Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/5j8yJXt96bsMWtRWaacomG_4dfU.roa
File: 5j8yJXt96bsMWtRWaacomG_4dfU.roa (raw, json)
Hash identifier: n5CZ5eAHTIVpv3T0XWOuQMZStg5woyV6vMolE3qmZDg=
Subject key identifier: E6:3F:32:25:7B:7D:E9:BB:0C:5A:D4:56:69:A7:28:98:6F:F8:75:F5
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0189540AF8D507733B5EBE8838FF194D2BF2
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/5j8yJXt96bsMWtRWaacomG_4dfU.roa
Signing time: Fri 14 Jul 2023 10:55:52 +0000
ROA not before: Fri 14 Jul 2023 10:55:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30282
IP address blocks: 31.186.224.0/24 maxlen: 24
31.186.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:0a:f8:d5:07:73:3b:5e:be:88:38:ff:19:4d:2b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jul 14 10:55:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e63f32257b7de9bb0c5ad45669a728986ff875f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:76:85:15:81:4e:77:80:9e:2f:7f:cb:6f:
13:76:b6:64:13:1e:48:94:53:bd:f5:26:6a:6e:c1:
89:0e:ef:1b:f8:70:f4:36:fb:21:51:ed:c8:bd:23:
01:83:34:66:c6:84:a9:eb:f1:5b:63:82:07:75:b6:
ea:a5:d3:63:49:e1:e1:d4:39:6c:b4:5a:1e:72:d6:
fc:a1:bb:66:3f:57:0a:5e:37:fe:d8:89:cf:17:9b:
e7:7a:b9:d5:10:01:ec:77:73:2a:5e:bd:9f:a2:bc:
28:58:a7:96:bc:c8:f4:5b:d3:39:7b:38:06:76:01:
fc:0d:52:72:13:ff:c9:eb:3d:a4:ff:e5:83:42:cb:
c3:e1:a7:e2:30:ff:ba:e4:2f:44:8a:37:aa:57:21:
79:7d:90:e9:85:b0:1e:4e:ce:85:0e:4c:14:5d:9c:
4c:32:47:7a:55:67:6c:35:70:c9:72:34:be:27:38:
5e:e5:8b:e5:8a:14:93:82:13:e6:3f:e9:9a:f5:48:
bf:b0:23:71:f6:5d:b4:c6:21:60:d3:6e:57:47:9a:
d2:cb:c7:cc:09:a4:b3:55:ce:3f:ee:a9:79:a4:df:
07:b8:30:d5:14:c9:24:cb:b7:6e:97:29:82:63:8e:
35:fe:24:93:97:7b:80:1e:ab:92:17:29:c1:14:cf:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3F:32:25:7B:7D:E9:BB:0C:5A:D4:56:69:A7:28:98:6F:F8:75:F5
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/5j8yJXt96bsMWtRWaacomG_4dfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.224.0/24
31.186.230.0/24
Signature Algorithm: sha256WithRSAEncryption
41:99:80:5a:03:5a:6b:e7:81:83:21:ea:88:21:6b:91:22:28:
0e:b7:f1:14:a9:f9:1e:0a:1d:9e:8b:75:06:92:03:b9:b8:53:
ab:0f:f9:43:f9:fd:3f:62:d3:d6:b5:58:0c:7e:00:e1:e3:2a:
b9:bf:77:0f:a3:14:d2:15:f8:5e:3d:a1:a8:d6:a4:94:a5:e6:
b6:2f:0f:1f:2f:5b:df:22:b5:9d:4c:bf:f2:52:ad:da:2f:3f:
92:b9:d0:eb:df:93:d7:9e:ee:18:b0:bd:06:b4:08:9e:90:f2:
4e:f5:d6:2f:13:f7:67:4a:1a:ab:35:47:96:ac:98:d1:41:0d:
70:bd:f3:20:ba:08:23:2c:14:56:78:88:93:df:56:96:4f:05:
cd:15:7e:98:c6:19:ff:f9:aa:04:bf:bd:0d:09:9d:de:74:db:
6c:19:8e:8c:ad:40:13:f4:96:53:65:df:1e:7d:37:77:ba:6a:
18:94:ec:5c:0b:05:c7:94:c0:41:be:dd:d2:0d:0a:30:08:ea:
da:67:c9:73:24:16:b3:7a:76:2a:0b:03:ec:6e:61:6d:d2:75:
42:9b:13:a2:1c:40:22:30:87:b5:5a:c1:28:28:fc:16:48:a0:
00:0e:be:90:77:1b:a5:96:50:0a:33:c4:7a:f9:ec:1b:05:dc:
62:81:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org