Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rVzDTGySwqal0qkBUPcDhcH26dE.roa
File: rVzDTGySwqal0qkBUPcDhcH26dE.roa (raw, json)
Hash identifier: R62mbp1hLNVkKC0gpSeWo74N/2N7JaTgxgpXoWDeZ/E=
Subject key identifier: AD:5C:C3:4C:6C:92:C2:A6:A5:D2:A9:01:50:F7:03:85:C1:F6:E9:D1
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018F0A191B8D6690D141FC0866DF176C2581
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rVzDTGySwqal0qkBUPcDhcH26dE.roa
Signing time: Tue 23 Apr 2024 08:36:08 +0000
ROA not before: Tue 23 Apr 2024 08:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.57.0.0/16 maxlen: 16
31.58.0.0/15 maxlen: 15
31.59.0.0/16 maxlen: 16
151.247.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 08:14:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:19:1b:8d:66:90:d1:41:fc:08:66:df:17:6c:25:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 23 08:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad5cc34c6c92c2a6a5d2a90150f70385c1f6e9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:3f:5d:32:cc:72:d1:59:9a:6a:aa:0d:f5:
6e:50:84:6e:fd:6c:5e:9f:56:50:22:e2:4f:97:23:
6e:69:e9:81:c3:5a:10:a5:79:b3:fa:e1:9a:3e:37:
1b:68:92:f0:ec:c3:be:ee:ad:60:58:6f:c9:08:1b:
d4:d3:ec:8a:fc:3d:c9:a4:b1:2f:84:d1:6a:d9:12:
93:c9:ba:c2:a5:e2:b1:93:80:81:f3:69:ae:46:dc:
ac:1a:21:9c:98:9b:46:7e:98:93:3a:3d:da:12:fb:
59:8e:48:7a:3e:4b:ec:52:7b:98:f3:31:fb:96:b6:
14:e2:34:1c:d6:5d:e9:7b:2d:aa:c9:e7:24:9c:49:
7d:c2:5f:e5:6a:0b:81:51:eb:64:66:49:fd:56:a0:
3f:ab:be:d2:da:20:f5:96:30:1e:fa:2c:81:6c:3f:
98:99:c9:e5:d8:b3:a8:ee:cc:b0:de:cc:20:1e:06:
8d:53:39:1d:83:b5:af:19:6c:70:1c:c7:4a:15:b7:
51:60:e9:0c:84:2d:6c:69:0d:89:15:d8:86:5d:a6:
fa:a4:3f:75:5a:82:ba:ea:11:2f:cf:40:ae:73:dc:
1a:2f:f9:18:9c:10:a9:71:69:3f:19:db:ba:01:e6:
2b:fe:0a:9a:f4:59:f1:2a:53:63:6b:1b:bf:c6:3f:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5C:C3:4C:6C:92:C2:A6:A5:D2:A9:01:50:F7:03:85:C1:F6:E9:D1
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rVzDTGySwqal0qkBUPcDhcH26dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.0.0-31.59.255.255
151.247.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7b:bf:6a:63:96:31:4b:86:7e:ba:cf:d1:e8:1a:29:bf:e2:
b0:e8:65:12:97:64:7b:ec:06:b6:17:49:8c:ea:43:70:33:e3:
1f:b6:95:3d:3d:47:24:7d:c8:ba:de:64:78:4d:48:8d:9f:a3:
cc:b0:a4:a5:32:79:8e:9f:4a:31:26:c0:f9:d8:9d:b0:ae:f0:
6d:b7:cb:33:e3:8a:51:bc:11:df:02:85:07:99:9d:22:2f:91:
99:8b:43:b0:dc:f2:ab:27:46:9d:90:91:73:9a:09:8b:c2:e7:
ec:97:67:2c:25:fe:c6:8a:fd:40:02:0c:d5:eb:27:ec:b4:8c:
0d:17:58:2d:ab:81:1a:16:17:61:44:35:10:68:e2:78:1e:85:
a4:01:e3:6e:eb:9a:3f:19:4c:67:50:24:3d:9a:22:7a:1e:77:
15:79:63:7b:64:77:d5:c5:f9:45:c6:7c:ce:1e:02:e9:e3:9f:
ee:93:09:77:ae:22:f1:88:90:cc:fa:17:dd:cd:ee:1e:1d:fd:
94:e0:ea:ff:7d:e3:8c:00:68:ea:49:40:9b:2a:80:10:93:73:
2a:20:64:26:c9:9e:4e:c7:b9:8a:20:25:3e:1a:2c:04:9f:71:
0d:a7:98:94:12:56:0e:d1:62:3c:19:84:12:e6:c4:9f:21:1a:
ae:b9:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:12 2024 by rpki-client on console-ams.rpki-client.org