Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/jywhN1zEXHDLyjQPNQoKaOpgoOY.roa
File: jywhN1zEXHDLyjQPNQoKaOpgoOY.roa (raw, json)
Hash identifier: svwpUFCrHWg0VVa48icvVVXffnusoZHfJLPrqOQmodQ=
Subject key identifier: 8F:2C:21:37:5C:C4:5C:70:CB:CA:34:0F:35:0A:0A:68:EA:60:A0:E6
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 018C9A8D43E5F84296733FD8F74B818B1F1C
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/jywhN1zEXHDLyjQPNQoKaOpgoOY.roa
Signing time: Sun 24 Dec 2023 06:39:58 +0000
ROA not before: Sun 24 Dec 2023 06:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 31.222.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9a:8d:43:e5:f8:42:96:73:3f:d8:f7:4b:81:8b:1f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Dec 24 06:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f2c21375cc45c70cbca340f350a0a68ea60a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:1f:60:87:8b:75:9d:85:47:42:fb:30:b0:
1f:a8:77:84:e9:bf:b2:88:08:b6:d7:b0:db:37:05:
ce:56:a7:cc:77:5d:e7:02:41:7e:37:cb:62:21:74:
75:4f:4e:d2:ee:bb:b9:84:74:37:fa:aa:88:df:f9:
85:ce:5a:68:bd:14:51:8a:a3:f5:bd:a9:77:b0:ed:
5b:f7:6e:ed:b7:ef:3c:e8:ec:59:a1:1b:0c:d7:c4:
68:6c:4d:94:04:67:5e:b1:cb:28:01:fa:89:5e:28:
71:a9:a2:70:ea:4a:c4:ed:47:6c:ad:e8:e3:51:5b:
9e:1e:de:86:f6:fb:79:58:3e:45:c8:51:d1:ec:b0:
33:6b:45:9f:6b:8b:cd:c6:02:eb:77:f3:e1:e6:f0:
26:e0:10:60:cb:e8:c0:f1:b9:fa:65:cf:da:c7:86:
6e:bd:7f:be:00:0f:87:f5:5a:f9:5b:81:84:a4:60:
cf:39:5f:fd:a1:4e:99:32:9b:47:b0:0a:e5:cd:af:
0d:66:88:1f:24:7e:fb:09:f2:a1:e6:37:f8:e5:95:
b8:ac:69:db:7b:47:46:02:e9:cf:f3:27:16:50:5d:
78:d8:67:f7:80:d8:35:5e:e5:a2:3a:b9:69:33:ae:
4d:f6:c6:4a:ac:6a:47:32:d2:b4:d6:ad:ea:d8:ba:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:21:37:5C:C4:5C:70:CB:CA:34:0F:35:0A:0A:68:EA:60:A0:E6
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/jywhN1zEXHDLyjQPNQoKaOpgoOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:8d:cf:3d:b9:77:c6:44:a0:1a:c2:c4:10:69:39:72:ec:dc:
c7:3f:ad:1b:37:62:4d:86:38:9a:28:95:7a:f0:5c:eb:71:21:
3a:d2:a7:b0:9c:39:b6:3a:e3:73:1d:74:68:ce:e7:28:b8:7d:
86:4d:4e:d7:30:a0:25:fe:78:11:12:d3:02:94:6a:b4:60:b5:
cd:db:2f:c4:02:e9:30:bf:37:74:14:33:10:6a:03:63:28:a3:
07:97:f8:43:bb:57:d6:e9:22:0d:8f:fd:54:81:28:2a:4e:a6:
b2:c3:73:13:6c:d0:c0:b3:78:3d:e9:bf:30:48:4c:cf:89:f3:
23:d0:df:e3:a3:c4:3a:7e:3e:15:a4:18:13:8e:17:20:d0:0b:
cf:59:2a:62:f9:73:80:4f:da:2f:bd:83:41:99:23:96:68:b7:
4a:49:4b:61:e2:e8:22:be:f6:05:66:c6:59:01:9a:3c:54:3b:
71:39:49:3d:fa:07:a8:a4:fd:ac:9f:3a:94:84:ab:2d:1f:fd:
69:12:a5:a8:af:5e:37:5a:be:78:8c:2f:0f:f2:1f:fa:b6:fc:
51:ec:91:25:19:f2:70:00:4f:ef:4c:d9:3a:e4:d8:0f:63:c1:
09:68:cf:f3:01:90:11:d1:10:66:5e:8c:30:e0:75:e0:ef:ad:
50:d7:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:30 2024 by rpki-client on console-ams.rpki-client.org