Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/1mpdYh5dXzrq-aq3FakBLWzJEXA.roa
File: 1mpdYh5dXzrq-aq3FakBLWzJEXA.roa (raw, json)
Hash identifier: NOTVtS/sev5gC/bCElWdVhfeHcWhbEYOXdtr+pgbYls=
Subject key identifier: D6:6A:5D:62:1E:5D:5F:3A:EA:F9:AA:B7:15:A9:01:2D:6C:C9:11:70
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 018698A2B5E46C0B3167642BB373788BB5E1
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/1mpdYh5dXzrq-aq3FakBLWzJEXA.roa
Signing time: Tue 28 Feb 2023 15:27:25 +0000
ROA not before: Tue 28 Feb 2023 15:27:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 193.31.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 15:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:a2:b5:e4:6c:0b:31:67:64:2b:b3:73:78:8b:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Feb 28 15:27:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d66a5d621e5d5f3aeaf9aab715a9012d6cc91170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:df:5c:2e:7a:08:07:35:65:65:a1:77:37:
0f:e3:97:03:93:ab:0e:3a:64:a3:d8:a0:33:45:59:
2a:6a:1a:c0:ff:43:27:39:5a:f4:0e:05:d4:56:c0:
33:83:5c:26:6b:d2:40:ef:8a:0c:0f:83:22:4d:ff:
dd:72:bc:29:41:4d:85:3f:67:e3:e6:03:6c:46:9f:
4f:1d:ee:4f:95:dc:e7:e5:a0:4f:32:9e:c6:f1:f4:
b9:c6:83:b2:8b:42:dd:a5:83:16:a9:7a:62:36:b2:
32:fd:e3:4e:32:2b:1b:96:24:b6:0b:6f:80:9c:f9:
a7:f0:d4:c0:ec:0e:2d:18:ec:6b:97:b8:63:35:f0:
20:a0:55:28:58:23:86:38:7d:64:2c:ed:f7:cf:d4:
42:b8:2b:00:d4:53:a1:b8:cf:46:06:ba:59:e7:f1:
b3:c8:5d:ee:fa:c1:a6:ea:4c:a1:d7:58:24:4e:e9:
7c:94:78:18:5e:ca:07:10:c2:ed:40:63:0d:2e:b3:
ad:7f:4a:ae:16:5b:8b:f9:95:b7:c1:55:a5:06:dc:
36:a0:ff:16:45:64:2f:dc:09:8f:31:80:2c:95:6a:
2c:b3:5e:50:57:a0:e1:4f:ec:23:7b:81:dc:a7:e2:
fd:f8:03:5b:1e:fe:60:6d:35:48:7c:38:60:a1:7b:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6A:5D:62:1E:5D:5F:3A:EA:F9:AA:B7:15:A9:01:2D:6C:C9:11:70
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/1mpdYh5dXzrq-aq3FakBLWzJEXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a4:2c:b2:30:34:bc:f6:99:89:47:83:56:1a:13:6d:24:27:
f6:6e:9c:d1:6c:80:e3:52:15:35:67:d2:4c:ff:26:ac:bb:39:
8f:79:29:30:cf:5a:3e:6d:50:c6:2e:c7:f8:ab:ca:a4:ae:96:
8d:82:08:1f:50:4e:5d:f9:30:49:e2:16:24:7e:f6:a8:4c:c5:
73:b2:9e:08:79:18:90:3b:82:74:d2:7d:27:4d:29:ca:1b:2b:
6e:74:e1:6b:4b:57:88:3e:08:5b:7f:94:c1:9a:4e:38:4e:2c:
e3:cf:91:2f:9f:69:c1:e1:b7:31:e0:e9:62:26:fc:28:22:93:
a4:75:30:38:10:ee:21:6d:80:02:6c:12:d4:d2:a3:22:cf:a1:
2a:42:4c:ff:d2:b8:a2:c3:4e:91:16:26:7f:1b:4c:d9:57:98:
91:c6:d5:45:e7:74:b3:2f:36:93:d4:d0:0a:48:4d:b3:cf:96:
62:f2:2b:25:11:d1:c0:1f:14:b8:84:f5:dc:8e:bc:e2:f7:86:
5b:6c:43:ae:35:32:1b:34:2f:1c:39:50:aa:9a:e5:4e:1e:e4:
0b:f2:8a:6f:9b:c4:d1:f5:c6:56:2f:5c:8d:e3:5e:dd:aa:69:
54:3c:bb:28:26:6f:fa:5f:2c:b0:b6:7a:9c:18:01:ab:ed:a0:
bc:e5:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org