Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4id_sCP-mFQWDFlHLWsjt4j-wiY.roa
File: 4id_sCP-mFQWDFlHLWsjt4j-wiY.roa (raw, json)
Hash identifier: eh108le4wA40Ya+4B3L8b7w7mN31B0AwbeoKPWn4x9Y=
Subject key identifier: E2:27:7F:B0:23:FE:98:54:16:0C:59:47:2D:6B:23:B7:88:FE:C2:26
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570027D7F45486B9E0A6CDE3A53F32C42
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4id_sCP-mFQWDFlHLWsjt4j-wiY.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33830
IP address blocks: 62.244.244.0/24 maxlen: 24
31.145.171.0/24 maxlen: 24
31.145.72.0/24 maxlen: 24
213.248.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7d:7f:45:48:6b:9e:0a:6c:de:3a:53:f3:2c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2277fb023fe9854160c59472d6b23b788fec226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:2a:37:11:49:7d:17:ca:10:3d:54:89:ed:
e7:ab:bb:97:93:47:af:87:4f:65:6a:b0:e6:8f:be:
fd:25:c3:44:b6:57:8e:9d:cc:d3:7b:dc:a0:46:9c:
d3:5b:c8:ef:a9:0b:a9:70:60:d4:23:c9:03:9d:ef:
c9:f0:66:34:a3:7c:05:78:95:b5:81:b6:bb:7b:b0:
1b:74:9d:17:63:a4:bb:84:30:8d:29:af:02:4c:68:
54:19:a2:32:9b:ca:1f:ce:ef:b7:82:cb:81:18:98:
78:e1:73:53:2b:f0:9a:50:76:69:5b:66:bc:78:a4:
c1:76:43:8c:e9:0f:3f:09:9a:f5:fd:45:2d:b1:9a:
fe:20:aa:d1:80:45:29:9e:e3:03:57:d9:dd:4d:9f:
9f:4d:08:a7:e9:ca:2d:ca:08:61:b9:c9:86:16:34:
16:f6:bd:d4:8f:fc:ef:99:0f:e3:1e:0a:1e:40:a5:
09:db:93:c5:94:ca:90:a3:e5:40:94:06:8f:5e:cc:
cd:77:67:44:0c:60:be:2b:a7:9f:ae:56:f7:87:0b:
7b:05:04:b9:d8:c2:36:fd:bf:fe:b8:2c:9a:c3:fc:
57:13:42:68:91:a5:6b:17:b8:f2:59:50:14:11:04:
57:ee:1b:01:0e:c3:c7:c2:d9:2b:7a:66:d6:80:86:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:7F:B0:23:FE:98:54:16:0C:59:47:2D:6B:23:B7:88:FE:C2:26
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4id_sCP-mFQWDFlHLWsjt4j-wiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.72.0/24
31.145.171.0/24
62.244.244.0/24
213.248.141.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0c:14:30:51:6c:de:d1:6f:90:69:24:82:b6:48:93:e2:ba:
c4:29:aa:e7:37:ab:1a:ed:be:a7:bd:3f:52:a8:68:4d:8a:59:
11:fa:96:f6:b0:ed:a0:c7:59:04:aa:44:3d:11:ff:71:c7:72:
d4:b8:88:63:f5:24:e3:81:e2:b6:9a:56:05:1b:31:69:f7:81:
62:d7:cc:eb:51:ab:d9:d1:18:e5:29:44:f2:f0:6f:5d:6f:f9:
91:dc:49:94:69:3c:be:bd:5b:6c:ec:8c:46:c5:51:e8:7f:21:
f0:44:c8:0c:5e:c0:4d:1a:db:53:ad:1f:06:f5:64:07:27:6b:
fb:1c:c2:f2:1e:70:53:1a:ef:bb:31:75:c1:ef:7e:66:89:aa:
dc:62:90:7b:37:2a:69:63:f2:5b:54:f8:f3:e6:f8:f9:8e:fd:
e6:01:56:7c:57:d8:5d:a5:d5:f8:6a:83:6d:6e:d6:84:58:58:
a1:8c:81:f5:19:07:ce:97:b2:f3:4d:19:0f:d7:d3:7f:99:23:
bb:09:1e:de:b8:61:ed:fc:3e:9b:2d:97:d7:2f:b4:8b:ce:9d:
6e:d2:a9:35:4b:c4:c0:00:9e:be:49:83:89:a0:78:f7:5d:49:
27:5a:75:fb:29:ad:4c:c9:e5:88:09:55:70:84:42:44:5b:10:
9c:c2:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:36:59 2024 by rpki-client on console-fra.rpki-client.org