Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3c9LNnnaZ-gLM6UJvuWfKB7lO6g.roa
File: 3c9LNnnaZ-gLM6UJvuWfKB7lO6g.roa (raw, json)
Hash identifier: X8LRrlDvSkr2oV7QP0foon+OzjOQ9XHXtTU+xkT8/Hs=
Subject key identifier: DD:CF:4B:36:79:DA:67:E8:0B:33:A5:09:BE:E5:9F:28:1E:E5:3B:A8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F983DD20A5B1D9435F50F666BC3E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3c9LNnnaZ-gLM6UJvuWfKB7lO6g.roa
Signing time: Sun 01 Jan 2023 13:25:12 +0000
ROA not before: Sun 01 Jan 2023 13:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61437
IP address blocks: 31.13.233.0/24 maxlen: 24
31.13.232.0/22 maxlen: 22
31.13.232.0/24 maxlen: 24
31.13.235.0/24 maxlen: 24
31.13.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f9:83:dd:20:a5:b1:d9:43:5f:50:f6:66:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddcf4b3679da67e80b33a509bee59f281ee53ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:e4:7b:6f:cc:65:e0:8a:07:84:dd:bc:d2:
a6:d6:6b:5c:ae:53:82:bb:42:ba:64:1b:a5:fc:45:
38:16:6e:db:60:98:6a:d9:66:a7:f4:16:85:79:fd:
95:2c:af:61:f4:4a:ea:02:fc:07:77:e5:cb:03:ac:
07:70:65:99:d9:2d:56:ff:72:a3:b5:ab:8c:f0:5e:
ba:6d:e0:44:01:49:ef:34:3c:5d:c1:d4:1b:d3:40:
2d:b3:fa:f8:db:c0:30:40:04:e8:3b:99:56:63:c5:
bf:84:f3:36:88:1f:9e:4d:f7:66:12:82:e4:8e:ae:
99:39:64:f2:0d:56:1e:dd:78:1b:9b:28:4d:44:b7:
e2:30:a9:1a:68:f9:ed:ad:23:54:fd:a8:da:21:20:
74:d4:70:8c:ec:75:b7:c1:d8:e4:7a:a7:15:0e:f6:
79:9f:60:3f:4b:af:85:41:a3:23:6f:32:12:fa:14:
f8:c4:ab:11:bb:94:50:ee:50:e3:4c:c8:35:53:d3:
ce:f5:74:4f:6b:8a:6c:8a:ea:72:34:18:d8:d6:92:
5a:47:ad:0b:83:32:a3:b9:97:c7:64:11:3f:23:0f:
82:5d:96:cd:63:3f:3e:3a:81:62:f5:41:52:c7:63:
6f:b8:d4:6d:a8:d1:9c:cf:5f:fd:53:30:1a:ff:76:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CF:4B:36:79:DA:67:E8:0B:33:A5:09:BE:E5:9F:28:1E:E5:3B:A8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3c9LNnnaZ-gLM6UJvuWfKB7lO6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:08:34:b0:8a:cf:f2:68:68:f4:bb:4c:7c:0c:07:73:8c:6c:
9d:fe:86:6e:f9:60:eb:61:6f:49:e7:b9:39:90:9b:d4:79:e4:
46:d1:28:ff:27:aa:59:3d:4e:93:48:c9:75:7b:23:4d:d2:3d:
a9:9d:81:b9:e8:98:fa:22:a1:f4:10:bb:e2:ee:0b:25:da:0b:
ad:3a:1d:e2:6d:08:68:c3:8f:4d:fa:ad:7c:75:2c:99:a3:63:
29:c8:77:63:b2:01:97:43:ec:d2:0e:12:1a:9c:91:eb:85:10:
35:8c:e7:41:58:94:ef:7c:ee:ea:53:91:ea:ef:38:b1:e6:a6:
1f:d5:0a:8f:7f:80:24:e8:29:1c:3e:53:d3:20:ff:cb:59:ad:
eb:1f:0e:ec:57:90:63:b7:2c:68:ac:92:3d:0d:3f:ff:b7:75:
ec:64:1b:ca:0b:a0:f2:b8:08:5d:df:8c:00:5b:69:33:c9:aa:
d4:35:04:81:8d:b9:bc:da:07:de:8e:d2:40:91:1c:ec:3f:d3:
28:7b:34:6a:5f:5e:4c:ea:36:17:b7:22:82:f5:1d:6c:22:f9:
5b:ba:da:9d:5b:5b:f3:5a:0d:23:61:1f:7b:ef:3a:80:ae:90:
65:64:52:78:16:e3:bf:a9:83:ad:bd:dc:1d:f2:39:b7:f7:39:
cb:ea:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:57 2024 by rpki-client on console-fra.rpki-client.org