Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/52dTsBdrK8vUgPSp5v8K6ut8dU4.roa
File: 52dTsBdrK8vUgPSp5v8K6ut8dU4.roa (raw, json)
Hash identifier: Q3M7Q4YEWK80dcOnmZod++ToSLnjlMkh3oWQGpiAqzE=
Subject key identifier: E7:67:53:B0:17:6B:2B:CB:D4:80:F4:A9:E6:FF:0A:EA:EB:7C:75:4E
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0190FD8EAE25C129541500BD42B00DB8C468
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/52dTsBdrK8vUgPSp5v8K6ut8dU4.roa
Signing time: Mon 29 Jul 2024 08:15:04 +0000
ROA not before: Mon 29 Jul 2024 08:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 31.133.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 14:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:8e:ae:25:c1:29:54:15:00:bd:42:b0:0d:b8:c4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 29 08:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e76753b0176b2bcbd480f4a9e6ff0aeaeb7c754e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:d5:a4:05:82:ba:03:67:26:cc:d4:a4:1e:
70:9c:82:54:91:56:37:28:e3:b9:92:79:84:f9:cc:
f0:8b:75:fb:c2:ca:0c:a7:2c:f6:15:29:75:ce:50:
90:37:1f:06:2f:97:23:5f:87:b1:d8:dc:7a:0b:87:
83:b5:97:53:a7:92:e2:ce:38:5d:bf:b2:76:9b:52:
d9:21:6f:0e:d1:f6:40:8b:1e:98:90:f9:f8:c3:7d:
70:2d:18:2f:3b:95:2d:d3:55:e2:6d:8d:cb:3f:ce:
47:15:11:70:00:d1:ea:c4:c7:5c:b7:5a:de:d9:6f:
5c:c0:98:f2:60:79:54:ba:51:05:03:18:94:4b:95:
70:44:96:74:58:2b:7c:f9:1a:9f:ec:51:a3:7f:c6:
ae:20:89:12:b2:7d:7e:79:1a:6b:29:82:e0:da:91:
a9:c3:7a:ba:4f:77:69:f3:b0:14:f7:8c:a3:64:0b:
0d:e0:a5:be:34:eb:e6:83:8a:59:a9:40:35:69:f5:
09:23:65:2b:ff:b8:0f:e9:52:4c:d8:a8:00:b7:a4:
68:b6:74:ff:b2:97:6f:5c:df:b2:e2:0a:db:82:67:
fb:03:ea:03:ff:09:6a:f0:9c:0f:98:b2:97:15:3a:
a2:20:d8:fa:6a:d7:e9:23:d8:85:5f:2e:2c:40:e8:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:53:B0:17:6B:2B:CB:D4:80:F4:A9:E6:FF:0A:EA:EB:7C:75:4E
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/52dTsBdrK8vUgPSp5v8K6ut8dU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:f3:18:78:10:5a:e8:ca:9e:1b:db:ac:72:ea:5c:cd:4a:d8:
ce:0a:08:b7:0b:23:16:cc:19:25:07:ce:53:fe:f8:d9:bd:0b:
66:9a:fd:ad:20:ed:b1:7d:b6:b6:49:08:f8:97:0f:af:7b:ba:
75:cd:d4:8a:40:56:39:1a:d8:8e:0a:02:4e:be:f0:6a:1c:e2:
fb:a3:1e:33:4b:aa:77:a7:f6:16:2f:04:8b:c7:d9:6f:16:b0:
91:5f:45:e4:fc:fe:37:b2:78:ad:10:12:1b:e7:cc:d2:96:10:
8d:34:2c:f9:61:47:ea:76:af:7b:b5:27:db:a3:81:fb:3c:f9:
6b:4a:b3:2b:15:e5:a4:48:f8:3b:f1:20:93:f5:da:ba:43:94:
58:49:84:e1:95:4e:fd:8e:8e:14:bf:d6:ed:44:6b:24:20:f0:
62:4e:64:ee:67:03:a2:4d:db:5d:a0:5a:f4:7d:c4:ec:78:2e:
be:05:08:d8:49:9c:b1:53:ea:42:04:9e:67:33:9e:4a:b5:1a:
29:38:d1:00:e8:bd:36:7e:df:4c:48:87:a1:fd:2d:7e:18:0f:
5a:97:89:6b:ef:8e:2d:59:5e:24:bd:be:a6:86:be:98:ee:db:
9f:8e:3a:f1:11:cd:5f:dc:a3:ea:54:e0:5c:ac:18:60:47:1e:
99:61:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 17:42:17 2024 by rpki-client on console-ams.rpki-client.org