Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/hp3KqcuoGqvE6issrD5pd3JMRXk.roa
File: hp3KqcuoGqvE6issrD5pd3JMRXk.roa (raw, json)
Hash identifier: I7ALk5hnwSdmoPi33rRkRU27Ha39ahXjre4jM6dSv08=
Subject key identifier: 86:9D:CA:A9:CB:A8:1A:AB:C4:EA:2B:2C:AC:3E:69:77:72:4C:45:79
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 018E5C1504CC686CF8C93A01DEC0790E98C8
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/hp3KqcuoGqvE6issrD5pd3JMRXk.roa
Signing time: Wed 20 Mar 2024 13:37:45 +0000
ROA not before: Wed 20 Mar 2024 13:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60798
IP address blocks: 31.210.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 10:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:15:04:cc:68:6c:f8:c9:3a:01:de:c0:79:0e:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Mar 20 13:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=869dcaa9cba81aabc4ea2b2cac3e6977724c4579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:bd:bb:1f:38:e6:7b:8c:a1:16:e6:bd:f5:
92:ee:e9:7b:06:30:ec:65:88:69:c9:c4:39:a8:cf:
b3:09:38:f4:74:72:e0:b6:28:16:39:95:86:58:88:
cc:60:6c:8b:9f:30:84:7b:37:37:62:7f:15:ae:6a:
b8:c1:e4:56:9f:3f:dc:0a:34:97:8a:cd:ac:44:f8:
c3:45:f1:9f:c6:0f:b8:a3:bc:d2:bf:32:40:ef:27:
b8:ae:02:b3:c8:12:4b:06:79:2b:25:1d:1c:43:26:
ac:ea:d8:b9:27:6d:08:02:3c:83:f8:94:99:16:3f:
ac:3a:3f:80:7c:19:51:07:0a:14:19:02:5b:ec:1e:
e2:44:8f:f0:15:96:66:5a:91:e4:32:63:a1:27:de:
d9:d5:53:ee:cc:12:ec:fb:3e:f5:20:f3:94:9d:e8:
e3:87:9a:97:1f:d8:01:22:37:ee:5e:8b:53:ab:e2:
a3:46:d7:45:33:00:b3:96:56:76:57:f5:c2:d3:b8:
87:cc:f4:3e:2a:e2:3d:cb:bf:2d:24:a9:54:f0:77:
b4:34:b4:3a:fa:12:3e:00:17:6a:fc:e1:27:f1:96:
aa:0a:d9:0a:47:5b:2c:02:21:dd:3c:e8:00:5e:e1:
d8:96:6f:ac:98:56:63:2d:20:15:2b:fc:38:b9:13:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:CA:A9:CB:A8:1A:AB:C4:EA:2B:2C:AC:3E:69:77:72:4C:45:79
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/hp3KqcuoGqvE6issrD5pd3JMRXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2b:6c:a3:88:d5:0f:91:dc:5a:96:9d:22:f0:1e:07:b5:18:
3e:9e:14:e4:8d:9a:7d:50:cd:e1:8d:9b:cb:13:18:39:8c:bd:
00:df:16:4d:31:91:8c:e8:64:a8:fd:4b:f0:3d:e3:17:ab:bc:
c5:6d:16:ac:7b:55:00:d2:4f:29:55:79:6e:a2:66:2c:4b:df:
55:aa:f6:6a:58:9b:fe:73:7b:6c:43:83:7d:20:42:b8:76:6b:
4d:25:fe:ed:d8:10:ec:54:20:f9:aa:84:6d:5c:d5:dc:59:08:
35:1e:ac:ff:f3:8c:0d:63:d6:a9:7c:f0:86:0c:ef:e3:8c:34:
90:f5:ec:6a:83:3f:04:6f:56:35:e4:ad:f0:96:85:bf:73:c9:
54:90:5a:56:9b:25:f6:9a:df:88:b7:ef:04:9e:ee:c9:80:7f:
06:2f:49:a5:70:ad:17:4d:a0:8a:44:c0:9e:da:e4:08:7c:d9:
65:20:5d:a6:63:e2:4c:e4:a7:89:b9:86:ef:c1:44:4c:46:11:
58:89:03:5c:e8:c9:9e:99:94:51:d2:fe:f2:f3:f6:1c:df:12:
2d:aa:83:b4:7d:94:3d:cd:a3:e8:ef:6d:c9:36:89:c7:17:87:
c9:00:87:fd:d3:f5:cf:22:fe:33:51:59:9e:c4:1c:10:91:4d:
cc:04:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:15 2025 by rpki-client