Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/umNvYEQbaUDtq9l2ZMsYBqNpxIE.roa
File: umNvYEQbaUDtq9l2ZMsYBqNpxIE.roa (raw, json)
Hash identifier: j1QwrIY8JljutUECQb/nCWRHGTMzRjAi15To5Xu5xVE=
Subject key identifier: BA:63:6F:60:44:1B:69:40:ED:AB:D9:76:64:CB:18:06:A3:69:C4:81
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018CC4924380EFCEA1DE5202FED88B703DAF
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/umNvYEQbaUDtq9l2ZMsYBqNpxIE.roa
Signing time: Mon 01 Jan 2024 10:29:28 +0000
ROA not before: Mon 01 Jan 2024 10:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26141
IP address blocks: 46.31.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 15:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:43:80:ef:ce:a1:de:52:02:fe:d8:8b:70:3d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba636f60441b6940edabd97664cb1806a369c481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:85:51:41:6c:fe:2d:7e:9c:30:cc:8d:1d:
77:25:06:22:88:76:50:95:ae:42:f7:b0:90:20:37:
bd:3a:af:ab:47:99:fd:ff:13:f5:d3:ad:a8:79:f7:
21:f4:4e:75:bd:bf:1f:c0:86:f9:b2:09:ba:90:05:
70:76:57:87:93:50:7e:03:37:17:fe:9e:32:cd:29:
70:10:46:4f:b9:07:58:a4:e6:d8:66:04:cd:24:d4:
7b:dc:eb:ff:65:c6:83:ea:86:86:4a:a8:d1:2c:9b:
18:d6:3a:57:eb:03:28:a7:5c:f5:44:86:4d:16:8a:
18:d1:e6:4a:5d:bf:71:f7:5d:12:b5:c7:fb:12:6c:
10:1e:8c:4e:dc:a9:9f:39:10:72:87:2a:cd:bf:45:
61:93:98:8d:fb:ce:3a:47:ce:9a:c0:2e:b6:0f:f1:
ef:bb:84:88:7c:69:5f:76:d2:94:1e:a7:74:67:68:
19:c7:c7:82:e4:4c:c2:48:26:e4:f1:e9:50:24:60:
39:41:7a:25:98:01:0d:cc:ce:40:b4:5d:1b:42:eb:
3e:dc:43:9e:b0:fe:6f:3e:16:41:6d:13:86:fa:4e:
d4:73:3b:7c:39:19:18:66:12:15:1f:c6:0d:12:30:
a4:67:e7:e5:c6:db:2c:f1:f3:3c:5a:1f:45:66:df:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:63:6F:60:44:1B:69:40:ED:AB:D9:76:64:CB:18:06:A3:69:C4:81
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/umNvYEQbaUDtq9l2ZMsYBqNpxIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.68.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7c:97:19:41:ea:fc:60:97:2d:07:d6:58:42:f7:77:c7:58:
89:d4:af:90:c5:cd:52:f6:bf:43:49:e2:2c:59:17:29:1c:03:
ec:b7:30:45:8f:3a:76:e2:7d:32:97:f4:e7:7b:f7:94:d8:af:
24:aa:81:5c:82:f0:b6:46:8d:d5:57:e4:cc:20:d3:e0:fb:96:
57:9f:82:b0:ff:eb:37:2f:c7:c9:df:0d:46:78:fa:aa:64:c2:
d0:dc:9b:e5:73:c8:6f:d5:13:95:37:42:ae:ca:f5:85:d9:86:
45:11:cd:27:61:02:2b:1a:8a:fb:34:6d:a3:cb:19:5d:30:f8:
ee:73:08:4c:56:81:47:a1:cd:9b:1c:83:3a:4e:6c:f0:05:25:
b7:02:ae:0d:03:4c:47:a3:09:54:6d:48:e6:f1:22:16:22:eb:
2b:58:d4:e0:7c:f6:41:2b:ae:27:d2:63:3c:bb:d3:35:43:47:
ef:67:39:7f:51:ad:3e:09:22:6f:82:16:33:26:63:24:20:cf:
b6:be:1e:5f:ac:f9:4c:17:37:22:3e:eb:d7:c1:5b:3d:23:f5:
7b:fa:74:89:ca:89:77:93:84:dc:ea:a5:66:5e:03:cb:db:dc:
b7:b6:d4:32:5c:db:df:ed:0f:1a:aa:3e:48:3f:55:c3:2a:e8:
ff:3e:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 20:54:15 2024 by rpki-client on console-ams.rpki-client.org