Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/p8bRNHLDNASzSj1ACd7sH3TNPTA.roa
File: p8bRNHLDNASzSj1ACd7sH3TNPTA.roa (raw, json)
Hash identifier: Dbp0q+Zlk+o5ZfIScSlTVhocFY6r039PmVnzVlobldI=
Subject key identifier: A7:C6:D1:34:72:C3:34:04:B3:4A:3D:40:09:DE:EC:1F:74:CD:3D:30
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01919EE7E33EAD401838EBB0A94FC20F5E53
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/p8bRNHLDNASzSj1ACd7sH3TNPTA.roa
Signing time: Thu 29 Aug 2024 16:11:22 +0000
ROA not before: Thu 29 Aug 2024 16:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198934
IP address blocks: 31.31.88.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Aug 2024 22:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:e7:e3:3e:ad:40:18:38:eb:b0:a9:4f:c2:0f:5e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Aug 29 16:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7c6d13472c33404b34a3d4009deec1f74cd3d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:d3:9c:ae:b2:81:0a:8d:c0:80:f6:34:4d:
ed:32:9c:39:18:58:37:c0:57:09:67:21:18:3c:c4:
a3:ae:3b:21:05:88:6b:13:5b:c8:2f:5e:f8:9c:d0:
0c:58:48:68:6c:b3:1d:79:d9:9c:65:8d:e9:cb:e9:
35:07:2a:ed:d2:44:9f:fd:43:42:2f:05:3a:d9:fc:
72:e4:4a:f7:5d:15:7d:dd:ec:d3:71:2e:ea:73:7e:
05:01:c5:9b:8d:af:9c:96:97:fa:6a:d2:c8:60:c0:
6b:b1:7b:b9:c3:96:fc:3d:86:74:e8:fb:08:cb:83:
57:a3:b9:ca:88:f5:21:2e:50:be:8b:50:cd:e5:0c:
ff:22:0d:9c:ce:82:61:67:35:41:d9:37:48:76:04:
65:c2:f5:90:c6:2e:91:d7:da:a7:c4:4b:f3:d3:a7:
22:37:21:9a:ef:0c:1d:c8:94:e9:a2:dd:4a:9f:04:
bb:11:ab:4f:93:db:c1:18:71:87:c6:4c:5a:92:db:
8b:c8:a2:10:5b:14:ec:1c:5b:73:93:f0:c2:b5:05:
1d:6f:e2:08:44:63:55:35:02:cb:b1:fb:08:d1:d2:
81:52:d3:43:e1:55:94:fb:d2:88:b9:13:8f:c4:0a:
8a:63:ee:b9:89:12:c7:67:50:28:7e:03:99:69:a2:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:D1:34:72:C3:34:04:B3:4A:3D:40:09:DE:EC:1F:74:CD:3D:30
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/p8bRNHLDNASzSj1ACd7sH3TNPTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.88.0/23
Signature Algorithm: sha256WithRSAEncryption
52:2e:c9:fc:ad:c0:56:b6:5a:17:e8:fe:24:ce:26:b1:3f:ab:
8e:ea:cc:a8:2a:a9:42:9a:9a:b9:1a:d5:be:89:07:6e:39:17:
16:42:02:1f:bd:ee:7c:24:59:f9:fc:b6:b6:5c:6d:3a:e2:48:
2c:f3:0f:65:3c:f6:cc:88:4c:00:4f:37:f9:5b:9a:13:9f:bf:
6b:e3:6d:7e:8b:a2:f0:f3:d3:71:64:4c:ca:10:93:0e:cc:62:
ce:ce:d9:16:aa:22:3a:24:4d:4f:2e:06:58:e2:21:28:33:6b:
db:1b:84:23:93:6a:f2:b0:95:64:5d:3c:e2:6f:1c:94:e8:ac:
c6:d5:1d:fc:73:6a:b8:64:1c:93:3e:86:0b:03:16:30:94:77:
e3:e0:69:67:be:d7:44:2d:6f:2a:a8:38:e6:33:8e:e2:88:cb:
b2:f9:3e:97:1c:9e:78:57:63:99:ab:fc:83:41:ea:bb:19:8b:
15:a3:25:b5:6e:f0:3a:e6:11:1d:6e:8a:4f:a5:9a:63:2e:c9:
9d:92:d7:1d:55:27:aa:12:41:24:32:b4:87:df:d1:e4:df:04:
6c:0d:ae:4c:63:9c:4f:ac:23:0c:ba:ef:86:91:61:fd:fb:85:
4d:e0:b6:18:17:cd:19:7f:14:68:27:5e:cb:61:a5:e4:08:db:
21:5c:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 01:42:28 2024 by rpki-client on console-ams.rpki-client.org