Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Ue2BSX5mLI-nk0oZHrAbkeZ-Aes.roa
File: Ue2BSX5mLI-nk0oZHrAbkeZ-Aes.roa (raw, json)
Hash identifier: K/tQ6q0Bjmf4K4NXnVA3X9clZIsUAPP89LQkMFjPMFQ=
Subject key identifier: 51:ED:81:49:7E:66:2C:8F:A7:93:4A:19:1E:B0:1B:91:E6:7E:01:EB
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0189540AF972688DA4BFA72422698457406F
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Ue2BSX5mLI-nk0oZHrAbkeZ-Aes.roa
Signing time: Fri 14 Jul 2023 10:55:52 +0000
ROA not before: Fri 14 Jul 2023 10:55:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48910
IP address blocks: 31.186.226.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 11:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:0a:f9:72:68:8d:a4:bf:a7:24:22:69:84:57:40:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jul 14 10:55:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51ed81497e662c8fa7934a191eb01b91e67e01eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:0e:2f:dc:81:78:d0:35:bd:a3:6e:a0:f8:
a0:ae:f3:a1:ff:dc:c7:cb:61:36:22:b9:39:1d:69:
c3:ea:6c:fa:b4:32:62:0d:38:75:a3:15:ca:79:65:
7f:ce:ed:91:16:b1:41:19:b4:0c:d7:39:13:a3:98:
3b:79:3c:53:b4:5c:f5:61:64:a5:e7:06:01:44:f8:
f1:0b:4d:09:ef:a4:3b:28:68:fe:d2:bf:31:d1:23:
57:93:6f:ea:72:70:4a:9a:f9:b6:63:72:ff:c3:7c:
c8:b5:3c:93:8f:64:18:41:80:eb:a9:3e:f3:4f:e7:
f9:2d:50:b3:fe:df:f2:9b:79:ee:aa:e4:fd:88:6b:
9d:0f:d7:7a:22:83:30:13:b1:c0:5c:73:5d:3c:77:
d3:cd:a9:8d:dd:b2:dd:11:81:20:2d:04:e5:e9:ec:
ec:00:39:dd:a0:6b:03:f7:40:92:7f:28:c7:30:2b:
da:2a:c3:73:bd:4a:69:a8:e8:9d:3d:1f:60:86:25:
6b:9e:40:66:bd:eb:49:88:39:c5:38:a9:0e:6a:68:
fc:1e:2a:bc:a6:b2:bf:a4:2d:8a:23:23:31:37:b2:
4b:bd:85:4b:25:a3:d1:f8:9d:b5:21:0b:74:50:fd:
3a:76:7f:4d:f7:05:c5:23:16:97:6a:98:fa:b3:1b:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:81:49:7E:66:2C:8F:A7:93:4A:19:1E:B0:1B:91:E6:7E:01:EB
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Ue2BSX5mLI-nk0oZHrAbkeZ-Aes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.226.0/23
Signature Algorithm: sha256WithRSAEncryption
08:e5:6f:8c:75:c3:be:a6:19:db:a6:54:6a:38:2a:11:b7:d6:
aa:94:54:fb:5b:01:4e:b1:e6:96:cb:2d:da:00:6a:c9:91:cf:
6e:ec:54:2f:38:92:05:f5:ed:61:75:04:22:6a:16:49:4f:cd:
52:9d:80:28:a4:40:ea:0d:30:1a:d0:86:8f:9c:0d:c9:7e:73:
b9:52:13:31:e9:3c:3c:20:22:8d:74:11:bc:96:fd:ca:cc:08:
77:63:61:86:cc:6c:19:79:6c:22:d9:a2:40:89:5a:bf:f2:f0:
45:cb:de:9c:ac:64:28:d7:62:64:ef:20:bb:66:3a:8a:b9:9f:
a7:93:41:de:4e:cd:6f:ca:df:ff:e3:88:f4:60:2c:6d:b7:bb:
8d:80:e8:10:2c:ff:c4:2c:86:bd:93:30:c1:6f:ca:05:34:63:
af:58:cb:a0:8b:d3:de:38:ca:4c:3c:2a:c6:10:5f:77:8e:68:
7f:c5:9f:c0:bd:e1:61:13:77:b6:cd:05:01:e7:05:65:46:57:
62:66:a6:91:c4:f1:db:61:cd:41:7e:db:77:ad:33:0c:b3:71:
39:e3:4b:69:a1:db:de:67:70:00:05:94:47:3f:6a:96:87:3d:
bc:b9:d5:07:eb:f6:fb:d1:6a:a9:bf:e1:f2:52:19:03:68:49:
9e:86:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:02 2024 by rpki-client on console-ams.rpki-client.org