Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/CHm0OQiPqvrWXJjmjixPZROezOI.roa
File: CHm0OQiPqvrWXJjmjixPZROezOI.roa (raw, json)
Hash identifier: 7lbS/M4Zl96KP6PQIelTHrq654OFx1lbdfcUfMjGgAU=
Subject key identifier: 08:79:B4:39:08:8F:AA:FA:D6:5C:98:E6:8E:2C:4F:65:13:9E:CC:E2
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 018C2104C02DED7F249FB04ED924C34EDD5E
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/CHm0OQiPqvrWXJjmjixPZROezOI.roa
Signing time: Thu 30 Nov 2023 16:16:48 +0000
ROA not before: Thu 30 Nov 2023 16:16:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208139
IP address blocks: 31.128.244.0/24 maxlen: 24
31.128.245.0/24 maxlen: 24
31.128.251.0/24 maxlen: 24
31.128.249.0/24 maxlen: 24
31.128.250.0/24 maxlen: 24
31.128.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:04:c0:2d:ed:7f:24:9f:b0:4e:d9:24:c3:4e:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Nov 30 16:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0879b439088faafad65c98e68e2c4f65139ecce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:ef:87:e2:38:a6:12:91:ec:a5:e6:2a:1d:
dc:29:9e:83:da:8d:3a:c6:89:86:7b:9c:33:b7:4f:
fd:cc:2d:db:ba:e5:23:63:4a:ab:9e:bb:fc:4c:7f:
5c:4c:34:00:d2:52:66:c4:55:53:12:8a:00:a4:fc:
7f:da:ba:0f:8b:a4:c7:cc:be:6e:20:ef:2d:a7:33:
8c:8c:cb:df:3a:fb:80:6f:76:9b:6e:d0:40:1a:5f:
68:74:9a:10:6c:4d:d2:a2:81:e6:ff:2d:36:d4:e2:
48:8a:58:07:02:14:2d:f5:c4:55:4c:9e:aa:e8:73:
e3:78:1a:4d:12:b1:a5:0e:2d:8e:49:71:79:9e:24:
10:d4:f3:f1:2b:8f:33:ec:3f:25:e9:75:38:af:2d:
0a:84:a1:3d:2e:f8:e7:33:4d:17:90:7d:ba:2e:29:
4b:40:06:2a:d4:76:a8:69:15:eb:d7:8d:d1:a2:1b:
fd:40:86:a0:a7:2a:3a:59:d1:7e:dd:dd:e2:af:02:
c6:99:91:90:4d:22:86:e5:94:9e:b3:55:fd:b3:b3:
96:89:bf:6a:95:a1:f8:f5:5c:0f:11:b6:17:c3:a4:
27:24:b7:ca:2f:46:73:08:86:b1:bd:03:3f:97:36:
81:62:f6:8b:63:66:27:40:16:71:27:89:dd:eb:72:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:B4:39:08:8F:AA:FA:D6:5C:98:E6:8E:2C:4F:65:13:9E:CC:E2
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/CHm0OQiPqvrWXJjmjixPZROezOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.244.0/23
31.128.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:40:f1:24:55:64:d8:62:ea:ef:55:5b:a2:d2:89:98:d7:b9:
ce:08:66:40:4d:21:fd:94:bb:2d:4f:27:3a:e7:48:64:03:7f:
22:70:9f:a7:22:d2:2d:3c:2e:ff:5e:03:5a:15:29:9a:82:63:
7f:e0:93:33:d9:4d:d6:47:9b:b9:39:09:e5:b1:1f:54:a6:9d:
bd:30:eb:97:a9:a4:d5:14:72:e5:07:10:62:de:1a:37:30:1a:
d3:4a:88:aa:cd:3f:a3:f4:0b:de:bf:b8:6a:41:0e:df:57:8e:
da:e9:4f:f0:9b:10:c3:f1:f5:6f:35:cb:1c:60:8d:21:22:39:
b4:3c:aa:88:e6:52:f1:3f:15:43:11:29:62:d5:58:1a:9f:50:
9a:47:84:5a:68:8a:c1:2f:5b:b3:4b:18:99:3b:4f:bb:ed:9c:
26:eb:e9:20:f7:a5:4c:e7:62:b8:67:43:96:ba:6b:12:ac:b3:
e2:53:8e:91:30:09:9e:69:44:8b:17:f7:0f:9b:c0:48:fc:1d:
fe:ee:fa:a0:22:49:34:e9:98:79:36:75:24:08:bb:64:b1:fb:
b1:10:74:89:00:9e:86:2a:f9:7e:4c:21:4e:7e:d4:84:95:7d:
0f:21:4f:be:66:c8:52:d7:e6:04:8e:0d:ea:1e:39:0a:2a:3c:
6e:1d:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:32 2024 by rpki-client on console-fra.rpki-client.org