Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/S5xq_w92RJDJq-s9XzsSfQW4f8A.roa
File: S5xq_w92RJDJq-s9XzsSfQW4f8A.roa (raw, json)
Hash identifier: HGCxTnjMmq/05KMUGyatxMDX1PFiOTlgcnqtNAcB3e8=
Subject key identifier: 4B:9C:6A:FF:0F:76:44:90:C9:AB:EB:3D:5F:3B:12:7D:05:B8:7F:C0
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0189486F278564DB02713E18E1C74E2971FE
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/S5xq_w92RJDJq-s9XzsSfQW4f8A.roa
Signing time: Wed 12 Jul 2023 04:49:51 +0000
ROA not before: Wed 12 Jul 2023 04:49:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45027
IP address blocks: 31.129.30.0/24 maxlen: 24
77.83.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:6f:27:85:64:db:02:71:3e:18:e1:c7:4e:29:71:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 12 04:49:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b9c6aff0f764490c9abeb3d5f3b127d05b87fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:24:0a:89:0b:f9:90:bc:2f:99:1d:17:ab:
d1:64:48:72:74:b9:08:81:5a:4f:9e:bb:17:ba:a8:
1d:56:78:59:26:42:73:f3:1c:b4:a2:87:24:96:9b:
01:39:b3:c6:ad:fa:3d:df:22:2b:1c:06:c3:c2:d4:
77:b6:0b:14:8e:4e:a4:b6:0e:c7:3c:97:09:66:d7:
4f:0d:7e:d0:61:38:c1:ad:1b:6f:ee:df:04:c8:b2:
58:1d:e5:b9:38:1c:a0:81:1d:52:e2:d4:54:fc:b8:
1b:9e:13:e0:2b:12:92:1e:6d:3d:33:fe:86:2d:41:
4b:57:af:ac:18:b0:a6:bf:20:5e:d2:17:6e:09:f4:
68:26:25:5a:d7:f3:59:3a:4f:f9:2a:f3:5b:64:46:
23:42:14:5a:8a:50:9e:a1:63:3f:21:6f:4d:79:a2:
b9:e6:1c:d8:c6:db:21:69:7a:cb:78:80:7f:51:59:
13:6e:ff:67:50:5f:9d:92:6b:a4:86:98:4b:56:5d:
54:3e:61:0b:35:b8:c1:39:80:33:08:09:5a:57:e0:
2f:5c:ae:e0:44:57:bb:b7:85:6c:be:95:99:2d:7b:
c6:9e:10:e1:f8:94:b3:8d:55:3a:c4:01:76:cd:55:
1f:59:dc:82:56:e7:c2:1d:94:6a:5f:be:d6:fb:56:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:6A:FF:0F:76:44:90:C9:AB:EB:3D:5F:3B:12:7D:05:B8:7F:C0
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/S5xq_w92RJDJq-s9XzsSfQW4f8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.30.0/24
77.83.117.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7c:1c:41:56:f1:32:33:e1:3b:f6:31:b2:73:af:7c:80:f1:
50:4d:9a:da:6a:3e:b4:2f:e1:f1:7d:19:91:e7:db:40:4d:b1:
50:f4:73:7d:87:34:7f:04:43:0a:05:9c:20:0a:a5:5c:7f:d9:
4e:94:e8:75:52:34:16:b5:d8:f1:11:54:8a:8f:b5:a7:a2:8f:
08:5d:da:11:87:70:a1:14:87:d7:48:a2:1e:df:a9:9b:f8:35:
c3:ad:40:b7:87:74:e3:18:5f:f0:dc:87:94:a5:4c:9e:d5:ec:
b8:c4:32:b1:a5:4e:a5:9b:52:48:6e:7a:70:36:27:00:9a:88:
18:6d:d7:d1:b4:0b:b7:15:e2:76:93:9e:4d:9b:5f:ba:33:b4:
d5:63:18:b7:16:72:68:f0:5a:0f:f1:41:b3:72:0a:c3:fb:24:
4e:85:82:a4:84:9d:13:20:71:40:d3:f3:10:92:20:b1:1b:91:
f4:3b:8b:56:69:81:2d:31:de:26:2d:93:3a:3e:65:63:ce:f5:
5f:73:b2:51:c4:b3:63:7d:be:24:ad:c5:e4:cc:1e:8b:a6:0d:
2b:79:c2:c5:08:af:3d:e9:80:16:f8:aa:d3:a5:1a:e4:d8:3e:
46:1c:aa:56:fe:28:59:b3:3f:6c:eb:56:07:e6:84:a1:37:5d:
b0:82:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org