Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/5CmyuuL5G1PwcY7N18RfJobhIc0.roa
File: 5CmyuuL5G1PwcY7N18RfJobhIc0.roa (raw, json)
Hash identifier: +ev3Qpd1eS3RfMJ7RPawhKA+tTUYumb99lYdgaehy2Q=
Subject key identifier: E4:29:B2:BA:E2:F9:1B:53:F0:71:8E:CD:D7:C4:5F:26:86:E1:21:CD
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01857082D42F77F36E83B370DBEFCA0E8451
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/5CmyuuL5G1PwcY7N18RfJobhIc0.roa
Signing time: Mon 02 Jan 2023 03:25:00 +0000
ROA not before: Mon 02 Jan 2023 03:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 31.193.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 00:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:d4:2f:77:f3:6e:83:b3:70:db:ef:ca:0e:84:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jan 2 03:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e429b2bae2f91b53f0718ecdd7c45f2686e121cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:bf:f8:e4:23:4d:45:4a:4d:7b:9b:33:d5:
2e:49:94:db:88:79:f2:2f:fd:b2:76:1a:a3:ab:7e:
ed:93:c6:82:dd:7a:7b:dc:9e:b8:79:72:04:aa:22:
b0:80:20:83:1d:c8:01:b1:4a:66:b6:fc:80:3e:2d:
71:ac:58:b9:c0:cb:15:da:8e:31:f9:b7:ca:28:80:
5a:3d:2a:76:66:98:7e:df:4e:6f:2a:ae:2a:33:a6:
3d:5e:cc:cf:a0:4d:c0:9d:11:ea:f8:08:f0:db:62:
cc:97:3a:13:ce:42:d4:ce:6f:0d:fa:f3:4d:23:0c:
ff:ec:2f:e7:cd:2b:9d:65:cd:59:c2:f5:47:25:74:
5f:ff:1a:60:d6:a5:96:e9:b8:f9:58:71:44:1d:ac:
f1:a5:13:ce:55:7b:d8:e5:07:bf:66:b6:59:48:04:
8e:71:c3:77:41:e6:42:29:e6:12:e0:24:54:c5:b3:
2e:d4:07:03:84:91:f4:c1:03:26:93:aa:a2:01:a4:
db:d1:f5:2f:da:b0:19:6c:43:0c:cd:1c:3f:37:ca:
91:66:b4:95:b5:6e:41:d2:91:7d:a8:fb:f4:85:9e:
a5:80:90:45:fb:a1:66:1a:92:c7:45:74:cf:df:21:
56:59:fc:0e:ab:fe:0a:ba:fd:86:ab:70:af:a0:7b:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:B2:BA:E2:F9:1B:53:F0:71:8E:CD:D7:C4:5F:26:86:E1:21:CD
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/5CmyuuL5G1PwcY7N18RfJobhIc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:0a:7e:77:76:f6:54:4b:22:9e:42:39:68:80:76:bd:5b:b2:
a6:18:5d:53:1d:bc:23:16:0b:15:94:13:24:35:a8:7d:3c:9a:
79:03:70:05:08:d8:f3:88:37:37:e2:5c:ba:4c:37:d7:21:e0:
29:c0:23:7c:2c:09:16:d8:1a:82:e2:0f:f7:3b:02:c2:03:e1:
a4:3f:95:96:ce:94:2b:81:25:aa:ba:ae:40:78:ad:29:5c:1d:
1f:1e:85:d7:99:db:f9:bd:71:a3:60:fb:4c:86:4a:6f:48:2c:
57:52:74:82:13:00:57:96:9b:15:d4:d5:84:82:ee:01:33:30:
fe:32:46:a9:91:3d:be:e4:48:dc:d3:0f:cc:f1:d4:6c:e3:d1:
6a:47:16:57:71:56:63:6a:9d:02:62:32:64:1c:7d:9c:6d:09:
b2:ba:54:8b:5d:72:54:a5:81:52:94:e2:70:cd:e1:2d:c1:58:
5f:0f:4b:b4:da:fa:04:14:21:50:ba:01:2d:71:a6:8f:7b:4d:
6f:ca:ae:5f:cf:d8:b2:a2:72:b3:a6:9d:30:87:39:ad:58:92:
bc:f5:d4:ee:ca:d6:ac:ea:98:01:ac:e0:bf:9d:7a:6e:df:48:
1f:04:87:cb:84:99:09:23:8f:ac:a8:37:02:ae:25:ec:8a:5e:
02:76:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org