Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1-p4IYmntBzh9tpGa_jp3B3ma5sA.roa
File: 1-p4IYmntBzh9tpGa_jp3B3ma5sA.roa (raw, json)
Hash identifier: th3oWyWydqaHF8sgVQvIiM+U65BjMp/7fKSpNy/EZBo=
Subject key identifier: FA:9E:08:62:69:ED:07:38:7D:B6:91:9A:FE:3A:77:07:79:9A:E6:C0
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 018A8C959DC3C6007109A93EEFF51C80774B
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1-p4IYmntBzh9tpGa_jp3B3ma5sA.roa
Signing time: Wed 13 Sep 2023 03:28:50 +0000
ROA not before: Wed 13 Sep 2023 03:28:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 31.222.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 06:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8c:95:9d:c3:c6:00:71:09:a9:3e:ef:f5:1c:80:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Sep 13 03:28:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9e086269ed07387db6919afe3a7707799ae6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:60:a6:84:59:f0:a1:f4:53:ec:cc:89:64:
f8:7e:ce:c3:91:3c:b2:a4:e3:dd:fa:c4:83:52:3e:
cc:13:b7:34:79:c5:48:b3:84:a8:8e:63:a0:43:41:
ab:d9:55:65:01:42:12:c7:58:4b:d0:35:8f:e8:95:
b5:7e:f7:ab:e1:cd:77:e5:30:b4:02:9d:10:bb:0e:
ea:68:a3:f4:cf:69:f6:65:78:d5:60:eb:9f:91:af:
09:62:50:38:41:a5:94:4d:34:ec:ff:b0:9e:f0:de:
1e:d9:56:6f:ab:05:c6:05:62:03:9e:57:da:ab:21:
22:f4:7c:19:ef:4c:73:8f:e1:33:73:37:64:27:3d:
55:ce:74:96:c0:de:02:e7:31:4c:05:f0:07:5a:aa:
d8:4a:09:6a:b8:26:ad:23:6b:52:2e:9b:42:29:70:
6d:60:3d:fa:2b:7a:7f:3c:50:c2:ce:55:41:1c:b4:
fa:3d:a7:1b:10:3c:b5:67:2f:f3:a3:f7:c4:27:6c:
f9:84:15:df:6c:07:f8:d8:19:8d:8f:1f:bf:bb:8c:
d4:8f:24:e1:8b:61:81:f7:2a:d4:87:4e:eb:f4:9e:
6e:11:79:b3:c4:a3:11:e8:be:05:3b:56:54:74:5c:
f4:0e:ce:f7:b4:64:84:ee:a9:54:0b:d1:76:19:4a:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:08:62:69:ED:07:38:7D:B6:91:9A:FE:3A:77:07:79:9A:E6:C0
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1-p4IYmntBzh9tpGa_jp3B3ma5sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.200.0/22
Signature Algorithm: sha256WithRSAEncryption
85:12:a5:03:5a:7f:a6:cb:ff:b7:e3:bd:d0:65:c6:a5:ba:27:
ff:cf:c4:d7:4c:cd:00:f7:57:b1:6e:f3:0a:9a:6f:6f:2a:2d:
54:53:d7:d3:fc:2a:45:c4:a3:b4:b9:db:26:16:fd:b4:69:f2:
d4:0a:dc:97:b9:35:e8:31:69:ff:a8:05:40:93:7a:14:b3:1b:
3e:4e:44:2c:99:e8:d9:2c:a8:5e:74:6f:ed:52:db:15:97:2d:
5b:87:a4:96:e5:58:0c:a9:36:d0:eb:db:d9:2e:0c:d6:85:60:
22:8c:bb:86:2c:ed:94:7d:92:39:b0:a6:c0:98:7b:bb:7c:73:
f0:e0:b4:5f:f3:43:4c:36:f2:00:a6:68:44:07:f5:27:5a:df:
91:b2:d8:21:ea:28:03:2a:d9:ab:0c:39:d6:dd:5c:b6:b1:f8:
b6:d5:1e:1a:79:f6:6f:5e:9d:56:3e:48:d9:91:ad:c6:25:c1:
34:7f:6a:f6:8a:c8:0b:58:19:70:66:30:db:a0:9a:e0:b6:67:
06:a3:c8:1c:c7:fb:7c:f8:63:ae:1f:89:0f:6f:22:7c:1d:f3:
62:67:fc:77:f7:07:ba:10:4a:f7:84:1f:fa:90:13:83:e1:a6:
c7:92:f0:35:82:b1:ac:17:ba:d3:6f:0e:41:a3:49:53:9a:24:
bb:b5:ea:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org