Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/3sn5fFI1aD2EvGNZAbZCnnAIQUA.roa
File: 3sn5fFI1aD2EvGNZAbZCnnAIQUA.roa (raw, json)
Hash identifier: 1TDa70SOVwbKE1F7EKqVQbDPXY+CRUtdkx8JlFu0iCE=
Subject key identifier: DE:C9:F9:7C:52:35:68:3D:84:BC:63:59:01:B6:42:9E:70:08:41:40
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018FB9EC43BDE6A59E24C5BB7819A91F45F3
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/3sn5fFI1aD2EvGNZAbZCnnAIQUA.roa
Signing time: Mon 27 May 2024 12:00:19 +0000
ROA not before: Mon 27 May 2024 12:00:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210512
IP address blocks: 31.129.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:ec:43:bd:e6:a5:9e:24:c5:bb:78:19:a9:1f:45:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: May 27 12:00:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dec9f97c5235683d84bc635901b6429e70084140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:54:7b:2f:d9:82:d7:10:10:61:9d:d8:29:
41:1d:49:1d:f8:98:99:eb:57:0a:44:34:d2:77:ab:
74:54:f2:d4:21:71:5f:5d:c4:0f:37:d7:3b:6d:02:
9e:e4:b5:ec:4f:17:20:be:15:56:6e:4b:ec:e1:0c:
de:fa:34:62:88:01:b9:14:c0:18:47:d6:36:4b:de:
94:a9:62:cd:a7:b9:dd:ff:68:b6:09:80:4c:00:bc:
0d:ab:4b:6d:a9:44:a4:7b:cc:a8:a3:8d:57:2f:18:
bd:3a:f3:e9:6b:d1:54:1f:65:65:f6:a3:0e:6c:98:
71:14:37:58:c2:78:c7:52:57:b0:d5:6b:0c:0b:01:
60:21:56:7f:b4:d3:29:a3:f7:fc:9f:a1:88:65:ae:
a1:20:ab:40:1f:c6:f5:eb:08:06:a2:94:3e:38:2a:
b6:09:06:a3:a7:4a:d4:f2:3d:b8:40:cb:5b:a4:de:
8a:80:21:5a:4f:bc:19:51:51:6b:27:98:9a:6e:11:
ed:88:8f:1a:64:02:00:09:f5:ec:c5:de:92:29:64:
87:6c:90:75:a7:37:a6:a9:81:5b:a6:c0:93:b9:0d:
60:53:5b:95:f0:4e:f3:64:66:5f:ce:8a:2b:cf:ee:
4b:72:35:33:52:d9:dd:4b:c9:e7:1b:dd:df:6e:cb:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:F9:7C:52:35:68:3D:84:BC:63:59:01:B6:42:9E:70:08:41:40
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/3sn5fFI1aD2EvGNZAbZCnnAIQUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.21.0/24
Signature Algorithm: sha256WithRSAEncryption
44:74:27:07:71:36:77:a4:3f:05:93:0b:84:24:35:9d:65:21:
7f:23:ea:a7:be:c2:57:eb:12:a0:a9:14:77:79:a1:6b:1e:87:
e9:5d:87:cc:0b:50:ff:85:9a:0f:0e:64:ba:bf:f1:8e:ac:05:
58:d2:a6:91:55:9f:f7:0e:15:f7:7d:4e:fc:d6:ff:2c:f1:fc:
d5:a7:b2:54:8c:84:6f:6d:01:f4:65:91:eb:7e:3c:d2:ce:d5:
cf:13:2f:a9:33:2c:36:e3:6a:84:6f:ec:13:7b:8f:c5:21:29:
13:27:0a:86:e3:b8:f4:dd:a0:b4:3a:97:26:ba:26:3e:1c:c3:
d0:30:f5:0f:a4:4e:32:56:33:9c:ad:1c:35:fc:d0:ed:0b:16:
08:3e:44:2f:e5:74:b4:3d:17:1e:70:e1:aa:a7:6c:5b:e5:df:
67:c5:f9:82:72:1e:18:6a:d1:22:3d:d3:48:af:89:fe:78:c6:
0a:a5:3b:6f:16:f4:d5:44:4b:84:89:f4:19:85:82:2e:ba:60:
c9:09:da:78:ab:05:15:fd:ac:72:8e:11:bf:ef:08:c9:54:59:
31:cb:84:bc:c9:ae:92:95:a3:f3:f4:9b:c0:ed:a1:97:ef:e0:
d5:2f:39:b7:a0:51:e7:01:23:8f:21:9c:59:0d:75:16:0c:f9:
e0:66:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org