Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/3rJPz4GgILlzwz9u2UqzeRtLSEg.roa
File: 3rJPz4GgILlzwz9u2UqzeRtLSEg.roa (raw, json)
Hash identifier: MVbvlTRJMlRraQNU6TM95G9dnwQj29U/hKD2kTQ6zUg=
Subject key identifier: DE:B2:4F:CF:81:A0:20:B9:73:C3:3F:6E:D9:4A:B3:79:1B:4B:48:48
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 0188C344C669AA029B4062E8730A470CEE56
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/3rJPz4GgILlzwz9u2UqzeRtLSEg.roa
Signing time: Fri 16 Jun 2023 08:14:04 +0000
ROA not before: Fri 16 Jun 2023 08:14:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 147.189.163.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 06:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:44:c6:69:aa:02:9b:40:62:e8:73:0a:47:0c:ee:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jun 16 08:14:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deb24fcf81a020b973c33f6ed94ab3791b4b4848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:6c:8e:af:83:35:59:e6:ce:b0:17:03:9f:
64:d9:c7:c7:2b:6a:55:85:eb:ab:f5:f5:29:b5:1b:
8f:1f:96:cb:54:3c:30:e5:4b:a7:2d:1a:db:e7:62:
6f:83:a0:6b:a6:51:b2:1d:a0:6a:29:7a:69:6f:57:
74:f7:a6:73:9d:ff:0f:00:b1:e5:a6:f4:43:f2:d4:
a1:84:cf:1a:cf:a1:09:6c:bf:82:4e:0d:7b:cf:6d:
81:43:51:8e:b9:6d:dc:68:75:74:02:19:3d:67:d3:
23:65:f4:fb:21:80:e5:a9:af:e3:19:4c:d3:f1:27:
70:a9:0b:7a:09:44:eb:af:6c:be:0d:03:89:4f:af:
08:be:bf:2c:b9:24:8d:34:06:25:1a:f9:9e:c0:ee:
70:b8:f4:8a:aa:10:7d:46:a4:78:f4:bf:a8:cb:da:
7a:3e:2d:c3:9d:24:a6:3c:10:8a:27:01:10:41:6f:
98:e0:16:c6:fb:12:f9:8b:08:f1:59:b7:6d:98:c9:
e8:ff:65:c1:ca:fe:6d:fb:74:df:fd:01:eb:af:f7:
e0:b4:6c:9f:75:e2:81:70:ff:f4:9b:a6:48:8f:1b:
c5:0e:2d:33:a1:cf:be:b5:ae:3e:bf:51:37:84:01:
7e:33:76:03:90:ec:ee:16:8b:1b:8b:a0:8e:22:52:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:4F:CF:81:A0:20:B9:73:C3:3F:6E:D9:4A:B3:79:1B:4B:48:48
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/3rJPz4GgILlzwz9u2UqzeRtLSEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
147.189.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:85:4c:bc:bd:7b:8c:8d:d8:14:7c:8f:a7:f5:6e:06:4a:21:
08:0c:a5:25:02:9e:c8:1b:77:45:5e:c3:4e:35:d5:ac:2d:00:
31:44:7f:e8:1c:5e:06:b6:d0:28:f6:ff:38:1c:10:63:2a:51:
18:d2:ad:02:d9:8b:94:2e:a9:cb:46:0c:23:07:04:6d:87:31:
d4:ea:ca:be:17:ea:c9:4a:72:5e:c4:dc:5e:fe:07:96:bb:67:
f1:e7:5d:ca:49:7d:27:e7:0c:83:64:ee:72:a0:cc:75:65:c4:
7b:50:4a:ce:a8:c3:48:83:d3:ac:f4:9d:ca:8d:c0:8f:d5:99:
96:42:4d:fc:50:ae:93:9a:ef:24:49:b0:14:db:ea:bf:37:b5:
66:8c:bd:8d:4d:0d:38:04:58:62:88:4a:0a:ab:6d:0b:ff:f0:
3d:34:31:bd:11:c8:f5:6d:1c:be:47:a4:2c:5f:9b:4a:40:b4:
83:74:3c:12:a0:48:67:3b:58:24:22:1c:e7:f2:e0:fa:3f:4d:
ca:52:fd:de:fc:06:97:1d:b3:75:07:37:12:2e:f5:7d:7e:7a:
76:2d:f0:f9:d9:74:7f:c5:d6:7f:b4:ce:7d:a6:e2:dc:70:e5:
6f:fd:00:49:d5:be:36:b3:02:9c:06:45:50:15:b8:02:ca:cf:
3c:f4:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org