Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Sfuya1iZ41B_Tb7XssJYxzSdyY.roa
File: 5Sfuya1iZ41B_Tb7XssJYxzSdyY.roa (raw, json)
Hash identifier: M81Y1TXnoVnyj71xF2ux2d6QkaqMd8PCIY7JSoAw6D4=
Subject key identifier: E5:27:EE:C9:AD:62:67:8D:41:FD:36:FB:5E:CB:09:63:1C:D2:77:26
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01923A43B5F1053D79B7992E0255F90F197C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Sfuya1iZ41B_Tb7XssJYxzSdyY.roa
Signing time: Sat 28 Sep 2024 20:12:48 +0000
ROA not before: Sat 28 Sep 2024 20:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214304
IP address blocks: 31.14.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 15:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:43:b5:f1:05:3d:79:b7:99:2e:02:55:f9:0f:19:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 28 20:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e527eec9ad62678d41fd36fb5ecb09631cd27726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:1a:97:58:22:c5:7b:a6:5d:7f:80:74:0c:
7d:00:d0:85:92:fe:d3:35:0e:a8:47:1c:db:f9:05:
61:54:4f:85:15:10:44:29:c3:1e:45:3c:dc:21:c2:
62:bd:4b:bd:fc:62:77:fc:f9:8b:7c:41:4f:bc:93:
87:b1:a6:0e:63:f0:df:77:87:06:2b:7e:57:89:ca:
99:2a:ae:31:9a:9a:45:24:c3:a8:58:4c:66:73:56:
68:88:42:a5:f7:49:33:a5:d5:15:7c:12:6d:42:c8:
47:66:74:56:57:f9:aa:09:6d:26:5d:75:4d:78:94:
cb:cc:f6:37:d3:81:78:1a:11:1a:6f:0a:11:2d:93:
bf:ad:5a:dd:b9:48:6a:ec:5d:0e:22:f4:de:4e:91:
15:83:bd:9d:af:e6:2b:52:33:69:e6:48:56:8f:1c:
e6:16:20:7f:3e:4e:28:d2:19:f0:c7:ac:87:64:eb:
64:86:69:f8:1c:f9:1f:55:65:13:75:e1:15:fb:1d:
37:f5:0f:46:70:e7:da:bd:19:e9:06:d4:e8:21:52:
59:b7:d6:d3:f0:80:47:3c:13:a4:a6:79:3d:6a:28:
b6:e2:36:ed:05:d0:13:91:d9:07:09:9b:5b:6a:a7:
2f:e7:f2:70:dd:bc:3b:0d:c3:d9:7a:a9:7f:1a:0d:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:27:EE:C9:AD:62:67:8D:41:FD:36:FB:5E:CB:09:63:1C:D2:77:26
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5Sfuya1iZ41B_Tb7XssJYxzSdyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bf:46:c9:da:80:f2:19:01:fd:e1:fd:f6:ee:1d:6a:e0:8a:
76:77:f6:62:3e:17:21:03:a5:75:2e:ff:7d:8d:e7:fb:16:60:
81:c7:2c:34:a2:b1:25:62:9e:f7:80:a9:84:15:11:20:59:9b:
a3:c7:0e:79:ca:83:41:c9:20:a7:0f:80:e9:43:e9:16:d7:0e:
be:89:ac:35:b5:47:74:5d:50:f7:e1:2e:04:ef:a1:ea:6f:59:
97:98:07:0f:b9:46:cb:8a:3a:62:59:3d:2f:da:31:87:a9:f3:
86:06:f4:fa:76:48:9c:b7:d2:c3:96:b0:65:8a:f5:b7:55:cb:
93:3e:a7:93:f0:4d:7e:f5:e7:48:2f:29:cb:48:c7:df:bb:49:
1e:89:cd:e4:f6:7a:8c:27:11:c5:a6:8b:62:bb:27:78:4e:01:
63:09:14:40:c4:d6:a1:17:1d:f5:50:54:65:56:47:e0:c8:67:
b0:06:c0:00:f0:49:9e:54:a3:93:4f:a0:11:37:b0:2d:6e:87:
07:48:c7:2b:a4:90:78:c4:a0:d8:62:a4:fa:3a:bb:5d:86:4a:
50:0d:e0:9d:98:5d:3b:93:5c:1f:52:6b:b7:af:ff:1a:64:3d:
11:c8:b8:7b:c8:c2:99:cb:70:cb:ef:3d:13:a9:1f:5d:4b:5a:
9a:35:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 19:35:31 2024 by rpki-client on console-fra.rpki-client.org