Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/31Z5S7BCYnqgy4kfxJRlGj_HC_4.roa
File: 31Z5S7BCYnqgy4kfxJRlGj_HC_4.roa (raw, json)
Hash identifier: rultGqOkmWcP0FiT94GFj8tIfILAFGmLqNFtAygDOlE=
Subject key identifier: DF:56:79:4B:B0:42:62:7A:A0:CB:89:1F:C4:94:65:1A:3F:C7:0B:FE
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019241FD40AE89DC36DAC92031D2EB70C1A0
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/31Z5S7BCYnqgy4kfxJRlGj_HC_4.roa
Signing time: Mon 30 Sep 2024 08:12:48 +0000
ROA not before: Mon 30 Sep 2024 08:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 217.180.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 08:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:fd:40:ae:89:dc:36:da:c9:20:31:d2:eb:70:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 30 08:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df56794bb042627aa0cb891fc494651a3fc70bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:69:36:d2:9a:23:f7:e6:8c:1e:90:55:de:
c9:c6:7d:34:5a:a8:d5:22:d2:fe:f3:06:20:72:b8:
7c:32:33:a7:00:57:a6:b3:fe:20:1b:96:ef:1f:1b:
42:a8:d2:25:73:b4:ef:51:af:04:fc:6e:99:a0:34:
9d:15:aa:b7:23:d7:8e:e7:1d:05:18:43:25:4c:5b:
3e:79:d2:b4:38:2b:af:b7:08:26:79:c6:59:3a:81:
51:dd:32:7b:68:1b:c6:ad:a0:f9:47:72:14:03:ee:
ce:37:fa:33:79:ca:22:75:2d:2b:04:7d:45:31:33:
6e:9b:d3:92:e5:34:2f:b1:ef:14:3f:bf:4d:d0:d8:
92:79:58:be:d1:c8:e8:a4:04:15:60:ed:e2:5d:5d:
9d:03:89:15:3a:b0:ac:94:2e:7b:fc:57:d1:2f:2e:
60:68:82:de:a0:14:79:fc:f5:a0:88:60:85:59:05:
5a:7b:dd:95:bc:35:ab:bd:b7:7c:ad:87:c4:55:da:
dd:b2:fa:67:59:5d:88:20:0d:fd:01:2e:d1:8e:47:
a1:d9:93:ea:ff:76:34:48:6d:c1:54:b3:7a:b2:d8:
3e:51:ee:63:c6:42:4d:eb:91:98:d4:f9:c6:bf:51:
c8:31:98:6d:d7:d7:9f:82:0c:c6:23:39:a0:3e:e7:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:56:79:4B:B0:42:62:7A:A0:CB:89:1F:C4:94:65:1A:3F:C7:0B:FE
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/31Z5S7BCYnqgy4kfxJRlGj_HC_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.17.0/24
Signature Algorithm: sha256WithRSAEncryption
28:99:0a:8b:03:7b:8f:0d:b2:dd:55:1c:c6:ab:8c:a7:80:e8:
35:1e:ac:02:e1:53:75:3f:a2:1b:2a:2c:67:59:00:04:a4:67:
ac:35:f6:bf:16:82:32:03:d0:cc:9d:14:e3:a7:f5:bc:da:f1:
9d:ce:60:eb:2d:c1:92:73:2f:95:22:06:1b:0c:87:8a:38:f0:
8b:7e:1d:60:5f:96:c7:8c:6e:78:b5:67:55:31:e7:2b:6c:ee:
27:48:bd:db:a7:1d:07:85:25:28:1a:62:11:5b:55:8b:f2:f9:
5f:02:6e:39:c8:c9:43:6d:7e:1b:51:62:66:ea:29:12:c6:22:
3f:5e:13:a9:e3:05:2a:3d:c2:5a:50:59:e3:17:2b:27:a7:11:
41:1f:ff:e6:6c:76:8a:a9:51:c1:ed:d8:c9:bb:7b:12:94:5f:
dc:4c:0d:3a:ad:9e:ad:a7:e9:f8:e0:f9:53:2a:86:27:9d:bb:
39:09:85:aa:1b:3b:6f:45:b0:dc:b0:af:62:97:58:cc:42:98:
5d:c2:cb:a3:1d:93:84:5e:1b:cb:f7:4c:f2:e4:df:6d:4b:55:
92:ea:de:53:1b:9c:ad:03:33:e8:22:7d:ce:4d:97:fe:8c:79:
3e:9d:e1:a8:26:23:1c:c2:91:bb:1a:1f:54:aa:cf:5f:04:55:
bb:9d:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:11 2025 by rpki-client