Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/Tzdj9iu0_Q-3C16lKE-fpNJIGq8.roa
File: Tzdj9iu0_Q-3C16lKE-fpNJIGq8.roa (raw, json)
Hash identifier: bh0RsxGAq9TlYSuKKIfWtDvr/D6PHsTNTbkqYiR/uPc=
Subject key identifier: 4F:37:63:F6:2B:B4:FD:0F:B7:0B:5E:A5:28:4F:9F:A4:D2:48:1A:AF
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 0193DEE2C5A2C84CF158C059F4D281B7E0BE
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/Tzdj9iu0_Q-3C16lKE-fpNJIGq8.roa
Signing time: Thu 19 Dec 2024 12:27:03 +0000
ROA not before: Thu 19 Dec 2024 12:27:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.88.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:e2:c5:a2:c8:4c:f1:58:c0:59:f4:d2:81:b7:e0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Dec 19 12:27:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f3763f62bb4fd0fb70b5ea5284f9fa4d2481aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:46:3a:eb:ea:2b:a9:4f:6c:01:dd:05:45:
76:bf:b3:31:aa:df:35:e1:a6:9a:0f:03:3f:e7:bb:
38:2a:b3:23:6e:73:02:d8:4b:be:92:1e:75:1b:5f:
41:f5:93:1c:52:c0:41:f2:22:1b:37:6e:c7:b6:20:
5e:b7:71:b8:f0:f6:48:35:ba:21:68:cb:18:45:bd:
d4:0c:3d:64:0e:22:18:cf:7c:79:89:48:7e:41:60:
07:11:49:ba:b8:05:c6:bd:05:a7:a6:cd:dc:3f:db:
83:9e:59:e8:f7:60:dc:c0:09:25:b4:7d:ff:33:d2:
1c:3b:81:78:ea:38:fa:ba:a8:d7:c2:79:db:8f:2f:
07:a6:82:88:a1:fd:e5:7a:74:4e:c3:f5:40:bd:59:
37:89:ac:73:36:33:ba:41:98:19:21:45:ae:c9:68:
f9:78:93:8f:6d:21:8d:3e:4f:c9:1d:9b:d8:4f:de:
62:98:41:da:0c:0d:0d:6f:5c:15:8c:aa:b8:99:cd:
9b:e8:6a:d9:34:11:6b:b5:43:2c:00:a7:76:5a:85:
44:b3:60:92:95:f1:f6:30:a0:66:84:4f:c8:d2:4e:
d9:d5:ad:4f:db:8f:b0:7d:f1:52:ef:39:89:7c:05:
62:af:61:63:db:67:81:d5:a5:75:ef:e7:ec:53:7a:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:63:F6:2B:B4:FD:0F:B7:0B:5E:A5:28:4F:9F:A4:D2:48:1A:AF
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/Tzdj9iu0_Q-3C16lKE-fpNJIGq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7f:43:15:53:71:e6:12:e6:fd:47:fb:c7:ff:05:f6:0c:28:a2:
68:5c:14:44:db:dd:fe:1a:75:15:b5:0e:66:f4:a6:39:2d:38:
59:6d:6d:b4:be:9f:aa:5f:2d:fe:7d:57:a9:d3:6f:ba:82:11:
33:6e:21:41:78:94:c4:29:0a:15:06:72:37:46:0e:59:c2:28:
be:e3:fa:15:4d:1f:46:a7:43:3a:5e:bb:ed:52:cf:15:f7:56:
70:b5:43:62:c2:31:bb:c8:52:dc:a7:0a:1e:bc:55:47:36:61:
bc:a6:3c:1a:35:71:bd:dc:4c:f1:de:42:a9:99:99:d6:5a:95:
d5:08:22:18:5e:cf:0c:ee:b9:ae:e1:c4:65:a9:3f:4f:35:8e:
3d:10:d3:a4:83:c4:2f:97:1e:e7:7b:c1:6f:e5:94:d6:ce:0b:
76:63:d7:df:01:c0:42:0b:f0:84:0d:3b:9c:e7:21:45:ad:6a:
a1:84:00:8c:85:ea:b8:3d:f5:75:22:05:38:d1:12:32:8c:bc:
81:05:a1:3b:8b:f5:bf:53:38:41:b6:5a:0d:dd:99:12:f9:7f:
0a:c3:d1:38:36:d3:47:e8:5a:19:fd:d6:96:8a:ce:a3:1f:46:
22:5f:cf:20:c2:23:d1:a0:04:c4:23:df:70:d4:03:f7:0b:2a:
3a:07:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 2 08:13:13 2025 by rpki-client on console-ams.rpki-client.org