Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5QtC5Drl-_6hTBARu3eGLFJ_yWI.roa
File: 5QtC5Drl-_6hTBARu3eGLFJ_yWI.roa (raw, json)
Hash identifier: 5TgmUgUzFpCZu/0Z5YQ0YpvCQyGE3v48jDlEAZ8yVlo=
Subject key identifier: E5:0B:42:E4:3A:E5:FB:FE:A1:4C:10:11:BB:77:86:2C:52:7F:C9:62
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 018FC9614AE6DCC77AA93335E58CBB0D278E
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5QtC5Drl-_6hTBARu3eGLFJ_yWI.roa
Signing time: Thu 30 May 2024 12:02:27 +0000
ROA not before: Thu 30 May 2024 12:02:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.222.204.0/22 maxlen: 24
37.148.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 14:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:61:4a:e6:dc:c7:7a:a9:33:35:e5:8c:bb:0d:27:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: May 30 12:02:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e50b42e43ae5fbfea14c1011bb77862c527fc962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:84:02:b4:a5:0a:cd:a1:63:ca:1d:11:0f:
06:21:1b:47:b0:b1:ef:43:f6:5f:26:4e:2b:4f:27:
28:34:8e:a4:01:af:61:27:e4:cf:dd:6b:58:cd:ff:
92:3f:1d:6a:3c:56:4a:04:56:06:59:30:da:43:a8:
55:67:c7:b5:33:fd:8e:24:27:89:3c:c1:4d:3b:8b:
8b:4b:5d:76:58:09:15:3e:5d:91:74:46:24:51:2e:
2e:3c:93:a4:bd:28:ec:79:a4:c8:82:9a:af:4e:a1:
8f:59:10:37:68:29:0a:6f:cf:68:67:0d:1b:b3:c1:
32:20:1c:c6:97:43:f2:49:a1:7a:d6:5f:6d:32:d3:
2c:fe:ee:3f:dd:b6:f1:c1:5c:f4:a3:5c:97:e0:82:
cd:bb:b6:f4:98:a2:52:2e:59:33:a4:36:4c:94:2c:
0d:9f:85:64:17:c6:79:ed:62:56:6d:30:e8:8b:a2:
a7:a6:89:da:e2:ea:4e:ae:dc:58:d1:d2:c4:e8:9c:
61:66:4a:d1:53:0a:64:90:d4:00:20:ad:8c:3c:48:
da:63:d5:19:a7:29:2f:31:43:92:53:c7:0a:28:9a:
e6:f5:04:9c:fe:64:e1:b8:4b:08:cb:3d:6f:f8:30:
06:98:3e:02:e4:ab:eb:ea:f1:13:29:bb:cc:72:a0:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:42:E4:3A:E5:FB:FE:A1:4C:10:11:BB:77:86:2C:52:7F:C9:62
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/5QtC5Drl-_6hTBARu3eGLFJ_yWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.204.0/22
37.148.218.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:eb:f0:32:ca:de:e4:2e:41:e6:21:46:61:f4:ee:3b:8d:93:
fa:9a:58:9d:81:1d:f5:2c:29:bb:d3:99:e4:31:a6:e1:33:28:
fa:34:a3:db:d0:1a:eb:aa:35:ba:5d:0e:f9:b1:c8:21:6e:34:
20:86:83:ac:3f:1e:3b:a4:df:4c:27:18:0c:74:05:dd:6b:c9:
f1:ad:43:e9:6d:64:cc:1c:db:50:1e:f3:ac:24:20:3a:c2:fb:
9e:9d:1f:92:71:f4:32:64:4c:89:f3:e2:74:09:0d:7e:0d:e6:
6c:8e:32:7d:3c:8a:32:dd:27:b7:dc:18:ff:d5:a8:6c:53:e3:
f1:49:b0:76:69:25:7c:1c:fa:3f:41:5c:e9:0f:7a:56:84:dc:
97:d7:bc:c3:02:91:e9:da:c7:a0:a2:c2:84:90:ef:ba:4d:f9:
4f:23:fe:27:28:6d:67:42:a6:e8:ce:5b:b1:1b:4a:cb:ca:ce:
c6:5b:17:46:ac:89:c4:93:c4:1b:6f:de:8b:8d:70:83:86:ff:
ef:56:25:23:e3:b0:14:63:94:e9:85:25:8a:d3:df:c1:8b:24:
41:ec:46:2f:76:0f:6f:15:59:fc:25:0d:44:bd:df:ec:96:e1:
7c:45:9f:1d:50:60:da:a6:76:6e:6d:4c:94:62:3f:3b:03:40:
a3:bb:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 18:29:35 2024 by rpki-client on console-fra.rpki-client.org