Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/_Bpd-xYZSXO8R7bt2YwZzV1thp0.roa
File: _Bpd-xYZSXO8R7bt2YwZzV1thp0.roa (raw, json)
Hash identifier: d0mbfTp8rM4smOjVGwlncFVJeE6cwL2CJZN6G8Zo2Cw=
Subject key identifier: FC:1A:5D:FB:16:19:49:73:BC:47:B6:ED:D9:8C:19:CD:5D:6D:86:9D
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 01893940B8DC7DC36D29A7FF15989D6FBED4
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/_Bpd-xYZSXO8R7bt2YwZzV1thp0.roa
Signing time: Sun 09 Jul 2023 06:04:50 +0000
ROA not before: Sun 09 Jul 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198392
IP address blocks: 31.217.226.0/24 maxlen: 24
31.217.225.0/24 maxlen: 24
31.217.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 10:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:40:b8:dc:7d:c3:6d:29:a7:ff:15:98:9d:6f:be:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Jul 9 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc1a5dfb16194973bc47b6edd98c19cd5d6d869d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:74:ea:c4:40:d7:a9:6e:45:2c:42:91:9e:
e5:49:a9:1f:a2:60:16:c7:e2:93:93:e3:40:1d:ab:
b1:04:af:f9:47:c1:59:ed:57:52:24:d3:75:f3:cf:
9d:23:dc:8d:05:7a:49:c1:d3:cd:f8:93:0a:bc:f6:
87:5c:79:71:8b:8d:74:b8:48:d2:f0:c8:7a:8e:a5:
74:a9:c2:78:62:a6:9a:f0:d0:b1:d0:7e:a7:2e:36:
81:a5:97:4d:e2:b4:65:1c:1e:c9:91:8e:36:b8:f6:
e6:8e:c1:2d:44:46:14:5d:15:66:db:40:93:b9:43:
f0:28:ed:a4:6e:7d:02:a9:f7:c1:40:1b:ed:ef:9c:
cc:ef:93:f9:1a:8c:69:7a:8d:d3:5f:1b:c6:a9:58:
84:22:b2:bc:a3:c9:bc:36:ed:e5:44:60:40:cd:97:
69:51:4c:30:1d:c9:df:59:cb:80:29:d6:bc:8d:4d:
a4:6e:6c:17:c5:ad:e2:13:06:f1:e7:df:31:bb:4e:
c5:88:e7:cd:0d:50:d9:a3:69:02:72:22:a4:f8:92:
50:fc:70:74:61:3c:35:5b:79:cc:8f:97:ef:84:d2:
ee:d2:89:59:59:fd:45:8b:b1:cd:57:53:6d:52:dc:
18:45:e6:75:d7:6d:78:d2:75:43:df:fe:be:3e:c2:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1A:5D:FB:16:19:49:73:BC:47:B6:ED:D9:8C:19:CD:5D:6D:86:9D
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/_Bpd-xYZSXO8R7bt2YwZzV1thp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.224.0-31.217.226.255
Signature Algorithm: sha256WithRSAEncryption
9f:a9:c8:f7:f9:f8:57:04:0e:68:bd:16:c6:15:9e:4b:1d:d9:
52:24:43:4e:bb:59:7d:c2:41:74:ef:b6:f9:77:90:e5:30:a3:
6e:e2:11:5c:a2:9d:90:6a:5a:cb:0b:24:81:4b:c7:87:b8:6c:
dc:df:ff:9e:16:ec:4b:2d:f1:53:85:4c:40:50:4c:0d:88:c8:
72:0d:2f:54:ed:5b:ee:c9:78:86:39:b3:24:97:e4:31:82:24:
29:be:fb:b5:ee:ef:46:2c:77:98:12:ba:6b:d9:76:55:2b:78:
3c:58:0b:fa:3d:46:14:5b:bb:10:98:6c:81:5e:f9:1c:4b:ec:
86:20:94:9e:03:ef:72:16:d3:01:c2:f2:78:84:92:60:72:ad:
a9:39:d2:b8:95:a9:1e:32:dd:74:1d:85:ff:3b:57:4f:e9:d3:
3f:f9:23:82:71:e1:b6:b6:ad:95:06:de:6c:c7:cd:64:3c:7a:
7b:21:09:d3:c7:80:3b:b4:36:9d:8a:cd:9f:a5:c4:86:b6:2d:
1d:ca:a7:30:c6:b3:74:df:0f:27:78:4c:26:c6:36:a2:7e:db:
9e:9d:69:a3:76:aa:6d:b0:22:10:f8:e9:24:f9:bc:3e:5f:58:
f7:ff:d9:9e:95:3f:bc:76:4a:90:45:6c:42:c3:f1:71:2f:b2:
f9:1c:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:05 2024 by rpki-client on console-ams.rpki-client.org