Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Q31G1C2ijqz0SB8b0ppI196utJQ.roa
File: Q31G1C2ijqz0SB8b0ppI196utJQ.roa (raw, json)
Hash identifier: uEhu25KB+V8ODnShxcMz9XkG0UPJ6nTo+vRPNis2nRE=
Subject key identifier: 43:7D:46:D4:2D:A2:8E:AC:F4:48:1F:1B:D2:9A:48:D7:DE:AE:B4:94
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 0185724C5A0417BA8F36919C926B75CD4C29
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Q31G1C2ijqz0SB8b0ppI196utJQ.roa
Signing time: Mon 02 Jan 2023 11:44:44 +0000
ROA not before: Mon 02 Jan 2023 11:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204337
IP address blocks: 77.232.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:5a:04:17:ba:8f:36:91:9c:92:6b:75:cd:4c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 2 11:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=437d46d42da28eacf4481f1bd29a48d7deaeb494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:a5:ee:7e:9d:5c:55:5e:b5:6b:33:d8:48:
48:74:c0:74:e8:1a:c5:4b:88:71:cd:5d:50:24:38:
1b:b0:69:16:f3:e9:a4:6f:5a:1c:92:1e:93:eb:b0:
c4:05:ab:a7:4e:11:af:0d:bf:76:82:b2:ea:ed:5f:
3f:94:eb:bf:3f:ed:09:ba:16:48:19:f3:04:b7:3f:
e6:97:97:42:0c:4f:77:99:e0:43:4a:18:9e:55:94:
b4:43:33:dc:35:73:cb:7d:60:84:04:f7:c9:2a:7f:
76:75:6e:e9:d3:00:56:d4:c4:81:c4:18:97:a4:61:
2e:a9:ff:b2:4a:df:99:4a:72:3e:60:0f:9b:a5:b8:
d4:3e:63:b0:d2:7c:b1:e3:c2:99:6c:70:e6:12:07:
b9:67:32:84:85:a0:9e:85:b4:c0:7f:d7:e9:ac:0a:
9e:9c:cd:19:e3:68:21:db:ae:ec:7b:28:ab:35:62:
6a:cb:09:53:06:c6:a9:4e:b8:55:b6:4c:16:92:73:
d7:2a:0a:fc:4b:43:ff:9f:fd:15:c7:17:51:f0:0a:
eb:2b:de:e2:7f:4b:97:31:50:b6:d5:05:a6:5d:ac:
82:f6:98:51:cb:8e:60:cc:0c:6b:58:ca:b0:fe:40:
5b:0f:07:a7:7f:7e:6f:a8:1b:3f:88:0c:5f:14:3f:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:46:D4:2D:A2:8E:AC:F4:48:1F:1B:D2:9A:48:D7:DE:AE:B4:94
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/Q31G1C2ijqz0SB8b0ppI196utJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:25:c7:13:4b:a2:35:c1:65:21:a7:a1:f5:f2:b8:4c:c1:f2:
62:cf:df:aa:e6:6c:d6:94:e4:e5:30:0a:25:73:e6:d4:49:8b:
90:eb:bc:50:e9:e1:71:b5:a4:d3:fb:c6:b6:65:52:2c:13:5e:
4c:31:c9:68:62:fc:e1:4a:0c:3f:1f:03:6a:b2:2b:bb:4d:b6:
88:04:10:8b:2c:ec:57:71:b2:ea:ea:89:8c:03:7d:c2:82:99:
15:2c:e0:d5:49:f6:d9:60:8a:4d:0a:86:8d:01:47:c0:9e:0f:
f5:d1:de:1d:62:7d:bc:0f:20:20:6a:23:3b:1c:85:21:26:77:
1b:5e:6b:3e:18:8f:d7:cf:8f:86:d5:b6:9b:c0:9f:f6:68:2c:
25:6c:1e:22:ab:2c:9a:7a:79:07:33:72:34:e0:cc:be:73:3c:
5d:a9:5c:bf:54:d5:75:dc:a9:e8:16:f1:eb:6b:06:6a:bb:7b:
4c:f0:76:6f:36:ef:47:6f:9d:5a:06:08:d7:c4:92:f6:b9:b6:
83:a1:24:b6:57:f3:9d:19:82:05:cd:71:27:63:b4:e9:5f:32:
95:dc:24:5c:50:43:27:dc:b2:ef:97:c0:c8:16:99:70:8b:fd:
af:3a:e7:7a:b1:60:39:85:27:0b:54:0c:5e:cf:de:8c:06:6b:
75:c9:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:28 2024 by rpki-client on console-fra.rpki-client.org