3d:e9:73:c9:27:48:6d:bf:fb:dd:75:
d1:25:7e:44:34:c6:6f:3f:0c:a3:0b:6b:af:3b:ad:
18:cd:10:4e:80:45:ef:bc:6f:01:80:e5:c2:92:ab:
8a:e9:8f:3f:79:4f:55:7d:c4:57:70:31:e4:5e:3a:
79:ed:64:99:85:ff:4b:3d:d7:c2:2a:8a:32:0a:bc:
d0:f5:58:cd:10:14:e7:c9:53:d7:b6:54:9f:82:ee:
f9:7a:7b:e5:8a:27:f0:62:5d:fe:ab:a8:c7:35:a8:
82:15:fe:dd:45:84:b4:74:f2:ae:f4:16:65:a6:b4:
67:ae:5a:cb:9d:73:7d:b7:8c:fe:eb:3d:28:bc:98:
fc:5b:c4:c1:97:08:b6:82:7e:90:e2:6e:0b:e3:ac:
44:e4:3d:fc:c1:23:53:8c:76:c1:df:a5:c7:b3:ec:
c2:52:7c:bc:03:10:11:3f:d4:23:e3:b2:4e:73:ed:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:C8:98:68:7E:EF:1F:EE:A8:D6:2A:A2:2E:B0:B8:32:24:4C:C6
X509v3 Authority Key Identifier:
keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/F5HImGh-7x_uqNYqoi6wuDIkTMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.211.0-31.171.212.255
Signature Algorithm: sha256WithRSAEncryption
14:e8:19:ef:af:7b:d9:c1:51:ef:49:ee:33:09:ff:c9:e2:73:
62:92:17:fb:52:5f:8b:07:56:aa:24:87:9e:ed:ac:4a:af:9f:
a6:68:6b:f8:61:55:71:7a:62:a6:a9:d1:63:0e:45:87:1e:e1:
09:ad:77:58:72:dd:93:1b:e9:1e:fc:66:a0:99:66:4b:36:c7:
4b:70:ff:15:e2:95:0a:9c:cf:df:c0:83:a2:67:d5:60:2e:e1:
3e:e2:f1:af:76:02:a3:bb:1f:f5:f6:d1:44:58:78:f3:94:7e:
46:d6:be:1b:97:06:e0:5e:2b:02:7e:6a:2b:08:fe:8e:2a:b9:
ce:fb:d8:ff:b6:8a:a4:ee:82:ba:e0:9e:9d:7a:d5:b8:9a:33:
32:89:90:ed:ac:00:77:57:c2:83:92:6a:4c:cb:e7:2a:67:62:
a0:b0:66:32:9f:52:32:22:4f:41:f5:e5:35:b4:c4:95:9d:21:
0c:e2:2f:02:72:6d:6f:dc:b0:56:e2:13:27:b3:41:dc:e8:47:
5a:06:45:d8:09:ac:d9:fe:7d:a8:76:85:ee:75:e7:24:cf:be:
f4:f4:75:7c:5c:57:b0:64:24:9b:d1:93:6a:cb:02:24:83:d4:
46:0c:cf:b7:25:46:26:a1:21:58:a7:0b:c3:f4:03:4e:57:22:
b1:ef:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:52 2024 by rpki-client on console-ams.rpki-client.org