Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/UpYT_UHnIj3ZhRDQBunD5xxcHNk.roa
File: UpYT_UHnIj3ZhRDQBunD5xxcHNk.roa (raw, json)
Hash identifier: AX2Ed7JGmmJYUk1R6ZlJfL3vCLryT9NyL52b+vr7GxE=
Subject key identifier: 52:96:13:FD:41:E7:22:3D:D9:85:10:D0:06:E9:C3:E7:1C:5C:1C:D9
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 01856F1D91C17FDE1A8D6A072B9DDF36A3DD
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/UpYT_UHnIj3ZhRDQBunD5xxcHNk.roa
Signing time: Sun 01 Jan 2023 20:54:46 +0000
ROA not before: Sun 01 Jan 2023 20:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398826
IP address blocks: 31.22.110.0/24 maxlen: 24
2a02:7080::/48 maxlen: 48
2a02:7080:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:91:c1:7f:de:1a:8d:6a:07:2b:9d:df:36:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 20:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=529613fd41e7223dd98510d006e9c3e71c5c1cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:bc:33:03:48:37:4c:b6:88:17:54:b9:ab:
60:55:dc:97:db:0e:d6:27:d2:73:7a:77:4b:6a:18:
10:a6:d8:fe:1b:f6:b9:cd:61:45:66:20:c4:2a:04:
4b:66:94:73:3e:ae:e9:96:61:51:70:d7:41:8f:fe:
7e:20:dd:e5:42:30:3f:8b:b7:d5:ef:17:7e:0e:f8:
3b:98:4f:b7:4e:5e:6c:da:62:05:0d:c6:e2:99:bd:
5f:5a:ac:90:7e:57:68:26:35:9d:80:09:9a:b8:11:
a0:20:d4:ad:68:fc:7f:b6:c8:d6:21:43:62:ac:3b:
01:64:35:c3:a3:94:fc:e3:69:76:5c:1b:8f:bd:af:
b8:5c:df:b8:fe:08:37:40:6d:e3:71:3c:3d:db:03:
14:97:63:bf:6d:a4:9b:c1:cd:a5:e0:85:ff:5b:ed:
4e:59:f2:fe:a9:e8:b8:7b:77:1b:e3:92:13:d7:3b:
fb:6b:61:04:ca:a0:c6:5e:f8:ea:f5:47:da:41:76:
0a:d5:a3:d3:e4:16:5f:0d:06:6b:c9:36:76:c0:62:
5b:ec:30:2d:e2:89:39:48:78:b9:db:1d:fa:6b:18:
0a:ba:8f:c8:37:ff:f7:04:6d:35:6f:60:84:c0:d2:
ff:20:dc:47:e2:37:4f:17:9b:06:2d:f1:21:45:f6:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:96:13:FD:41:E7:22:3D:D9:85:10:D0:06:E9:C3:E7:1C:5C:1C:D9
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/UpYT_UHnIj3ZhRDQBunD5xxcHNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.110.0/24
IPv6:
2a02:7080::/48
2a02:7080:1000::/48
Signature Algorithm: sha256WithRSAEncryption
3d:46:28:52:2e:51:c5:56:8a:16:b1:fe:7f:17:1a:4a:4b:4d:
e8:22:fc:fd:5f:1b:38:48:74:12:a9:c3:e0:c6:b1:c3:dd:c2:
eb:97:40:b3:17:de:52:2b:35:68:2c:61:74:2f:af:6b:09:f9:
09:6c:91:f9:0f:d1:74:6e:d1:3c:5d:5b:46:db:25:5f:64:bb:
16:37:86:28:be:6f:f3:6b:d6:45:c2:0c:5f:c1:0b:05:53:1c:
e0:52:d0:a2:37:4f:1a:1e:e6:07:70:42:28:1d:c0:40:2e:5f:
4f:52:0a:ef:6c:79:a8:f1:1e:b8:56:98:46:e2:3f:11:16:48:
cd:b1:d1:6e:e6:a5:b6:16:ab:18:ea:9e:12:2a:2f:7a:d7:16:
a8:a3:ee:25:88:f5:a2:7e:fa:a2:e0:23:9c:63:e3:f3:73:95:
42:db:1b:97:9b:19:ef:b3:b4:77:e2:f0:05:ea:84:89:0f:22:
fd:9c:1b:22:ea:e1:b2:a9:5a:bf:53:82:a0:6c:dc:94:c4:e1:
97:f8:e3:ad:e1:ce:19:ca:e8:11:ae:88:06:3f:30:0d:35:fd:
da:86:cb:62:2f:7f:ea:7d:d5:f8:ef:81:59:82:71:8b:cc:ed:
67:55:ae:cc:c8:3f:76:3a:df:a3:d5:63:18:40:c9:65:57:99:
17:2e:05:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:34 2024 by rpki-client on console-ams.rpki-client.org