Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/g7W10c-lmeTKTUcufcPvUzdHanY.roa
File: g7W10c-lmeTKTUcufcPvUzdHanY.roa (raw, json)
Hash identifier: DyIGtKqu5uQKhSrMNxWRiaXzUMHPZwKiFV6ckxTzUAk=
Subject key identifier: 83:B5:B5:D1:CF:A5:99:E4:CA:4D:47:2E:7D:C3:EF:53:37:47:6A:76
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01900D136A29AE6F4DEC3BA73D0B74332654
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/g7W10c-lmeTKTUcufcPvUzdHanY.roa
Signing time: Wed 12 Jun 2024 15:31:34 +0000
ROA not before: Wed 12 Jun 2024 15:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15596
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 07:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:13:6a:29:ae:6f:4d:ec:3b:a7:3d:0b:74:33:26:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jun 12 15:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83b5b5d1cfa599e4ca4d472e7dc3ef5337476a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:4d:a4:aa:80:2a:09:07:32:3c:ec:4a:9e:
e8:20:c4:85:c4:c3:db:8c:b4:af:cb:0a:d9:26:7f:
d5:ad:7d:00:48:8d:e4:e5:ac:ff:87:e6:6c:d2:53:
46:fc:a2:ed:70:61:b1:01:bd:3a:b8:7e:9b:1b:54:
14:2c:aa:2d:6b:65:c2:0f:e4:66:c0:fe:07:77:38:
f3:d2:59:61:d4:ff:15:de:9e:ee:38:63:cc:0b:ef:
e3:70:da:28:23:18:a3:20:59:99:4e:ff:c9:c7:e6:
6e:21:ec:9e:7a:46:44:3b:24:2e:5f:95:5b:be:fd:
ca:58:b4:bc:09:f9:48:23:0e:fd:b1:d6:f0:e7:69:
7b:7d:5a:ac:62:fe:ee:d4:5b:7c:9b:11:23:55:42:
f4:23:fb:db:df:9f:4b:b1:61:cb:7b:c6:ce:c9:a4:
76:e5:79:44:b0:0d:68:f9:18:9e:4a:d2:00:2c:4c:
7d:01:d6:35:82:7d:de:f7:49:f8:3a:7e:cb:00:71:
62:20:b9:02:a0:75:da:51:95:cf:73:9d:0f:7e:aa:
70:72:f0:01:ca:49:9b:d0:80:bc:37:d8:72:cd:ff:
52:38:f3:b4:90:57:72:1a:eb:cf:70:86:38:33:7f:
34:d8:8a:56:7f:4e:e0:68:e0:7c:8e:6f:b4:55:be:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:B5:D1:CF:A5:99:E4:CA:4D:47:2E:7D:C3:EF:53:37:47:6A:76
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/g7W10c-lmeTKTUcufcPvUzdHanY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
31.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ab:95:0c:dd:32:23:13:35:05:6b:20:96:8e:e8:aa:1e:20:
5d:b1:0f:d7:71:eb:de:7c:ff:d5:92:e9:b2:ca:e1:36:83:57:
a3:a5:2a:5e:0e:5e:7c:9a:90:43:23:72:2c:7f:1c:41:78:c5:
62:c9:a5:c9:82:e0:71:fc:cb:16:7b:83:b6:af:52:44:21:28:
6b:8f:aa:8d:ec:d5:bc:cb:2e:fc:d5:91:e4:75:20:9c:ee:44:
b1:1b:a8:35:5c:6a:7f:2a:ba:8f:d1:d7:b9:f1:e5:c5:1f:f8:
c8:ee:d4:d9:c7:af:0f:d3:25:81:8a:41:fc:85:f9:38:ac:1c:
7b:31:32:4b:f6:fe:e1:74:8a:08:82:6a:0e:5b:48:91:80:12:
cf:9f:76:69:2b:77:88:c3:b3:9f:bf:08:f9:be:16:da:d4:9a:
59:ac:e1:a3:dc:b9:49:70:13:32:5f:2e:2f:b1:6e:ca:e7:ca:
41:44:54:d7:53:62:0a:9f:37:fa:ab:00:e1:8e:d4:3e:ef:95:
18:ad:ae:6c:2a:3e:db:5a:c0:36:3d:9e:81:64:83:3f:b9:45:
c4:9f:77:e5:bd:e1:4a:b0:71:82:d7:f2:68:e7:86:eb:75:00:
89:9d:07:14:0d:28:26:10:93:79:08:38:4e:8f:39:35:2e:32:
e8:07:ed:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 11:19:26 2024 by rpki-client on console-ams.rpki-client.org