Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/xcoxUHi1R_ZL6xncRrVgGQBie70.roa
File: xcoxUHi1R_ZL6xncRrVgGQBie70.roa (raw, json)
Hash identifier: CUnuv6S5afqzUgsDqCcheUaDdkNjve2QU3drepULEBU=
Subject key identifier: C5:CA:31:50:78:B5:47:F6:4B:EB:19:DC:46:B5:60:19:00:62:7B:BD
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 01862CE8096DD9E564473A552C4A5339C861
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/xcoxUHi1R_ZL6xncRrVgGQBie70.roa
Signing time: Tue 07 Feb 2023 17:24:09 +0000
ROA not before: Tue 07 Feb 2023 17:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2639
IP address blocks: 31.186.226.0/24 maxlen: 24
31.186.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:e8:09:6d:d9:e5:64:47:3a:55:2c:4a:53:39:c8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Feb 7 17:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5ca315078b547f64beb19dc46b5601900627bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:b0:63:bc:70:36:7f:79:8f:8c:c8:d3:71:
f6:66:8d:58:01:01:9f:b2:76:58:90:a4:45:76:b3:
fd:4a:6e:82:3f:9e:19:be:25:0a:f9:c8:52:d4:d9:
68:7e:9a:0f:1f:b0:c7:5d:bb:6c:4d:6b:1d:0e:91:
bc:fb:b7:b4:fe:c5:e3:e6:4b:57:b7:88:19:5b:19:
d7:64:91:d7:0a:6d:e9:9a:5f:11:e8:5b:a1:80:39:
de:4e:81:06:70:35:75:20:7f:26:fc:11:d5:4d:2c:
dd:c7:f4:12:bf:ab:bb:17:15:d1:d5:7e:c1:88:87:
5d:ee:70:96:c1:17:23:26:82:ce:e4:0d:9d:70:2f:
6f:8e:9e:d3:41:03:e7:2e:62:d2:70:b7:ee:c5:52:
8b:81:00:dd:06:30:3b:2d:ab:0b:13:eb:46:4a:30:
b1:52:14:aa:2d:52:0c:44:6e:43:ab:65:a8:aa:52:
c7:ce:27:0c:47:f1:cd:9c:a3:b2:45:1e:3f:b9:7b:
19:3f:57:8d:62:ca:21:5d:f1:3e:8b:27:ec:19:65:
d6:a7:10:ab:63:ad:cf:60:d6:86:d6:de:36:c9:65:
82:8a:aa:83:74:64:c3:f1:39:82:f8:a9:75:85:9d:
56:03:9e:6d:6a:67:f1:2d:e7:8b:f0:45:65:49:fb:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:31:50:78:B5:47:F6:4B:EB:19:DC:46:B5:60:19:00:62:7B:BD
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/xcoxUHi1R_ZL6xncRrVgGQBie70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.226.0/24
31.186.243.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a0:d7:c3:99:a6:5b:c5:03:06:c3:88:5c:3d:b0:bf:9a:fb:
37:69:16:c2:ff:87:68:a4:7f:42:ef:f4:8f:eb:9e:30:35:c4:
d3:bb:f9:83:11:64:c1:da:9c:27:b5:1d:49:55:c8:ad:0d:6d:
86:c5:4d:50:e2:87:a7:b4:6b:be:50:f6:e1:ff:b5:e0:33:23:
05:86:16:af:ff:e8:d0:f8:ea:dc:c7:0f:9f:13:27:29:a8:20:
3a:f2:4f:4d:75:27:a1:6b:48:37:89:9c:3e:96:d9:5c:40:94:
a1:e4:67:8c:28:70:55:52:5a:a4:9c:09:8b:72:31:6b:fb:08:
6c:44:ab:82:47:d8:13:9a:be:65:5d:86:e3:33:d7:a4:61:72:
5a:b7:bc:c6:f4:6c:ed:61:10:04:b6:f5:46:df:d8:10:e1:ca:
44:0a:a5:4d:a0:d6:3d:e2:b1:6f:be:bd:39:09:8c:82:7d:42:
69:67:e2:d0:d9:10:71:7c:99:d0:fa:c3:90:68:5b:5c:31:3f:
55:d4:63:b0:80:97:9e:17:18:ac:14:03:0a:00:61:11:de:25:
ed:64:93:92:8e:39:cb:b4:b5:85:34:8e:d3:ae:56:b5:a6:2c:
f8:ea:da:03:17:56:db:c6:e3:8e:70:9b:3c:0c:51:24:90:c5:
7f:f4:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org