Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/0kEp-qQi_2zib6VaSKpFr7nK8xg.roa
File: 0kEp-qQi_2zib6VaSKpFr7nK8xg.roa (raw, json)
Hash identifier: 8NBcnBse4INhzn7Iv7FckmknaKN/GTTnQOTLSf0h3PA=
Subject key identifier: D2:41:29:FA:A4:22:FF:6C:E2:6F:A5:5A:48:AA:45:AF:B9:CA:F3:18
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 01869BE202D049A293F71D8E3AC5C6A1AB14
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/0kEp-qQi_2zib6VaSKpFr7nK8xg.roa
Signing time: Wed 01 Mar 2023 06:35:25 +0000
ROA not before: Wed 01 Mar 2023 06:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 31.222.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 07:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:e2:02:d0:49:a2:93:f7:1d:8e:3a:c5:c6:a1:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Mar 1 06:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d24129faa422ff6ce26fa55a48aa45afb9caf318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:ec:2b:67:05:a3:4d:03:74:01:38:bd:95:
82:7b:df:c4:99:89:8c:b0:4b:f0:85:1e:91:d1:e1:
2b:c1:08:aa:b4:92:d5:59:3f:08:2a:4e:07:96:a5:
29:fb:13:6c:37:f1:4d:70:47:3c:d3:23:a9:a7:c9:
27:98:11:1f:d7:a1:79:45:9f:b5:ee:a1:76:93:52:
1b:af:2e:0f:17:95:76:73:9b:43:01:a8:e4:bf:81:
db:d7:8b:d1:b0:1d:a3:23:64:7d:61:2f:ce:29:03:
f6:61:95:49:96:f4:b5:0d:69:bc:72:11:ef:3f:79:
fa:d2:6a:32:4b:b7:2f:34:91:20:c8:ec:50:f5:b4:
c8:3a:cc:9c:46:25:a7:9c:28:11:61:3c:44:4e:4b:
af:3a:39:db:3c:7c:bd:8e:2b:1a:7f:26:4d:c1:9e:
3f:57:8d:91:85:9b:f4:96:53:85:d7:d7:d6:ee:e1:
e0:84:7a:63:d9:ba:a3:6c:5f:af:f3:32:dc:84:86:
4d:c6:ad:fb:32:2b:b4:ce:02:92:40:a5:b3:6f:ea:
dd:7a:20:0b:a1:db:a7:29:60:8c:72:7c:26:34:24:
01:32:67:b9:82:0b:5c:4c:8f:50:c5:46:95:a8:35:
c8:d9:00:5d:79:9e:72:bd:58:91:b5:97:dd:1a:3c:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:41:29:FA:A4:22:FF:6C:E2:6F:A5:5A:48:AA:45:AF:B9:CA:F3:18
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/0kEp-qQi_2zib6VaSKpFr7nK8xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.204.0/22
Signature Algorithm: sha256WithRSAEncryption
17:82:42:aa:a2:3a:32:2f:23:45:e9:e2:e9:35:c2:7c:2f:11:
0a:40:3b:4b:72:c9:aa:08:5c:50:00:24:05:f3:44:38:1a:11:
c1:08:5b:08:db:f5:22:74:f9:eb:3f:2b:79:c1:b1:96:ec:f3:
9e:ec:63:75:5a:4d:a0:4c:75:7c:cb:b2:41:10:bf:02:21:af:
56:89:23:8c:36:37:1d:a7:26:07:e6:01:4f:e5:8f:63:06:d2:
b7:7b:7d:b8:0d:e8:ce:96:5e:e4:a9:32:89:95:ef:04:8f:d7:
32:0a:21:48:25:68:27:5d:e8:c6:34:8f:c1:d0:f6:16:d2:f9:
c7:82:7b:16:cd:f8:7c:b1:c6:10:17:92:9c:9f:3e:86:07:fa:
a2:0d:ab:65:c1:38:22:aa:20:81:f0:a1:42:8c:3a:a8:1c:a4:
15:9c:60:31:25:f4:b7:22:04:92:81:9e:bc:2d:81:41:ca:b8:
e3:f4:b9:6d:8d:0e:ce:a9:a0:69:c7:69:e8:0a:fa:3a:07:3c:
cb:86:c4:b0:72:45:bd:b5:2a:2d:65:fc:ac:94:a3:81:62:cb:
8a:5e:73:b3:d3:d0:ef:47:32:ab:ec:63:5e:64:ae:ec:48:ea:
14:31:0b:df:01:cc:ce:fb:21:cb:99:54:af:9e:4d:0d:94:ad:
2a:16:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:30 2024 by rpki-client on console-ams.rpki-client.org