Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/Y5KoduqCl60j0XIDyNoDw1OEoZs.roa
File: Y5KoduqCl60j0XIDyNoDw1OEoZs.roa (raw, json)
Hash identifier: S7l6BzA3LhSi1Anf/CH8qrw1f6wjPKOGcL+w2O7hVFM=
Subject key identifier: 63:92:A8:76:EA:82:97:AD:23:D1:72:03:C8:DA:03:C3:53:84:A1:9B
Certificate issuer: /CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Certificate serial: 01856CE61A097832107F02A3F6DD1C09AEAE
Authority key identifier: 24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/Y5KoduqCl60j0XIDyNoDw1OEoZs.roa
Signing time: Sun 01 Jan 2023 10:34:57 +0000
ROA not before: Sun 01 Jan 2023 10:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212744
IP address blocks: 31.41.33.0/24 maxlen: 24
2a12:4040::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 04 Jun 2023 16:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:1a:09:78:32:10:7f:02:a3:f6:dd:1c:09:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Validity
Not Before: Jan 1 10:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6392a876ea8297ad23d17203c8da03c35384a19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:fc:4d:81:32:fb:a3:8d:b2:92:02:48:6a:
05:8b:79:bc:23:b1:6f:81:62:43:ed:86:fa:f0:b5:
fd:66:00:2a:0a:15:0d:9c:16:20:3e:ca:5c:68:29:
61:d3:c3:af:65:c1:47:d0:47:5e:37:d6:5c:fe:9d:
54:5a:29:cb:90:e2:e7:cd:3e:97:33:dc:ce:6f:88:
ea:08:00:de:99:24:1f:2b:99:9c:c8:71:e8:ed:62:
96:d9:71:79:60:8c:90:e7:42:18:dc:6b:3b:0b:c9:
9f:a4:60:03:65:e4:78:9f:dd:f8:bc:da:ab:ae:1d:
67:e2:c0:0e:9a:56:75:6a:36:ef:84:ae:ce:b0:aa:
06:aa:b5:f3:dd:18:9e:99:a2:ab:47:35:cb:02:f1:
4e:02:20:fd:2d:be:b4:69:c4:31:f7:63:f1:d0:40:
59:64:76:60:52:a5:a5:78:e0:43:0f:88:d1:ab:03:
a2:a0:8e:72:69:0d:c1:37:90:c4:6a:72:d9:d9:e8:
b2:8a:e0:8a:bb:42:74:49:a6:78:41:b9:d8:19:ee:
48:0a:76:ec:69:0d:c5:9b:bc:7f:9a:f2:59:ae:10:
02:e9:5b:07:35:c2:41:54:b2:0a:af:57:fe:c8:dc:
70:01:b7:1e:e9:16:9f:01:11:e5:f6:4b:93:8b:88:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:A8:76:EA:82:97:AD:23:D1:72:03:C8:DA:03:C3:53:84:A1:9B
X509v3 Authority Key Identifier:
keyid:24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/Y5KoduqCl60j0XIDyNoDw1OEoZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
IPv6:
2a12:4040::/29
Signature Algorithm: sha256WithRSAEncryption
06:c9:9d:47:83:0c:03:a2:ba:cc:a3:10:92:67:c7:3e:bd:ea:
25:24:40:46:af:5d:1d:35:17:9f:2e:67:32:3d:a8:e4:65:79:
c2:db:5f:27:00:04:65:43:7f:5e:e6:99:cb:b6:6f:23:b5:e4:
bb:05:00:39:58:e0:5a:43:94:06:92:97:94:b7:35:1f:33:5a:
65:81:77:42:25:b0:d3:6b:d7:d1:cc:a7:64:7e:21:91:8b:e4:
c8:bd:6c:62:3f:c0:25:c5:e5:d4:43:ff:c0:6a:48:2f:5f:8c:
06:26:13:2d:8f:69:34:e8:3b:ac:ba:0e:e8:c1:62:b7:99:ec:
9d:6f:08:cd:f3:18:c1:0d:b6:b3:53:3e:52:b3:be:b0:61:18:
8a:ad:bc:69:4f:c8:5b:01:04:24:a8:a7:34:b1:6b:0e:52:f3:
df:ca:6f:95:a3:7a:03:74:c9:12:e2:a2:ca:02:47:b7:a0:09:
b8:d2:23:63:a8:72:2e:2b:47:f2:0a:a0:fd:b9:39:30:38:11:
b3:37:c3:9c:7d:c1:56:3f:47:be:e0:4c:d1:d2:82:d2:54:7b:
5a:24:c7:90:32:a3:79:2d:d0:75:d1:33:cc:d1:94:e9:df:d4:
f3:11:16:0f:ff:eb:43:3a:cb:25:f0:6b:c7:4b:76:d4:29:d7:
ff:76:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-fra.rpki-client.org