Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iuRz8mDX5-t0TG5TxL9c4XTNYqU.roa
File: iuRz8mDX5-t0TG5TxL9c4XTNYqU.roa (raw, json)
Hash identifier: h8j5VaV2MPjBXELyS+SN45PZVEaMVXg/HuDIw01Nn+M=
Subject key identifier: 8A:E4:73:F2:60:D7:E7:EB:74:4C:6E:53:C4:BF:5C:E1:74:CD:62:A5
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41CDC0F31B095E9C2487C6A27BA4CE
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iuRz8mDX5-t0TG5TxL9c4XTNYqU.roa
Signing time: Sun 01 Jan 2023 16:54:44 +0000
ROA not before: Sun 01 Jan 2023 16:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31207
IP address blocks: 188.208.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:cd:c0:f3:1b:09:5e:9c:24:87:c6:a2:7b:a4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ae473f260d7e7eb744c6e53c4bf5ce174cd62a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:c6:bb:04:b2:66:57:94:a3:95:a9:cc:ba:
b8:7a:57:d7:5b:a9:1f:b8:e0:a2:5a:95:a0:02:eb:
a0:8a:22:eb:54:4a:9d:d7:75:a8:03:7c:7b:02:46:
5c:52:5f:5b:af:c4:ca:11:c6:42:cd:e4:fe:45:ec:
7c:b6:31:cf:34:53:28:21:aa:cb:92:4f:f4:b5:3c:
57:f8:b5:64:e2:a5:a2:8d:d6:2b:42:06:f7:8f:f5:
90:d5:ea:96:30:f4:53:18:6d:cc:da:8f:42:18:42:
23:ab:4a:b2:bf:ac:44:d9:7e:55:88:f2:0f:e4:5e:
74:7c:a9:6c:68:e5:0c:fb:fa:b1:e2:1f:d6:26:e3:
9d:74:4e:64:27:2d:d7:0e:30:40:f4:b4:e0:73:bc:
83:e5:c3:4b:d9:db:ec:04:28:d4:1f:4e:e8:0f:e0:
b8:57:31:9c:34:6e:be:92:55:28:36:03:59:08:63:
05:16:33:a4:f0:7c:10:24:6d:ab:9d:73:2b:54:55:
0d:3c:91:51:01:96:7f:68:b1:00:0d:fe:aa:67:98:
38:65:b8:46:9a:71:37:48:3f:6d:c1:e4:b6:24:77:
4c:76:21:d4:b8:91:8f:10:4d:75:85:a8:61:ad:bd:
d5:80:eb:fa:18:be:1d:f6:fe:af:d9:d8:bd:20:49:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:73:F2:60:D7:E7:EB:74:4C:6E:53:C4:BF:5C:E1:74:CD:62:A5
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iuRz8mDX5-t0TG5TxL9c4XTNYqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7a:45:73:e5:4a:a1:8f:cc:0d:c6:fc:06:a2:d0:e7:2a:c3:
77:e1:85:48:2f:fb:fe:46:9b:05:a9:c8:d2:48:b5:7f:3b:24:
c0:09:67:ad:be:63:bc:15:19:3a:b3:af:09:d9:e7:80:a2:bf:
ea:2e:c4:84:f2:32:9d:cb:69:2a:2e:9b:29:3f:fa:c7:94:bb:
cd:75:79:f2:16:dc:ae:2a:ca:43:46:b8:19:cd:b3:7e:b1:7b:
27:93:e2:ec:8c:23:8b:74:91:cd:06:94:02:e5:e1:3f:da:a4:
79:f1:23:69:8a:e0:fd:1b:89:fb:30:37:42:98:42:fc:1d:d5:
ae:15:8f:7b:20:87:1c:d6:3b:38:b7:a3:bc:8a:55:37:7b:0e:
13:30:66:45:0f:09:f9:dc:bc:63:34:7b:6c:15:89:04:7f:b3:
42:57:6c:59:71:04:b1:96:b3:3f:1d:19:7a:ed:c8:9e:bd:e6:
22:27:83:06:76:0b:13:a3:14:fc:c2:b3:fa:25:70:7d:f5:70:
a5:31:01:67:a1:26:2e:16:8c:2d:7d:1b:d4:9a:92:0f:d3:29:
1d:91:37:11:09:96:a6:40:a9:e7:c5:0e:85:78:c9:11:a6:f1:
e6:f7:41:03:07:20:01:12:85:a0:76:23:01:f0:5e:e8:76:4a:
70:bd:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org