Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/qeOFN78UlVCjqg1GUldN4Tzk7dU.roa
File: qeOFN78UlVCjqg1GUldN4Tzk7dU.roa (raw, json)
Hash identifier: 1nsRE2hUSyaMkD1jYCD929Ak8a/oyuTctcFi1evOzg8=
Subject key identifier: A9:E3:85:37:BF:14:95:50:A3:AA:0D:46:52:57:4D:E1:3C:E4:ED:D5
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01856EC2381F2B66B2D2A2E04B2E43C358EB
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/qeOFN78UlVCjqg1GUldN4Tzk7dU.roa
Signing time: Sun 01 Jan 2023 19:15:00 +0000
ROA not before: Sun 01 Jan 2023 19:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209127
IP address blocks: 31.192.211.0/24 maxlen: 24
2a03:2100:31::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:38:1f:2b:66:b2:d2:a2:e0:4b:2e:43:c3:58:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 19:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9e38537bf149550a3aa0d4652574de13ce4edd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:a9:45:a4:71:d1:fb:f9:3e:55:ea:8d:54:
75:19:5f:c3:b0:1b:d2:c2:d8:3e:c9:c8:fc:5a:9e:
c5:fd:c5:2b:d1:d8:17:55:0e:9f:e8:2d:1d:2d:60:
75:6c:31:e4:a0:98:5f:bc:74:21:be:d1:63:dc:62:
84:db:45:db:84:74:5f:7a:07:b6:ed:59:25:53:0b:
dd:3b:24:6c:74:bf:1c:a3:3d:7c:30:cc:29:69:45:
41:77:11:d1:d0:50:03:9c:96:dc:ca:29:e7:37:ef:
c6:da:3a:0e:2d:bf:19:c7:b4:b1:98:6f:36:58:b2:
35:41:f8:fe:8d:18:a4:1e:ff:a2:07:61:fb:f4:19:
44:d1:59:a4:55:c7:8a:11:78:b3:78:fd:47:38:f0:
49:5a:7c:a0:8d:03:dd:51:f3:57:98:42:7f:0d:c5:
82:fc:1f:4c:ea:07:94:61:f1:da:98:11:6e:df:e9:
d3:34:66:27:dc:0c:87:c0:83:ff:ec:92:56:af:9e:
57:00:ec:57:04:90:2f:69:9c:f7:1c:fc:41:52:87:
3a:32:0d:fe:35:ea:f5:02:02:f6:73:c6:ae:24:42:
40:27:a3:59:ad:75:31:1d:c0:2f:d9:74:95:b2:66:
57:72:c1:c4:ff:68:27:79:7d:6d:8c:45:96:26:3c:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E3:85:37:BF:14:95:50:A3:AA:0D:46:52:57:4D:E1:3C:E4:ED:D5
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/qeOFN78UlVCjqg1GUldN4Tzk7dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.211.0/24
IPv6:
2a03:2100:31::/48
Signature Algorithm: sha256WithRSAEncryption
4d:14:5d:a0:e1:84:1a:bd:a5:00:1e:f7:60:4d:32:ac:e1:ee:
66:aa:1d:67:31:5a:a1:7f:23:d0:94:c3:c4:74:73:bb:88:d4:
54:39:91:14:95:2d:b8:35:e5:9b:e5:ea:ae:72:57:d4:ed:c7:
12:f6:33:74:91:37:36:b4:ca:51:79:53:49:cd:ba:8c:d2:57:
e3:93:2d:78:46:b2:06:1a:52:0c:74:f8:1e:bd:31:d5:11:df:
79:d3:b0:14:3f:fa:91:32:76:fe:ec:a1:86:ab:58:23:e3:bb:
34:36:af:bc:92:2d:30:9e:e8:93:23:7b:04:15:49:3b:98:4b:
3d:32:8f:34:e4:5b:b6:8f:be:83:74:8f:d5:c7:cf:5b:08:b9:
7e:83:6d:25:2b:a2:64:c1:49:4e:de:3b:48:31:9e:b2:e9:00:
90:82:41:06:1d:3d:0d:65:65:03:4e:6d:e9:63:2a:27:3f:a6:
28:2e:f1:1c:68:ae:95:f8:85:88:3c:d8:af:26:a0:fb:fa:b8:
eb:da:4b:91:e2:0c:9a:e5:42:f9:4c:29:cd:dc:12:97:74:46:
91:c6:5e:43:d3:63:7f:ca:e3:ab:34:6b:fd:27:ca:5f:7f:7e:
31:6f:45:c4:8b:37:4c:af:78:8a:d0:f3:bf:3d:da:76:55:da:
06:53:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org