Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/oJQKn77Oa9a6UP4nJhFLYcE5D10.roa
File: oJQKn77Oa9a6UP4nJhFLYcE5D10.roa (raw, json)
Hash identifier: cm3WBX0eJCowZIYiiPp88mytv5pzQlo+M5iz0GZDJvY=
Subject key identifier: A0:94:0A:9F:BE:CE:6B:D6:BA:50:FE:27:26:11:4B:61:C1:39:0F:5D
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 0187E690582DD670C20EEA3524EBC26F9F99
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/oJQKn77Oa9a6UP4nJhFLYcE5D10.roa
Signing time: Thu 04 May 2023 11:40:32 +0000
ROA not before: Thu 04 May 2023 11:40:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 31.42.129.0/24 maxlen: 24
31.42.128.0/24 maxlen: 24
31.42.144.0/24 maxlen: 24
31.42.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 19:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:90:58:2d:d6:70:c2:0e:ea:35:24:eb:c2:6f:9f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: May 4 11:40:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0940a9fbece6bd6ba50fe2726114b61c1390f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:f9:45:70:cb:a4:84:7b:44:2a:70:61:bc:
d5:32:04:ce:c8:42:55:1b:0b:de:02:9d:c0:98:0b:
2e:9e:a9:8a:f7:00:95:07:f8:94:60:2c:56:78:2e:
9b:b1:c5:34:10:17:8f:c2:37:b0:65:99:e8:d6:a6:
3c:72:0e:b3:46:d5:17:1e:15:60:03:91:79:e4:c4:
b3:1c:dc:8d:fb:ab:69:29:42:27:0e:79:eb:6e:c6:
9b:f5:78:02:1b:65:0a:50:bb:81:c8:cb:71:4d:bf:
36:f6:b0:e9:33:99:4b:7e:0e:d0:6f:9b:82:b5:bb:
5b:c4:ad:83:2f:67:44:a0:e7:ea:f1:a2:f6:eb:cd:
c0:2f:13:85:c2:56:cf:15:7b:9e:36:3c:c1:ed:86:
9a:59:c4:e8:8a:58:a8:b2:f7:a8:57:a4:91:61:e8:
52:c8:59:dc:66:37:a8:b3:59:18:42:4a:d1:d3:6c:
c8:b7:90:a8:b4:6d:a0:b4:ba:0d:b0:57:26:5d:35:
84:01:bb:29:4a:a6:61:69:22:8b:f6:e8:c0:91:2e:
18:43:7d:a7:88:3d:6c:a9:d1:a0:7c:e0:1b:90:41:
7e:5d:d1:8f:e3:ba:8f:cd:fe:bb:4a:b0:98:9d:35:
db:c4:60:c0:ed:e8:67:1a:e7:d7:bc:a8:b7:66:f7:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:0A:9F:BE:CE:6B:D6:BA:50:FE:27:26:11:4B:61:C1:39:0F:5D
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/oJQKn77Oa9a6UP4nJhFLYcE5D10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/23
31.42.144.0/23
Signature Algorithm: sha256WithRSAEncryption
21:16:3e:db:d1:ca:2b:87:0a:50:c6:1b:b2:c5:ee:31:e2:26:
ae:fa:c5:d9:95:96:1d:89:81:f1:b6:36:a0:2f:26:7a:d2:12:
62:64:8f:2c:3c:e2:81:6b:3d:5c:77:49:e2:a4:c2:10:99:3e:
ff:6b:bb:68:4b:2c:5f:3e:a0:fa:5c:75:92:64:e9:dc:7f:dd:
2b:44:ea:89:e9:fb:0a:b9:c2:a6:49:17:08:24:1f:e4:a9:b0:
f4:22:4b:64:8d:d1:10:51:d3:ae:d3:4f:6c:9b:bf:49:17:18:
d9:33:c3:c4:a9:18:e2:49:04:94:ef:34:ee:44:96:5a:9f:e5:
cc:50:07:dc:d1:b0:6e:f7:cd:78:e6:24:19:ee:c6:4e:21:b4:
e8:6a:53:4f:6c:b9:38:ae:8e:00:f8:7e:3d:92:3a:b7:ef:7d:
02:2a:ba:07:3d:9f:fa:bd:10:22:17:ff:3d:41:92:b2:e5:62:
ce:09:20:f5:cd:01:a0:d6:04:a5:b6:36:af:d5:3d:4d:bc:6b:
ba:9e:65:fd:16:33:16:a8:a5:11:d1:37:45:a6:b3:2e:70:6e:
47:47:44:4b:9f:ef:38:f2:f8:68:d2:c7:58:fd:67:ed:f9:76:
8b:6b:76:29:7d:f3:63:df:a6:0e:39:2e:0a:50:b8:dd:1f:4c:
18:19:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:48 2024 by rpki-client on console-ams.rpki-client.org