Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/eOkc8PuGQMhCppLu-Zr6LdiOGT8.roa
File: eOkc8PuGQMhCppLu-Zr6LdiOGT8.roa (raw, json)
Hash identifier: +wpYGEGfgR1vDZj4cYkGRD6r2r8dGyEPkYmfFsHkco4=
Subject key identifier: 78:E9:1C:F0:FB:86:40:C8:42:A6:92:EE:F9:9A:FA:2D:D8:8E:19:3F
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 018CC725B21B21A76573ED01603FC16B9863
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/eOkc8PuGQMhCppLu-Zr6LdiOGT8.roa
Signing time: Mon 01 Jan 2024 22:29:45 +0000
ROA not before: Mon 01 Jan 2024 22:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.222.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 23 Feb 2024 07:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:b2:1b:21:a7:65:73:ed:01:60:3f:c1:6b:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 1 22:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e91cf0fb8640c842a692eef99afa2dd88e193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:47:99:5a:d4:bb:a8:7b:25:a7:41:59:5c:
8d:d1:2a:9c:93:f5:bc:43:eb:55:22:3c:be:c7:fb:
a6:3b:30:fb:0f:ab:9a:fe:f6:bc:ec:41:3e:3d:8b:
f1:85:87:bc:41:a7:fe:eb:39:8f:51:5b:2e:67:f5:
11:67:91:c4:80:cf:ab:d0:a7:26:4d:ba:8c:c1:b7:
06:33:41:09:dc:21:ee:45:18:41:6a:6e:aa:cb:3c:
ad:91:5e:64:38:69:2b:8f:f1:1d:53:07:3b:b7:1e:
e9:0a:1a:53:5c:e1:d6:61:13:df:d6:23:dc:3c:1b:
ae:cd:91:fb:35:c7:7e:f9:6e:dc:65:b5:52:b4:9d:
a0:9f:bf:0c:3f:d9:51:21:48:20:43:c6:97:3f:02:
77:6f:64:f4:68:96:01:c6:a1:4d:74:25:18:8c:3e:
1a:83:34:9d:26:64:cc:47:00:cf:16:11:61:eb:a9:
4d:16:6e:f8:83:d9:c8:e1:53:d1:a9:b8:f1:7d:74:
81:a2:e6:f7:65:6c:e9:92:ab:d4:3e:7a:5f:a3:36:
49:48:2c:27:88:0f:a3:f7:35:7e:00:83:62:ff:1a:
55:f3:0e:11:33:d2:3e:e4:40:6a:40:54:e0:e3:2a:
8c:90:e9:87:13:51:63:33:d3:c0:be:b0:38:ec:0c:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:1C:F0:FB:86:40:C8:42:A6:92:EE:F9:9A:FA:2D:D8:8E:19:3F
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/eOkc8PuGQMhCppLu-Zr6LdiOGT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.204.0/22
Signature Algorithm: sha256WithRSAEncryption
35:0f:e9:18:9d:d9:98:f7:94:da:64:f7:d1:6f:8e:6f:29:99:
eb:c2:00:c9:ae:75:96:51:9b:cb:75:9c:39:eb:07:4b:45:ce:
9d:d7:e7:97:f8:91:64:d1:6a:9e:90:1b:f6:a1:1e:58:91:9c:
b2:fb:87:18:4b:96:b1:85:5c:87:1c:8b:ec:91:c9:d9:6f:30:
84:6d:cc:19:80:7b:e3:20:62:67:ce:72:57:23:77:0a:b3:21:
69:b8:f7:48:2d:82:8e:94:21:82:f5:8d:8f:ef:cc:18:8e:84:
34:9f:00:bc:17:65:03:fa:12:9c:0d:b3:1b:3e:e8:52:de:55:
b7:b3:a0:eb:0f:62:b3:26:86:be:cf:9c:8e:8d:fe:a8:b1:fd:
a2:77:a8:a3:5c:3d:8d:e3:ad:cf:32:ec:2c:cd:a2:4a:5e:91:
e1:48:55:2d:72:43:f9:fd:c9:7a:b4:a7:3e:c0:5a:4a:e0:64:
0d:40:92:30:21:10:a3:05:fc:82:5d:31:fe:85:bd:0d:5b:e1:
89:5c:7a:2a:19:72:c4:15:ae:73:83:d4:7b:c0:1b:82:7b:fb:
25:1c:a3:57:6b:63:b5:07:31:75:e9:f0:10:ca:b3:16:52:94:
02:2e:22:08:77:25:e6:1e:20:93:45:5a:b7:22:0a:56:a8:4c:
61:db:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org