Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/5d0Is7BsoYGok97wBzXgrLyTnL4.roa
File: 5d0Is7BsoYGok97wBzXgrLyTnL4.roa (raw, json)
Hash identifier: AwWFgsoBSjClOHAz2n7AZKOVQ/bWsLdzal2oPLPUhoM=
Subject key identifier: E5:DD:08:B3:B0:6C:A1:81:A8:93:DE:F0:07:35:E0:AC:BC:93:9C:BE
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 01856F6FFA0F5CB33058B448FEAB9D6786C8
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/5d0Is7BsoYGok97wBzXgrLyTnL4.roa
Signing time: Sun 01 Jan 2023 22:24:47 +0000
ROA not before: Sun 01 Jan 2023 22:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 31.40.7.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
31.40.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Apr 2023 16:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fa:0f:5c:b3:30:58:b4:48:fe:ab:9d:67:86:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jan 1 22:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5dd08b3b06ca181a893def00735e0acbc939cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:dc:f7:d7:38:dd:19:a2:af:7c:30:6a:f0:
b3:42:d1:81:81:a8:75:1b:6b:7e:80:16:35:24:c0:
b4:35:9a:e7:95:8f:c0:07:07:b8:55:23:e9:fc:a6:
0c:76:81:25:72:7e:0d:7c:3b:e9:8f:32:c4:f6:0b:
b0:13:6b:87:6e:94:bd:03:42:ec:b0:70:57:86:6b:
bc:f2:4c:11:7a:78:9b:1c:12:a7:7f:5b:56:2d:51:
6f:ea:eb:78:53:48:3c:93:04:e1:ab:de:8f:01:74:
4c:bf:26:ec:da:b8:b6:1f:29:1d:b5:85:05:74:d0:
70:e4:22:8d:6b:0e:03:6b:13:bc:27:d8:25:87:3c:
37:8b:d5:e1:e6:a4:7e:d7:f7:b9:85:60:c4:c8:8e:
82:66:96:a2:d7:45:7a:42:8e:95:34:7d:fd:94:8c:
57:c2:40:fa:75:f8:32:37:51:09:8c:cb:11:c7:2d:
2d:67:a1:e2:16:23:63:b9:f4:f4:c8:e5:67:11:24:
43:e7:c8:2c:68:22:73:52:5c:0a:b9:cf:b6:63:7f:
9f:fb:65:e6:bd:bb:22:57:5a:67:a4:ca:37:3d:93:
a7:61:b0:0f:96:47:a4:ac:df:fd:39:fa:fe:65:cb:
cc:86:f0:9e:11:e6:a1:e9:95:9a:40:90:c5:26:65:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DD:08:B3:B0:6C:A1:81:A8:93:DE:F0:07:35:E0:AC:BC:93:9C:BE
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/5d0Is7BsoYGok97wBzXgrLyTnL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.5.0-31.40.7.255
Signature Algorithm: sha256WithRSAEncryption
99:a1:2a:5c:3f:f7:ac:45:71:5b:dd:2d:7f:04:11:d3:2b:ab:
3b:e6:35:85:35:58:a3:e0:ff:42:c8:8c:b0:b3:a7:b6:fd:b5:
31:1d:37:d5:fb:33:e5:c9:06:3b:d3:4a:2a:07:6b:ee:54:9c:
2d:4e:ab:92:ef:49:1f:05:ff:e4:a4:76:11:08:27:03:17:98:
49:ba:24:ea:51:1a:41:bd:a9:0c:fd:06:ee:08:3e:b1:4b:8b:
1e:6f:77:fa:32:50:30:12:4c:f5:77:e2:eb:f6:4d:26:a5:14:
43:55:23:46:ed:b9:5b:64:76:fb:ef:30:e7:36:7c:c6:b9:16:
c5:6c:60:5a:53:3e:7c:be:50:67:2f:d5:af:1d:44:34:c2:29:
73:14:2b:34:33:eb:fd:29:c1:05:5b:a7:30:a0:2b:5b:a4:fd:
40:d7:2f:9e:9c:a2:e0:2c:50:b6:32:9f:80:1b:29:ac:77:3c:
54:8f:a4:74:fb:8f:e1:21:6f:57:08:4e:08:48:d3:43:c0:60:
90:4a:b8:c8:9d:45:c8:fd:85:16:6d:c6:23:88:74:52:52:56:
b5:c8:06:89:5c:4b:36:f6:ff:c4:12:3b:74:4e:97:7a:ff:82:
cf:45:e2:96:24:e7:c2:a1:47:d6:26:f8:35:ab:ad:82:bd:b6:
9e:3a:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:25 2024 by rpki-client on console-ams.rpki-client.org