Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EdYiN2Qr107flQ5h08eQ0Z5EJj4.roa
File: EdYiN2Qr107flQ5h08eQ0Z5EJj4.roa (raw, json)
Hash identifier: qytqThw7qw2d3LzPFqBeCV1n1goyl6frl1pwmpI7ps8=
Subject key identifier: 11:D6:22:37:64:2B:D7:4E:DF:95:0E:61:D3:C7:90:D1:9E:44:26:3E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019044C4EC0F033650A8C44B02A2897F332F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EdYiN2Qr107flQ5h08eQ0Z5EJj4.roa
Signing time: Sun 23 Jun 2024 11:04:34 +0000
ROA not before: Sun 23 Jun 2024 11:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.56.0.0/14 maxlen: 14
46.224.0.0/15 maxlen: 15
91.98.0.0/16 maxlen: 16
151.238.0.0/15 maxlen: 15
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 26 Jun 2024 11:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:c4:ec:0f:03:36:50:a8:c4:4b:02:a2:89:7f:33:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 23 11:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11d62237642bd74edf950e61d3c790d19e44263e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:73:4a:dd:67:52:23:e1:a2:07:0e:a9:8a:
54:8c:11:74:5c:13:24:c3:c6:5c:ec:60:92:d3:f4:
9d:01:bf:39:0f:ca:bb:97:f5:b7:03:dc:a8:b2:49:
03:64:7d:7f:5a:bb:a8:24:b9:41:db:c5:7b:ba:f0:
4a:6a:3e:f1:0f:55:28:d5:1c:ec:5b:e6:2f:2e:83:
e0:da:59:94:5b:c4:d2:86:99:89:2c:67:5d:6d:ae:
6c:43:d8:81:1f:1b:1e:a7:c8:3f:9f:46:aa:42:d0:
f9:19:6a:0f:8a:87:fb:20:74:a3:0c:e7:fa:ff:f0:
b7:c5:9d:ba:18:63:42:71:15:d8:34:b5:eb:6c:06:
af:27:35:03:c8:4c:9e:04:82:70:c4:d7:bc:47:e3:
58:02:61:84:cb:2d:62:69:af:a8:08:08:04:d4:c2:
46:57:48:55:2d:73:95:05:2d:c2:ec:e5:45:4d:be:
cd:2b:a8:1b:03:1a:f9:8d:d2:8d:39:81:c0:dc:78:
12:be:66:42:50:e1:cd:4c:91:1a:08:f7:3d:a3:23:
05:00:50:5c:1d:7b:51:73:89:3d:b3:0b:c5:82:f9:
c5:38:fd:84:7f:78:07:c7:de:6d:0f:77:f0:92:68:
b6:c9:d3:fa:9e:0b:87:7e:56:06:82:45:80:1f:25:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:22:37:64:2B:D7:4E:DF:95:0E:61:D3:C7:90:D1:9E:44:26:3E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EdYiN2Qr107flQ5h08eQ0Z5EJj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/14
46.224.0.0/15
91.98.0.0/16
151.238.0.0/15
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
60:57:15:60:25:42:ec:b5:f7:21:e1:d5:3a:b4:65:22:2a:86:
86:83:65:b6:d9:c1:bd:ff:9d:98:60:92:7e:86:71:77:b5:f8:
10:5a:24:e5:00:a2:4c:b8:7e:23:c0:09:81:c1:63:86:65:9f:
97:fd:01:54:96:b0:53:46:d8:4f:f6:bb:e8:ad:d0:96:30:8f:
2a:ce:7b:a6:45:cc:8b:72:4d:3e:6c:1d:88:c7:5c:68:1e:f6:
0e:eb:e1:9e:21:f6:67:cb:7e:bb:2e:0b:8d:6a:6c:ab:bb:5c:
94:5e:7d:a5:26:55:6b:c6:d5:bc:f0:34:f6:e7:f7:b7:29:ce:
b0:1b:e3:4a:8a:1f:33:07:b3:9a:7a:1e:c0:33:e1:37:d8:c9:
27:4a:ee:ef:c1:c6:dd:45:06:45:4d:5d:d7:19:15:b0:4b:eb:
b1:69:52:5a:ea:cb:fa:da:b9:a5:40:15:33:44:06:b0:3f:67:
8d:e2:f0:07:66:cc:37:39:aa:0b:74:38:4c:23:6d:1c:5f:a1:
b3:3b:21:22:24:6f:0b:29:cf:52:82:b8:46:30:e1:44:93:d6:
51:4b:9b:6d:14:b0:a6:54:77:4e:cf:c0:5c:bb:25:a9:21:9f:
30:68:19:05:c8:2c:1a:d0:f1:6b:30:2f:bf:e1:87:7c:f2:a4:
b1:94:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 18:22:51 2024 by rpki-client on console-ams.rpki-client.org