Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/XDCUAHR7uwg4rOobM4t9HSdRnb4.roa
File: XDCUAHR7uwg4rOobM4t9HSdRnb4.roa (raw, json)
Hash identifier: ynCBzN3Puo+o6JWguYtwFjSisCDWTGnYl4k61T66itQ=
Subject key identifier: 5C:30:94:00:74:7B:BB:08:38:AC:EA:1B:33:8B:7D:1D:27:51:9D:BE
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018D6AF23BBEC154A5C9F411BC314E24088F
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/XDCUAHR7uwg4rOobM4t9HSdRnb4.roa
Signing time: Fri 02 Feb 2024 17:51:16 +0000
ROA not before: Fri 02 Feb 2024 17:51:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.14.37.0/24 maxlen: 24
185.155.54.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 05:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:f2:3b:be:c1:54:a5:c9:f4:11:bc:31:4e:24:08:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Feb 2 17:51:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c309400747bbb0838acea1b338b7d1d27519dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:92:31:9a:c0:eb:18:48:2a:4e:ad:d3:24:
d5:96:1b:c8:c7:16:8e:13:68:9a:e1:d1:a3:0b:e6:
80:9c:99:70:c1:30:88:4c:6c:3d:7f:d8:93:cd:1c:
75:72:6d:02:16:5c:7c:e5:70:fe:7e:47:e3:b5:7d:
58:db:c0:2d:89:30:8a:79:93:5a:91:74:b7:43:94:
30:3e:a6:ff:f0:7f:cc:36:b6:95:19:2a:0d:cc:34:
73:aa:3c:25:1b:cf:6a:99:ae:74:da:8b:07:dd:2c:
f1:9f:b0:cc:cc:54:b2:40:3e:bb:95:87:d6:44:7e:
4e:e7:6a:fd:b7:4c:a9:34:1c:7e:cd:11:69:31:e6:
ca:47:30:6e:28:54:de:7e:60:9b:c5:1e:db:58:c2:
0b:e4:4b:49:06:5f:35:c7:38:b7:ae:79:6f:37:66:
60:3a:ff:31:1a:f3:b0:5b:0f:b8:25:02:28:24:81:
7b:1e:a1:5b:48:a3:33:70:84:ce:b4:16:6e:4d:ab:
c3:b3:05:ad:0a:f0:2f:6a:bf:98:a0:6b:6f:a7:db:
41:e4:ec:f5:68:cc:39:52:e4:38:07:8a:81:56:bd:
5f:b4:01:b3:91:cb:eb:17:9c:e5:fe:46:3c:be:f2:
3c:c0:ff:49:fb:95:b6:17:fd:bc:c5:13:54:f2:9d:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:30:94:00:74:7B:BB:08:38:AC:EA:1B:33:8B:7D:1D:27:51:9D:BE
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/XDCUAHR7uwg4rOobM4t9HSdRnb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
185.155.54.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:bc:eb:51:27:04:2b:58:80:80:ed:b9:82:c6:44:d8:1c:f4:
a5:ce:43:f9:d1:dc:30:78:46:66:af:c8:77:5f:b2:e9:64:57:
b3:f7:11:5c:42:ef:9f:68:7c:ce:bb:0e:b0:97:a8:1b:31:b1:
7e:82:d0:97:fc:d5:5c:4e:5c:ed:5f:fe:00:a2:42:c2:e3:16:
a0:0f:fb:6c:91:60:31:04:96:33:d7:a5:a1:e0:b6:53:bf:b0:
7b:32:16:78:83:0e:5b:c8:56:f2:76:73:6c:d8:75:34:0c:2a:
69:ab:9a:0e:39:81:03:12:f8:66:c7:2b:0c:f5:63:1d:94:0d:
9a:79:41:5b:cf:93:9c:4d:53:10:4d:8b:20:bd:ae:2d:25:41:
41:a9:6d:b3:4f:6b:25:2e:e2:dc:87:49:ba:10:86:15:b9:e6:
2f:e8:61:e8:6c:42:72:6f:9e:19:7f:3c:d2:3e:c0:f1:cb:69:
c3:41:d8:d9:35:4c:07:7d:3b:3f:76:2e:08:d5:d4:40:c7:40:
a6:95:3e:4c:78:b2:7b:98:6f:20:b4:bd:d7:da:04:c3:3b:ed:
aa:f1:c5:18:14:cf:b4:24:d7:f8:ad:f6:46:41:aa:4c:5e:e7:
98:fc:d6:72:bf:f8:be:9e:82:5b:d2:d1:27:fd:dd:bf:23:8d:
ee:a9:de:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 08:24:36 2024 by rpki-client on console-ams.rpki-client.org