Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/pu3RXHWJmJlR2tjJodGG3hbwI-E.roa
File: pu3RXHWJmJlR2tjJodGG3hbwI-E.roa (raw, json)
Hash identifier: x4QwSJYKv+9/mhAyNoLizc8c9fMmPn3x3PDQAYAQ3SM=
Subject key identifier: A6:ED:D1:5C:75:89:98:99:51:DA:D8:C9:A1:D1:86:DE:16:F0:23:E1
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018F6711E4129F70B419241AA2041C7FE573
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/pu3RXHWJmJlR2tjJodGG3hbwI-E.roa
Signing time: Sat 11 May 2024 09:52:56 +0000
ROA not before: Sat 11 May 2024 09:52:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/15 maxlen: 15
31.57.0.0/16 maxlen: 16
31.58.0.0/15 maxlen: 15
31.59.0.0/16 maxlen: 16
151.238.0.0/15 maxlen: 15
151.247.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 09:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:67:11:e4:12:9f:70:b4:19:24:1a:a2:04:1c:7f:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: May 11 09:52:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6edd15c7589989951dad8c9a1d186de16f023e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:e8:06:90:ee:3e:02:2a:e1:c1:fa:60:a0:
e0:3e:1f:73:73:03:5f:fc:cf:c2:88:ef:68:95:9c:
88:81:3e:3e:96:93:f1:06:8e:25:5d:3d:03:c8:b9:
5f:cb:38:3b:bb:33:d0:93:c4:b7:cb:e0:e3:05:4e:
23:06:2e:2f:b6:50:64:8c:ec:09:82:ad:e1:a7:b0:
fd:76:87:1a:81:4c:69:05:a6:80:41:7b:a4:d3:8c:
08:fd:69:09:07:94:66:4c:dc:70:a4:cc:39:d7:d4:
3c:fb:70:fe:a8:d7:10:43:b0:7d:ee:e7:f4:f7:a0:
c0:7c:51:12:23:3c:e6:56:74:12:c2:d2:87:79:f5:
a4:34:0d:d7:49:51:d6:0e:c0:e3:db:56:a1:e6:13:
f0:15:a4:13:32:11:d0:d4:11:e5:01:77:d8:f4:2f:
5e:d8:28:84:b5:ec:79:25:e7:74:f9:d7:cb:b3:b1:
57:84:2c:5a:6c:e9:f4:e3:4d:84:9d:63:11:c3:bd:
01:14:1e:90:64:bd:6c:4e:f2:77:45:4c:51:50:66:
5e:3f:8a:d9:c0:90:81:72:42:44:2e:b2:62:8c:b2:
64:03:a7:7d:3c:d2:04:66:06:aa:2f:0d:a1:3a:5f:
60:5e:01:0a:16:1f:79:a1:99:60:c3:1c:ea:ae:e3:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:D1:5C:75:89:98:99:51:DA:D8:C9:A1:D1:86:DE:16:F0:23:E1
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/pu3RXHWJmJlR2tjJodGG3hbwI-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
151.238.0.0/15
151.247.207.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fe:ec:91:42:e8:86:65:06:ec:5b:be:8f:00:b7:08:65:10:
03:fa:29:77:91:04:f2:a5:a3:90:73:d4:8d:7c:f8:10:8b:ea:
58:18:74:c7:db:ff:0d:ff:f0:4b:fe:7c:fd:a7:df:38:d1:88:
91:ef:a5:58:e4:74:98:ba:43:e7:8a:5f:31:a5:8f:86:a1:8a:
66:30:4b:11:37:ab:5e:86:b4:59:bd:58:e2:97:d6:e7:96:b8:
ed:b5:d0:e2:58:1a:89:24:d3:8a:09:78:35:60:ec:65:8b:c1:
fa:04:53:bf:f8:24:10:b8:36:2f:3f:06:d6:a8:0b:1c:66:f4:
0e:5c:95:ea:be:01:fe:8f:9c:4d:7e:5e:b5:81:1d:18:8c:3d:
87:f5:2d:32:ff:c7:70:35:fc:75:8f:22:55:e8:85:dc:71:c6:
0c:d7:23:a5:29:d5:5f:a3:39:d5:8b:53:3e:3c:62:e8:ba:d8:
86:05:39:79:96:9e:6f:45:23:34:45:28:a9:fb:73:78:a3:3e:
0d:dd:81:de:a1:d3:a2:4c:75:68:44:57:54:3f:5b:f8:17:87:
00:13:a0:9e:46:62:2d:dd:c3:52:48:39:48:35:dd:f6:ec:b6:
49:72:79:7e:9c:07:cd:36:d9:7b:79:7e:3c:46:6f:46:e7:5b:
20:73:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:28:32 2024 by rpki-client on console-ams.rpki-client.org