Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/v5IWju_zRBr22-OqJeloYHKB3v8.roa
File: v5IWju_zRBr22-OqJeloYHKB3v8.roa (raw, json)
Hash identifier: tggK5K8fWS1FUk9TR7PjIX94op9PJRpuNkJO4gvbDDs=
Subject key identifier: BF:92:16:8E:EF:F3:44:1A:F6:DB:E3:AA:25:E9:68:60:72:81:DE:FF
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 0185715E836B4E5E8076896887CF2870C55D
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/v5IWju_zRBr22-OqJeloYHKB3v8.roa
Signing time: Mon 02 Jan 2023 07:24:57 +0000
ROA not before: Mon 02 Jan 2023 07:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197768
IP address blocks: 31.133.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:83:6b:4e:5e:80:76:89:68:87:cf:28:70:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Jan 2 07:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf92168eeff3441af6dbe3aa25e968607281deff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:2e:c2:15:76:09:2a:e8:fb:e8:ac:f3:5c:
b1:b0:ea:74:3f:6c:3b:c1:ca:e4:8d:3c:c5:63:b6:
6e:7a:ec:5c:ca:58:f6:f6:e5:de:aa:21:88:d5:a4:
4e:29:57:5a:a8:d5:2b:2e:45:73:a5:cb:48:0d:76:
8c:63:c2:2b:2c:22:88:83:88:ab:46:d0:7c:e2:20:
aa:2d:6e:4c:3c:a7:c9:f0:a5:92:ed:2b:f2:2e:5a:
2e:09:38:e1:1b:fc:d4:c5:61:7d:8d:8e:e9:12:04:
98:bb:59:b3:03:3f:aa:7c:40:6b:5a:d3:fb:cf:04:
79:b4:bc:a8:ef:de:32:ca:85:be:e9:df:8d:be:f8:
a3:c4:f3:39:4d:77:85:3c:e6:48:db:a4:a6:2f:65:
f3:e3:07:2c:34:fd:9c:4c:d8:bd:10:eb:aa:25:cf:
d0:b2:dc:03:5c:ae:75:bf:d2:09:ef:94:c5:0a:48:
ba:99:c2:b1:f3:67:1c:df:09:f9:c5:8f:5f:c5:38:
29:c7:58:e1:43:71:00:42:63:08:a8:07:02:2e:65:
8b:fc:fa:f4:c5:8e:91:28:a6:0a:90:5f:39:7b:b7:
9f:a6:bc:a5:9a:12:0b:be:4c:b7:2c:44:ae:84:9a:
fe:7b:51:97:a6:81:fc:c4:aa:d5:7b:ec:82:2f:55:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:16:8E:EF:F3:44:1A:F6:DB:E3:AA:25:E9:68:60:72:81:DE:FF
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/v5IWju_zRBr22-OqJeloYHKB3v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.104.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:d5:94:83:33:47:40:de:2b:74:72:8e:ce:c5:b0:44:1c:33:
09:4c:5d:ba:d5:05:84:ec:d4:d0:18:74:f4:ef:b3:78:23:72:
3a:23:8a:68:d8:a8:cb:aa:39:4e:f5:bd:e3:bf:3e:e3:5b:ae:
08:37:24:49:95:be:83:57:a0:d9:5e:b4:9f:16:0a:32:2a:b1:
d5:cb:13:6e:04:6b:52:74:d2:b9:de:44:e9:a3:03:6d:97:2a:
a6:6a:7a:2a:62:af:8c:2a:47:02:c5:1f:34:6d:ff:62:a9:c3:
0c:7f:cb:95:cc:20:eb:be:41:cf:de:c6:17:be:6a:b3:ff:64:
5e:8c:46:05:fa:a8:74:4c:0e:c5:2a:5e:05:40:16:14:4a:0d:
e0:da:b2:e8:e6:fa:f7:e5:b8:dd:c6:6c:35:d7:3c:22:12:c8:
c7:1b:0a:dd:c7:b4:95:b3:a6:d8:0b:0b:6e:1c:0c:4c:e6:d0:
15:97:2e:f3:b5:0f:54:41:13:13:31:46:e9:63:1a:59:2d:2d:
df:04:a0:3d:9c:c2:1b:7e:ee:a6:fb:f1:4f:b0:8a:16:8f:6c:
a7:c0:ab:1e:ce:f6:4b:0e:2a:f4:43:2a:e4:b5:78:28:00:b3:
8b:d5:e5:71:fc:1d:c9:dc:ab:51:d0:8d:a5:48:70:05:f7:29:
28:6f:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:29 2024 by rpki-client on console-ams.rpki-client.org