Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/uuBaGAANvQnd0AjkfExcXVA0394.roa
File: uuBaGAANvQnd0AjkfExcXVA0394.roa (raw, json)
Hash identifier: iZ4UNF53qRA6947rifVF60fpUaMrhVzVfrD2DHW8qJU=
Subject key identifier: BA:E0:5A:18:00:0D:BD:09:DD:D0:08:E4:7C:4C:5C:5D:50:34:DF:DE
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 0191B2B7E827C52230B784FC6C3EDD6A6CDD
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/uuBaGAANvQnd0AjkfExcXVA0394.roa
Signing time: Mon 02 Sep 2024 12:31:22 +0000
ROA not before: Mon 02 Sep 2024 12:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209279
IP address blocks: 31.41.35.0/24 maxlen: 24
2a12:3ec0::/48 maxlen: 48
2a12:3ec0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Sep 2024 12:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:b7:e8:27:c5:22:30:b7:84:fc:6c:3e:dd:6a:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Sep 2 12:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bae05a18000dbd09ddd008e47c4c5c5d5034dfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:65:d4:ff:a9:28:e8:4a:6a:e5:87:e4:d3:
85:eb:c5:dd:f1:20:fe:b4:d3:7d:3c:de:15:2d:76:
e7:71:74:1b:e1:4f:7c:fa:7c:d1:20:0a:00:77:be:
bd:ec:6b:88:92:df:b7:92:e7:e2:7a:a1:0c:3c:7a:
f1:51:40:c9:ae:2c:e0:24:7b:77:3e:81:35:da:ef:
e0:20:c6:b4:ad:32:83:27:77:0a:e1:37:92:c9:b0:
5b:78:60:b3:e2:e8:ef:3a:84:86:88:7e:1e:3c:f2:
c7:6d:65:bc:ed:36:4a:63:44:ca:c5:46:92:62:a0:
1e:92:7a:6e:07:ac:e2:ff:74:cd:6e:bd:fb:e6:ab:
b6:cd:d5:3c:f2:48:8f:9f:5c:d7:f3:83:0b:ba:ae:
56:f6:4e:a8:18:1d:c1:5c:fd:9f:fe:38:b3:dc:29:
26:8a:1b:9b:88:d9:08:d4:be:22:af:4c:64:8d:b9:
ee:2f:c4:79:42:50:c3:a8:f7:f3:19:ed:c6:70:e0:
dd:79:1c:ce:8f:a1:ba:ce:54:75:75:5a:98:80:3f:
d1:22:08:77:76:d3:a9:53:21:23:6e:8f:2d:19:0e:
dd:9a:56:cf:1e:3a:d3:13:06:9f:ba:62:6e:fe:35:
77:85:d4:b5:57:66:a4:52:50:d9:9c:e6:40:3c:76:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:5A:18:00:0D:BD:09:DD:D0:08:E4:7C:4C:5C:5D:50:34:DF:DE
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/uuBaGAANvQnd0AjkfExcXVA0394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.35.0/24
IPv6:
2a12:3ec0::/47
Signature Algorithm: sha256WithRSAEncryption
84:11:f7:a2:d8:ce:11:49:9d:28:2c:f1:c5:77:5c:ed:06:b3:
f0:8f:71:ad:cf:24:80:0c:cf:40:6d:ab:8d:9c:0a:55:ae:d2:
d9:a0:b2:0a:e4:de:42:de:8b:73:e0:87:12:f3:e6:6d:c1:28:
ce:9f:62:3f:65:3c:1a:1c:cc:9f:61:71:84:66:b4:1d:b7:82:
9a:8c:cc:a2:65:95:9c:d7:29:78:d7:c9:c5:60:85:f9:84:be:
f0:f1:5a:d3:15:6a:c9:32:5b:32:17:cb:f3:98:ba:b2:cf:98:
ed:da:33:ad:48:77:f8:14:ee:92:7d:3c:24:fc:41:0e:cc:e8:
8e:69:04:ec:cb:a1:4a:09:cd:6f:2e:4c:d2:32:83:38:c0:95:
19:75:1f:33:95:88:8d:0d:a0:f8:60:60:08:c6:3f:73:2a:6b:
5f:c0:7e:45:8f:52:4a:df:41:96:ef:ad:c5:46:1f:24:f4:65:
fd:7a:1e:74:0d:84:cc:a5:a5:0e:6c:83:7f:8e:5c:5e:02:51:
6e:e1:1f:d3:a4:0b:79:5d:d5:a2:78:b1:79:9a:20:85:63:b3:
08:b2:5c:72:07:41:ae:10:e2:da:2f:b6:76:fe:64:9c:c9:72:
25:96:86:12:a2:7c:22:35:73:a4:40:37:bd:7c:24:93:38:f7:
43:fc:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:52 2025 by rpki-client