Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zjLr37rIdI6TXvQqWEeKjspjF1c.roa
File: zjLr37rIdI6TXvQqWEeKjspjF1c.roa (raw, json)
Hash identifier: SMMxoh5XcXrTPSp0YYxIrsHBjgf0n5RgpiLguzNm8so=
Subject key identifier: CE:32:EB:DF:BA:C8:74:8E:93:5E:F4:2A:58:47:8A:8E:CA:63:17:57
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0187841DDA97897F70CA266E09BB22A6E4F7
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zjLr37rIdI6TXvQqWEeKjspjF1c.roa
Signing time: Sat 15 Apr 2023 08:52:41 +0000
ROA not before: Sat 15 Apr 2023 08:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.186.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 26 Apr 2023 07:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:1d:da:97:89:7f:70:ca:26:6e:09:bb:22:a6:e4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 15 08:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce32ebdfbac8748e935ef42a58478a8eca631757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:15:70:c0:92:93:ed:61:e6:df:50:82:26:
8e:9d:82:fe:df:ee:d1:52:36:0b:78:d1:43:33:71:
33:0a:a3:f9:6a:c1:99:74:09:f1:77:0a:27:ae:26:
6c:92:4f:d7:4f:0b:c0:d4:f4:e7:25:da:0d:f9:10:
17:f8:8c:f5:86:5d:a4:de:77:40:69:56:28:89:0b:
6e:c1:77:b1:3f:50:89:b5:b5:47:78:d7:34:96:fb:
8f:ab:8f:c5:89:93:26:14:cc:45:aa:eb:a6:ef:2e:
d4:59:6a:f3:84:37:c2:08:82:6e:59:f0:58:66:9d:
9d:5a:15:52:85:42:02:a7:9e:63:46:05:4c:fa:74:
90:d4:df:e0:36:27:ef:63:02:79:47:46:6e:3f:d2:
48:fe:6b:48:01:38:46:a1:da:61:c5:24:48:e1:49:
51:72:1a:12:67:a2:7f:14:af:49:66:f7:f0:92:4a:
37:9e:c5:bc:4c:37:08:30:98:e2:d1:ea:b6:49:f2:
3e:00:dc:9a:d1:ea:7c:6f:33:1b:22:90:92:bf:fa:
16:da:88:24:9b:ff:77:79:94:fb:1b:17:0c:e4:6a:
50:5d:6a:db:dd:7c:f4:b2:64:a7:74:f1:7a:76:86:
65:2b:2b:4d:a2:de:28:84:73:43:eb:a0:8e:aa:7c:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:EB:DF:BA:C8:74:8E:93:5E:F4:2A:58:47:8A:8E:CA:63:17:57
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zjLr37rIdI6TXvQqWEeKjspjF1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:54:14:ea:00:54:75:fd:89:75:9a:af:6b:14:79:8d:f6:4d:
6f:7a:0a:39:00:90:80:ca:1d:10:cc:f7:4a:90:7c:15:f9:06:
4e:98:62:ac:b3:a5:dd:f2:5a:bf:fa:de:05:19:0e:66:1d:8b:
36:7c:cf:54:d5:9d:91:75:89:06:f9:92:e2:94:0b:5d:cd:50:
ea:28:eb:1e:ae:8e:33:85:d8:e1:cd:c5:e3:cc:90:a9:16:13:
bf:f3:2f:7c:db:92:5c:90:9b:ab:b2:bb:f3:61:20:e9:84:c1:
82:f5:b6:ce:27:0d:23:dd:d9:71:e6:c6:85:9f:51:93:33:bd:
fa:09:f3:4c:e9:eb:7f:e3:07:fb:5f:e4:4b:7b:cb:8f:2f:0b:
f2:5c:b6:3e:98:6b:1d:bc:dd:33:67:05:47:46:e9:9e:d8:e3:
5a:74:05:d9:19:6f:d9:7d:e7:06:ff:f2:17:bd:70:7c:08:82:
d5:56:45:b5:74:4b:7d:ef:ef:e2:f3:5a:7f:81:6a:43:36:50:
bd:e3:3b:f8:a7:d0:ad:45:dd:11:6c:d7:67:9f:d4:19:cc:e4:
26:14:57:fd:11:b3:0b:c1:00:9a:cc:8c:05:12:1d:51:68:af:
5e:fa:72:07:4b:9a:94:dd:94:c2:2f:68:b0:d1:43:9b:72:6a:
a4:df:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org