Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/Rz1S5ezil6Gp21f2y6PpPZKmdtM.roa
File: Rz1S5ezil6Gp21f2y6PpPZKmdtM.roa (raw, json)
Hash identifier: wVrXh51xh+0VN9Zo8wjQfGJgzbaarZbxem0b1VNYBLs=
Subject key identifier: 47:3D:52:E5:EC:E2:97:A1:A9:DB:57:F6:CB:A3:E9:3D:92:A6:76:D3
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 018C2104BED1A53955067AB87BEE513AC6AC
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/Rz1S5ezil6Gp21f2y6PpPZKmdtM.roa
Signing time: Thu 30 Nov 2023 16:16:48 +0000
ROA not before: Thu 30 Nov 2023 16:16:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44996
IP address blocks: 31.42.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:04:be:d1:a5:39:55:06:7a:b8:7b:ee:51:3a:c6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Nov 30 16:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=473d52e5ece297a1a9db57f6cba3e93d92a676d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:5b:ce:7c:db:4e:33:2a:73:1b:42:80:ea:
d6:00:be:61:72:95:39:a5:df:7d:cf:c2:5a:94:38:
0f:64:77:5c:52:90:1b:c1:d2:49:60:22:8f:a5:5e:
5b:bc:c3:65:d3:25:92:41:32:fc:6c:7a:3b:fe:e2:
09:e0:cd:84:7b:96:04:57:68:63:b1:6a:15:4a:57:
c4:e2:3c:5d:bb:41:06:64:42:94:97:fe:a9:a7:4a:
eb:6b:99:ab:da:94:c6:06:4e:4d:fa:94:58:31:7a:
62:45:41:a5:34:fa:bd:09:d0:ed:36:c5:5f:c6:c2:
e8:68:04:ca:ef:0c:a4:c0:20:cf:de:50:9a:8e:fa:
92:e4:65:69:b3:95:46:b0:68:74:82:63:03:c2:d3:
52:29:eb:8a:f0:5b:7c:67:d8:74:f4:d9:34:4a:93:
65:b5:b0:84:1e:0c:e4:8f:94:1d:da:2c:1f:e8:ee:
55:c1:7f:09:46:1d:62:e6:62:a2:bb:cc:61:be:60:
e0:1f:a9:0e:f0:e3:55:5d:c2:8a:30:f9:52:99:d3:
9d:9d:fc:5e:9c:54:15:3e:63:ac:67:d0:bb:c8:51:
ab:dd:cc:4c:2b:e7:e8:0d:8a:19:16:29:52:1b:ef:
ae:7a:46:30:70:a8:0a:f7:41:c2:93:5a:a2:8c:55:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:52:E5:EC:E2:97:A1:A9:DB:57:F6:CB:A3:E9:3D:92:A6:76:D3
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/Rz1S5ezil6Gp21f2y6PpPZKmdtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.60.0/22
Signature Algorithm: sha256WithRSAEncryption
73:de:0a:9b:bd:1f:96:9b:93:00:f8:4b:c1:49:a5:68:4f:d0:
aa:7a:84:44:05:d7:13:db:9f:3f:21:05:7e:9d:80:fe:eb:7d:
fa:a6:21:92:19:62:05:5e:33:53:e0:bb:08:f6:d5:46:35:ce:
17:1b:c8:e0:4d:f5:fd:6f:7a:03:f1:f5:36:30:8b:fb:cf:d0:
3d:a1:23:2d:bf:f5:e0:c5:08:75:f3:79:15:16:8e:d4:d2:63:
df:d6:4f:e4:36:28:7a:58:57:26:a7:6e:79:76:b5:83:d7:be:
53:ea:78:48:76:f7:b3:dd:87:6b:16:43:01:ab:01:fd:13:f5:
22:d9:1f:e3:82:0b:ba:30:8c:a1:78:a9:4b:a8:4f:80:8e:0e:
80:b6:c8:fb:17:35:14:65:18:d9:d0:c2:7d:93:9b:68:08:c8:
38:7c:70:eb:f6:27:3c:5d:e7:33:b0:8a:0b:c6:9a:ad:a2:0c:
83:51:d6:b6:97:fe:9d:64:3a:ed:d1:0a:f6:7c:84:97:70:7a:
10:f7:0b:eb:44:c4:63:83:d7:04:2b:6d:2f:f6:e6:ba:fa:55:
fd:3e:b4:5a:78:e5:37:cb:e6:56:fe:3d:7b:5e:df:12:bb:c5:
b7:39:1e:c6:d3:e1:37:c3:b4:fb:8d:99:95:fd:1d:a0:63:65:
ef:82:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:42 2024 by rpki-client on console-ams.rpki-client.org