Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/r1UP4laCvFs-v_aDWXndmblx3kM.roa
File: r1UP4laCvFs-v_aDWXndmblx3kM.roa (raw, json)
Hash identifier: YnaauXNO+vfUmyefz+sogfCkp91HJd2ukvpXx6T4We0=
Subject key identifier: AF:55:0F:E2:56:82:BC:5B:3E:BF:F6:83:59:79:DD:99:B9:71:DE:43
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018722DFAA41D371C60803BCABDD81E7BEAE
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/r1UP4laCvFs-v_aDWXndmblx3kM.roa
Signing time: Mon 27 Mar 2023 11:41:36 +0000
ROA not before: Mon 27 Mar 2023 11:41:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42109
IP address blocks: 31.7.164.0/24 maxlen: 24
31.7.161.0/24 maxlen: 24
31.7.163.0/24 maxlen: 24
31.7.160.0/21 maxlen: 21
31.7.160.0/24 maxlen: 24
31.7.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 13:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:df:aa:41:d3:71:c6:08:03:bc:ab:dd:81:e7:be:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 11:41:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af550fe25682bc5b3ebff6835979dd99b971de43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:1e:a2:8c:83:b6:38:f7:68:ea:22:db:ff:
f8:27:29:e5:e8:e3:fc:ae:5e:df:6b:76:c3:c4:08:
ed:15:f7:e6:ad:b7:59:ed:cd:39:b2:08:51:82:b4:
7c:19:37:60:7d:6d:20:26:5b:9a:01:89:73:d7:6b:
77:29:92:b6:62:8e:37:3b:81:ea:e8:95:01:ed:0d:
48:e3:ff:8e:67:59:40:8b:90:02:cc:89:d5:4e:1f:
88:2d:e7:33:3c:f3:72:a0:24:f2:99:6c:59:b7:39:
c0:10:77:69:58:8f:bd:9e:7d:db:b3:ba:a0:30:d8:
b5:cc:4b:d2:aa:d9:62:6f:64:86:91:bf:ba:24:0f:
cb:32:61:a7:19:f9:96:f6:34:e3:41:60:5a:6f:0a:
48:19:99:2e:b0:aa:9e:7d:8e:a1:00:7a:2d:00:ba:
c5:d0:f8:40:54:25:69:bc:11:d8:c8:56:69:6c:9a:
fb:f8:07:e2:24:ff:76:41:67:17:f2:96:5b:aa:67:
da:61:c1:0a:d2:ad:e6:ae:bb:90:95:e2:64:a0:8b:
8d:fa:99:fd:eb:d7:d7:6f:5c:94:ea:97:1a:22:0a:
71:9e:2a:b9:e5:7e:aa:91:97:f2:49:7c:5c:c9:43:
fa:b4:e3:c5:26:2e:b3:a3:8a:ac:74:a2:76:fd:b0:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:0F:E2:56:82:BC:5B:3E:BF:F6:83:59:79:DD:99:B9:71:DE:43
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/r1UP4laCvFs-v_aDWXndmblx3kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.160.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:18:d2:79:eb:83:9a:25:47:57:c3:f1:41:b9:a1:ef:24:9a:
39:c4:41:dd:b8:b4:98:8f:5f:01:98:14:ef:02:a0:fd:03:11:
14:9f:60:7c:7c:9d:1e:7d:47:de:c0:4f:64:39:88:02:10:ce:
99:d3:6a:b7:7e:6b:87:56:fc:24:1a:a1:ac:f1:3d:b0:61:a8:
74:8d:83:a3:85:cf:68:af:ca:d9:c3:61:9d:f9:79:0d:1b:2b:
9d:86:3b:1e:4b:7e:cb:d3:c7:d3:31:ac:20:5f:fa:4e:89:36:
0e:e7:07:4e:58:ce:4d:08:ee:7c:d0:f3:3d:11:d2:ba:83:da:
32:d0:0d:70:96:fa:76:2e:86:7c:5b:62:9d:70:27:dc:f1:42:
25:e5:82:9e:89:84:73:c0:52:23:f3:93:dc:c0:a3:0e:be:f9:
fc:e7:d6:2a:17:6d:eb:05:51:d5:1d:1d:07:aa:20:e0:b2:ea:
16:b5:3f:77:a3:43:cb:c4:67:3b:bf:6b:72:b3:33:c2:f8:46:
ad:a9:c2:35:10:ec:0b:e9:b6:3a:87:9a:d7:6c:65:0e:de:fd:
3b:df:22:0d:7e:02:00:7d:e2:38:9e:34:35:1d:d4:57:0d:91:
53:51:cd:d4:3b:58:75:a9:be:da:7a:92:eb:d8:4c:1c:6e:7c:
aa:08:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org