Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/kP3PlqzrsJ6AfqUhAwoVdHdfUXQ.roa
File: kP3PlqzrsJ6AfqUhAwoVdHdfUXQ.roa (raw, json)
Hash identifier: I1W0XfrC5YoFAuD40SZssssAnIa42rvqdnPG3c2YxFU=
Subject key identifier: 90:FD:CF:96:AC:EB:B0:9E:80:7E:A5:21:03:0A:15:74:77:5F:51:74
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0185711E7BEA80D8C7D2A491F2A591E51C78
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/kP3PlqzrsJ6AfqUhAwoVdHdfUXQ.roa
Signing time: Mon 02 Jan 2023 06:15:01 +0000
ROA not before: Mon 02 Jan 2023 06:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 31.41.255.0/24 maxlen: 24
31.134.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:7b:ea:80:d8:c7:d2:a4:91:f2:a5:91:e5:1c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 06:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90fdcf96acebb09e807ea521030a1574775f5174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:59:94:91:8e:36:b4:f9:bc:c5:15:a5:2a:
31:0e:3c:bd:14:ba:e6:86:9c:96:17:1e:fe:75:63:
8b:c8:32:c9:cd:b5:bb:7b:e2:f6:01:b8:08:bb:dc:
be:a9:f7:b1:8f:b4:25:fa:46:31:b5:9e:75:56:30:
a4:d9:1c:a6:a9:e3:af:df:00:6a:2d:33:70:f4:d3:
b3:18:0b:22:c1:7c:1e:fe:50:be:e7:15:b5:13:5f:
14:0f:2f:c7:52:13:4d:98:65:e1:9f:c3:03:14:96:
4a:c8:c1:f2:ee:c8:c5:88:75:82:53:45:69:18:54:
7c:77:e6:67:0a:44:df:d5:09:98:c7:44:52:ae:55:
60:8a:35:8c:33:5e:a1:86:ea:60:97:8f:0c:61:87:
8a:ad:43:c9:58:63:f4:cd:d8:27:25:14:bf:0d:da:
12:20:5e:4a:e2:4a:27:4a:b2:4a:e9:73:6b:a6:2f:
aa:2f:97:4b:36:f8:d7:a1:cb:42:14:90:43:f1:59:
19:e3:03:99:f5:9a:5a:f4:5d:ea:49:41:03:3f:ec:
de:9d:7f:b8:8b:f3:49:5d:a8:39:fd:e9:67:c2:d4:
da:a8:bd:71:6a:4b:92:c0:5b:01:6a:f3:61:75:3a:
48:72:50:66:6c:12:7e:64:f5:b0:f6:3f:06:4b:6d:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FD:CF:96:AC:EB:B0:9E:80:7E:A5:21:03:0A:15:74:77:5F:51:74
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/kP3PlqzrsJ6AfqUhAwoVdHdfUXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.255.0/24
31.134.200.0/21
Signature Algorithm: sha256WithRSAEncryption
07:cd:40:65:ff:bd:7b:e4:b9:00:23:05:1f:cd:b5:d0:a9:d6:
62:3c:94:3f:3a:aa:2b:5f:d0:e5:91:e6:9a:64:fa:87:7b:b8:
f6:d4:5c:b6:f4:78:31:40:e4:27:3f:bc:80:9e:3c:73:ec:3d:
8c:e4:8f:3a:1a:04:90:f7:c2:ec:6f:7d:4e:78:85:b4:8a:d8:
da:36:81:4a:f0:1a:85:98:41:4f:0c:55:2f:e2:fe:da:5b:6c:
59:85:6b:80:51:38:9d:e1:5d:f8:44:48:36:32:44:0b:b7:32:
34:25:24:39:d5:83:0b:91:1c:4f:6e:e7:27:85:8b:70:ff:b1:
32:9d:2d:b1:a3:fd:83:f6:99:03:d6:5e:91:97:27:fa:02:cf:
74:6c:fd:49:a6:60:8b:6e:1b:dc:bc:2c:07:b3:e2:37:36:57:
44:37:d8:58:bc:6d:24:10:4f:35:be:15:34:8c:14:15:f4:ab:
0f:f4:7d:3d:f9:3c:6d:16:8b:b2:a8:5e:1e:71:0c:28:e7:d9:
66:75:c4:08:ce:5c:c9:77:c4:95:d3:66:0a:4a:e3:ed:3d:9f:
31:d8:a3:6c:56:8b:a8:f0:de:f4:69:38:64:d4:1d:83:9c:6c:
fa:1b:41:57:82:44:be:42:db:f7:a9:47:a9:28:2d:ea:a1:00:
be:e5:c5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:21 2023 by rpki-client on console-fra.rpki-client.org