Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/qHj1d87zNQBjocSJq-aT6hrC__Q.roa
File: qHj1d87zNQBjocSJq-aT6hrC__Q.roa (raw, json)
Hash identifier: nN4fEizO3Xzrm1YF/uUpX7uUsWiw71C8lRzq0RvRvP0=
Subject key identifier: A8:78:F5:77:CE:F3:35:00:63:A1:C4:89:AB:E6:93:EA:1A:C2:FF:F4
Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial: 018CC6B797D7D45FC9BF5B47CAD466FDF8F5
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/qHj1d87zNQBjocSJq-aT6hrC__Q.roa
Signing time: Mon 01 Jan 2024 20:29:29 +0000
ROA not before: Mon 01 Jan 2024 20:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209733
IP address blocks: 31.24.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 14:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:97:d7:d4:5f:c9:bf:5b:47:ca:d4:66:fd:f8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a878f577cef3350063a1c489abe693ea1ac2fff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:92:a6:ba:e9:a0:4e:d4:a9:7d:fd:3c:36:
47:f4:22:96:db:77:6c:49:8f:f3:37:15:e0:e1:fa:
ca:39:fe:f8:ac:2b:59:a4:67:b1:cd:72:99:d4:a9:
d7:30:90:16:06:ec:44:bf:00:8a:53:2f:07:bd:7a:
c4:db:f7:a8:06:0f:e8:3d:e6:07:f8:cb:d1:9e:e6:
cf:a6:21:4d:67:ac:af:60:2a:84:3e:45:16:b7:5c:
8f:39:66:2c:e0:e0:3b:23:ea:96:82:af:8c:f6:ce:
d5:53:cd:d2:2c:09:3c:89:2d:21:e5:1a:3c:ce:c1:
f8:6c:13:1c:44:54:78:0d:44:05:cc:b9:fe:87:d2:
9c:3c:aa:15:3a:10:0d:a8:71:9e:a8:83:3a:5c:04:
ad:49:1c:b0:c4:25:06:16:65:1a:2d:4a:1f:4b:04:
85:5b:f0:f1:5d:b1:e1:3c:aa:da:52:14:aa:da:e7:
a8:f1:42:9a:52:a9:0e:b7:fc:12:74:a2:be:53:3f:
a7:6d:db:fd:76:8f:f3:a2:bb:d9:df:47:82:12:20:
b3:46:76:a4:63:35:30:cc:1d:b9:1e:8e:a7:05:25:
1a:a9:e7:9c:a5:85:37:1f:b1:9e:df:ab:70:55:42:
93:21:d2:60:84:b3:48:84:f2:0a:51:14:80:c5:14:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:F5:77:CE:F3:35:00:63:A1:C4:89:AB:E6:93:EA:1A:C2:FF:F4
X509v3 Authority Key Identifier:
keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/qHj1d87zNQBjocSJq-aT6hrC__Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.252.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5d:1f:50:8f:ce:79:f2:6f:16:3e:4a:84:45:e9:39:43:d6:
3e:3c:4e:0e:e3:4a:e5:16:50:86:db:26:05:74:87:6d:e3:50:
b2:52:f4:16:91:91:0b:59:71:52:dc:ce:63:d5:c8:7c:09:d6:
77:b8:3c:48:a3:9c:67:1b:1d:38:4c:1e:47:3e:69:8a:f3:45:
72:c3:6d:b4:37:96:ce:c1:04:aa:30:c4:c9:1f:0a:c7:9e:2c:
05:a4:29:99:32:4a:85:ab:54:f0:4b:94:19:e7:26:99:0d:68:
38:71:7c:80:58:e7:36:63:a9:21:68:be:85:52:f0:96:fe:a4:
d9:96:96:55:7b:e0:4f:34:7e:8f:ec:2e:90:0f:5e:d4:75:f3:
aa:7f:0c:39:1a:be:fa:ba:2a:12:d7:ee:1a:93:9b:b5:f9:93:
b4:cc:52:40:39:f0:ac:54:26:b9:85:07:9d:0f:b5:0d:b8:42:
d0:75:c7:51:32:ac:2c:2e:24:8a:f6:82:d8:31:2c:7b:72:d4:
72:d4:8a:9f:17:59:f6:9c:d4:b9:4c:74:27:77:ad:61:69:50:
ae:c9:f3:75:82:b9:d5:5f:c1:ee:19:e9:48:0f:97:88:32:60:
4b:74:41:53:b3:3d:20:60:97:b9:fa:05:91:91:98:cc:b6:1a:
74:6d:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 17:52:09 2024 by rpki-client on console-fra.rpki-client.org