Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/_6bDXln9pcHaNUDSiUUN7HCdhq8.roa
File: _6bDXln9pcHaNUDSiUUN7HCdhq8.roa (raw, json)
Hash identifier: JLfG1h6uLuhBcBiwoZ3HM0z1fBWQklp099rzzMjgMHo=
Subject key identifier: FF:A6:C3:5E:59:FD:A5:C1:DA:35:40:D2:89:45:0D:EC:70:9D:86:AF
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018F1451AFFD5B6AB21401489E98C8249BA0
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/_6bDXln9pcHaNUDSiUUN7HCdhq8.roa
Signing time: Thu 25 Apr 2024 08:14:08 +0000
ROA not before: Thu 25 Apr 2024 08:14:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/15 maxlen: 15
31.57.0.0/16 maxlen: 16
31.58.0.0/15 maxlen: 15
31.59.0.0/16 maxlen: 16
151.247.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 09:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:51:af:fd:5b:6a:b2:14:01:48:9e:98:c8:24:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 25 08:14:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffa6c35e59fda5c1da3540d289450dec709d86af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:fe:23:f4:6b:92:66:3f:4b:ae:86:f6:30:
09:48:ca:ec:23:90:1c:12:c4:7c:f1:5a:31:aa:92:
c1:80:c2:23:71:b6:7f:af:11:3d:cb:c3:20:5b:d5:
0f:40:a5:32:75:03:86:55:56:43:3e:7f:6c:3d:6a:
51:4e:70:51:7e:51:2e:29:91:00:e2:48:e7:8b:16:
ec:34:6c:c8:b7:15:01:34:06:d6:0e:e5:f0:13:99:
95:a8:fb:d9:4f:b7:f4:06:f4:33:80:ee:50:a6:3a:
6d:be:89:9a:13:cf:b0:f3:9a:bb:3e:8a:f8:3e:38:
23:d7:35:0d:dd:f3:6a:e4:10:10:0c:c2:99:c0:ea:
2b:ea:ee:df:48:24:d5:c1:64:c5:89:a7:7d:55:31:
32:bc:bb:04:5e:a3:ff:cf:05:b2:76:8f:97:66:e9:
d5:6a:6d:40:23:a0:0b:8f:a0:81:63:a8:b8:7e:f0:
06:c0:cb:eb:ee:89:0f:df:11:f3:b9:26:ca:9c:9d:
78:a7:b3:3b:c2:43:1c:34:35:64:16:d1:89:e2:54:
8e:9d:46:11:5e:1c:9f:f1:2d:e2:bb:cd:61:88:61:
65:d3:70:2d:62:3c:2d:8a:56:db:50:16:a3:eb:b9:
03:a1:fe:48:6f:0b:e3:2f:f6:a3:ff:26:af:e0:fc:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:C3:5E:59:FD:A5:C1:DA:35:40:D2:89:45:0D:EC:70:9D:86:AF
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/_6bDXln9pcHaNUDSiUUN7HCdhq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
151.247.207.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c9:28:a2:d9:e5:57:97:24:2c:75:08:80:03:c4:56:38:03:
6d:12:c1:17:72:a7:9c:70:ae:2f:2d:66:23:d6:e4:18:a2:d3:
c5:cd:22:02:e4:84:2c:d4:32:39:c0:c8:3f:c9:d1:83:ca:18:
03:9e:0b:e4:2f:bc:9f:80:de:36:be:43:7a:88:4f:66:eb:27:
3b:b9:4c:6a:be:a9:3a:6f:94:ed:98:36:38:cf:47:cf:ae:8e:
63:3c:04:7c:85:36:a5:b5:07:34:ed:65:16:6d:b8:48:fb:73:
26:27:e3:ce:2c:24:b0:4e:68:04:0f:94:8f:a8:8b:b1:87:03:
03:3c:43:9c:35:64:42:c0:3a:a5:54:fc:03:d2:91:46:a0:fc:
13:c4:2a:df:29:9c:c4:eb:f9:b0:37:da:a9:16:e2:d8:a4:04:
92:3f:df:6d:ab:7a:38:31:8d:10:10:9f:fa:31:d0:f4:a6:01:
47:a7:3c:bd:44:3f:f7:af:44:d8:ad:58:af:1b:c6:28:16:99:
c2:cb:68:8a:d5:2b:36:82:31:e9:bd:18:97:4d:be:73:cd:de:
0d:9f:c7:c7:63:bc:6a:9e:ad:c9:35:29:67:35:9d:e6:d9:f1:
81:58:4b:43:96:e9:83:f8:ef:13:e4:6f:0e:de:a1:02:c0:2c:
a3:90:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 11:19:45 2024 by rpki-client on console-ams.rpki-client.org