Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/X2AxovcN3RYG1OGUMH-0KzIlKwk.roa
File: X2AxovcN3RYG1OGUMH-0KzIlKwk.roa (raw, json)
Hash identifier: WnkHhlyfhXkBk0c3pU17cDlz8g5dihRYb7ArkuB8gtc=
Subject key identifier: 5F:60:31:A2:F7:0D:DD:16:06:D4:E1:94:30:7F:B4:2B:32:25:2B:09
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801ADD51EFF0C97725C7617477EF54A
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/X2AxovcN3RYG1OGUMH-0KzIlKwk.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25437
IP address blocks: 195.20.119.0/24 maxlen: 24
31.40.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 09:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ad:d5:1e:ff:0c:97:72:5c:76:17:47:7e:f5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f6031a2f70ddd1606d4e194307fb42b32252b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:c5:c8:70:c0:a6:61:0a:cd:38:40:ab:a2:
85:59:b8:25:c7:d2:9d:39:c6:7b:fa:53:52:53:6c:
8b:9d:58:fe:7c:ff:44:0b:0e:3c:42:58:2e:f6:b9:
8f:ac:4d:95:bc:df:7b:d8:a3:ed:6e:16:b6:c8:7a:
34:83:5c:1e:99:a4:13:c8:12:ee:9c:30:a9:38:26:
21:fc:f4:e7:e3:b8:b2:9f:cb:37:f3:1a:de:fd:99:
31:a0:bd:cb:8b:e7:78:44:85:bf:b7:27:ab:10:7a:
b6:2d:36:81:9b:56:b6:9c:14:4d:5b:01:a0:dc:13:
1f:41:c5:0d:48:3f:56:82:c5:a3:f6:9a:c0:06:1e:
be:52:af:0a:89:14:c8:53:b1:a9:e2:da:4a:72:5a:
10:0a:2a:53:9c:84:f4:6e:1e:e8:3a:6d:83:72:4f:
0a:e1:38:90:8f:ae:1e:8a:3b:f3:6e:d3:39:cf:18:
6e:8f:6a:58:1e:6d:78:4c:80:b0:bb:80:6c:1e:98:
ba:53:8c:a9:91:87:fa:59:ab:b1:36:6b:0e:c4:52:
4e:0b:f4:37:83:e7:7e:f3:31:79:70:4f:d3:ab:d1:
50:eb:af:a3:42:26:28:33:ce:88:64:b4:e2:97:f5:
28:58:6d:ca:4e:19:4f:54:77:8b:c0:df:84:0c:b7:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:60:31:A2:F7:0D:DD:16:06:D4:E1:94:30:7F:B4:2B:32:25:2B:09
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/X2AxovcN3RYG1OGUMH-0KzIlKwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.158.0/24
195.20.119.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b9:c8:ba:57:65:27:27:22:52:1d:56:75:24:1d:3d:44:cf:
70:09:6f:25:69:8c:2c:0b:41:e4:d9:6c:b6:66:2d:94:14:07:
64:46:cb:2b:e2:16:ee:e2:2b:01:0e:6a:28:02:64:af:fa:61:
a1:3c:8f:3a:8a:61:b0:04:f6:ac:96:e1:05:f5:dc:0b:67:fa:
86:59:54:5b:23:f5:7d:0f:51:63:a4:9b:a7:fe:e3:93:36:fd:
cf:77:7b:28:ad:8a:6f:66:63:1f:ca:79:ca:ef:b6:10:1f:6f:
35:5a:ef:4d:99:d0:a9:72:84:25:01:38:7e:c4:37:e0:89:2a:
5d:e0:98:37:fb:d4:4f:4c:90:29:76:33:2e:83:dc:6e:40:2e:
8e:26:49:bd:24:ec:a6:73:fd:73:f0:ed:b6:af:78:a6:b1:05:
85:97:86:c0:bb:ac:99:11:35:9e:4e:01:c7:39:74:d7:a9:51:
e7:5e:37:84:80:6b:b6:e6:3a:34:3a:5b:a5:05:6b:c6:ec:7f:
d9:60:00:0e:6b:cf:5b:f3:1a:3b:17:e8:c3:4b:80:b5:4b:ae:
ba:73:64:41:5a:bc:c2:eb:f4:11:de:f4:a7:89:f9:fd:d6:94:
b3:17:03:af:d7:06:f2:f2:cc:a4:8d:86:5b:e6:11:55:b2:67:
3f:e5:73:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 11:55:49 2024 by rpki-client on console-ams.rpki-client.org