Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/2u2X3hIi6t3tAqycBkGO898bXME.roa
File: 2u2X3hIi6t3tAqycBkGO898bXME.roa (raw, json)
Hash identifier: WJF6ZtFsVWbevmEEH+CxVqAw1CN8irBTe8PFvuHaPmI=
Subject key identifier: DA:ED:97:DE:12:22:EA:DD:ED:02:AC:9C:06:41:8E:F3:DF:1B:5C:C1
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 018FAAD5164449175F008EF97F1C9726C9C0
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/2u2X3hIi6t3tAqycBkGO898bXME.roa
Signing time: Fri 24 May 2024 13:40:42 +0000
ROA not before: Fri 24 May 2024 13:40:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 31.210.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 05:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:d5:16:44:49:17:5f:00:8e:f9:7f:1c:97:26:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: May 24 13:40:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daed97de1222eadded02ac9c06418ef3df1b5cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:d4:03:86:a4:2d:e3:3e:ce:44:30:04:30:
58:6c:4d:ff:8e:92:70:c6:3c:72:20:a6:10:6e:7b:
70:80:27:3c:4b:b8:d2:c6:c6:a8:20:a8:8a:a6:27:
e2:94:9d:ea:5a:46:d6:9b:f9:e5:01:99:da:ea:db:
88:35:b9:14:9f:05:82:c6:a2:1d:37:13:3d:03:77:
42:9b:89:15:07:06:7a:b1:f9:21:f2:21:11:e6:e6:
af:31:45:74:68:56:08:6d:ed:16:46:4d:21:94:76:
76:10:6f:c6:40:c9:37:d1:dc:92:36:b7:32:f7:19:
99:c9:02:a1:c1:19:69:1e:73:44:3b:55:11:e7:b0:
a9:c7:fb:49:ae:05:72:8d:b8:12:f0:9c:f0:71:a1:
18:6b:b0:88:25:0e:b3:6b:82:d6:c2:a8:17:f0:96:
09:99:8c:31:6d:28:85:65:7b:60:d4:bd:ed:02:ec:
4b:b8:7e:eb:98:ac:8b:4a:7c:77:e1:8b:17:01:ae:
0c:63:b0:c6:e3:b9:dc:ea:b2:cd:eb:17:26:c3:fc:
0c:31:a0:58:c8:f0:a4:8d:29:8a:e5:94:b2:4e:67:
61:c7:c7:f6:23:6a:91:b5:cc:d9:9d:9b:92:66:25:
f5:66:6f:52:db:c7:dc:04:95:6e:bd:60:fc:af:20:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:ED:97:DE:12:22:EA:DD:ED:02:AC:9C:06:41:8E:F3:DF:1B:5C:C1
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/2u2X3hIi6t3tAqycBkGO898bXME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.22.0/23
Signature Algorithm: sha256WithRSAEncryption
45:4e:6f:b5:cc:1f:7b:20:ef:1e:68:02:07:07:08:7c:a0:96:
9b:f5:d5:58:b2:d8:a1:fa:6c:71:20:5e:fa:07:26:98:a1:11:
75:e2:58:bf:2e:7f:2d:80:13:bd:74:12:79:d3:eb:03:98:f7:
d9:3a:f5:84:5c:a6:de:27:82:9c:34:eb:aa:49:27:83:b7:be:
d4:6d:15:35:15:84:87:45:9b:97:b8:a8:39:ca:75:ff:3d:44:
b4:d9:f2:a4:9e:b5:7a:b1:69:95:c6:c8:53:20:2b:f5:01:9f:
19:e5:4e:9c:77:3d:2c:45:38:20:f4:a7:f4:3d:97:7a:11:92:
91:0f:55:71:b3:5c:77:20:b8:4f:13:c0:05:42:7b:68:20:45:
ff:9b:70:95:f0:42:e1:c1:da:ce:ba:d1:c8:06:49:3d:9a:d9:
af:7d:06:3d:83:13:1e:70:ed:c5:13:9f:73:b5:fe:eb:2a:92:
b3:2d:ba:11:ce:42:1a:89:5b:7a:79:c0:0f:93:96:45:cd:0c:
27:2d:3c:3c:98:d1:a7:3c:2c:07:92:b1:d1:04:f3:b2:90:d3:
53:4a:0f:17:f4:b8:51:ee:1c:dc:aa:72:82:b1:be:0e:e5:f5:
87:1b:2c:a0:73:b7:4a:4e:8e:9b:62:82:ba:b1:5b:e3:47:20:
a4:63:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org