Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ZCL2vd-2H5nlm-Hwo0WVBpSmeBU.roa
File: ZCL2vd-2H5nlm-Hwo0WVBpSmeBU.roa (raw, json)
Hash identifier: LhHtISZMCwB2cryfsLTYTj5nP5tjLGD+SWOoWWRsEdI=
Subject key identifier: 64:22:F6:BD:DF:B6:1F:99:E5:9B:E1:F0:A3:45:95:06:94:A6:78:15
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01857002899EE8689D26D6D7729238EAE2D4
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ZCL2vd-2H5nlm-Hwo0WVBpSmeBU.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60096
IP address blocks: 31.206.32.0/24 maxlen: 24
31.145.70.0/24 maxlen: 24
31.145.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:89:9e:e8:68:9d:26:d6:d7:72:92:38:ea:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6422f6bddfb61f99e59be1f0a345950694a67815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:38:a4:d9:bb:81:26:0f:8a:60:01:ff:5c:
5d:56:9b:36:08:04:1f:04:73:e3:54:ae:5b:e6:b9:
20:45:c5:8a:73:3f:97:3d:68:8d:8c:6d:3d:f0:5f:
ee:7c:7e:33:ce:d7:6e:1c:51:4f:f0:8f:a0:cb:eb:
ed:f4:e8:2a:84:6c:05:15:4a:39:e6:59:e5:a6:cf:
11:a6:91:ac:38:bb:98:00:03:f8:57:a4:02:66:65:
e9:1a:71:61:cb:84:0f:fb:f2:6b:ac:b9:9f:f7:0f:
2f:d0:cb:7a:cc:0d:5c:5b:d4:fd:be:1b:43:1e:b9:
fd:64:42:6d:40:90:71:40:c6:90:cd:ac:10:48:80:
cf:af:a4:b3:3c:b1:aa:1a:4b:a9:cd:c1:0f:d7:4d:
09:6d:4d:45:f8:af:e4:59:5e:e2:c1:0c:d1:ba:6a:
9a:5a:17:33:fa:95:3f:4d:4a:1b:f9:f9:97:03:22:
c5:48:4c:71:c2:7f:d7:25:45:bf:c3:be:e3:f4:f6:
7b:25:0e:0b:30:bc:67:b6:db:40:68:2f:c1:7e:7e:
19:12:f6:e3:81:41:92:ac:d7:21:7b:02:c9:1c:64:
7a:46:b9:6c:86:92:d5:e8:d3:6d:64:47:d5:30:e9:
2a:82:c7:6e:f6:11:23:29:b0:5d:19:ef:10:36:19:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:22:F6:BD:DF:B6:1F:99:E5:9B:E1:F0:A3:45:95:06:94:A6:78:15
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ZCL2vd-2H5nlm-Hwo0WVBpSmeBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.70.0/23
31.206.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:0e:1e:89:76:a9:c0:07:a5:a4:16:a2:3f:17:ad:a1:57:d1:
91:d5:05:d2:8d:92:76:bb:c7:f2:96:03:24:31:e3:01:79:d4:
d0:e6:3e:a9:f4:e0:77:96:5e:f8:0b:25:4b:2c:e2:9b:22:69:
1a:34:0d:ac:bd:67:f0:2b:af:a6:fb:9f:af:7b:85:b6:a1:a1:
4c:2f:7b:0a:cb:c0:07:66:ed:52:d2:93:e7:7a:c7:ab:14:a8:
1e:42:2d:20:fb:63:13:ae:7b:28:df:b0:95:c6:b0:dc:05:e7:
84:b6:4f:08:00:f9:52:0d:5c:90:5b:4a:03:2a:24:d4:c3:4c:
f4:06:6d:a0:80:65:cb:04:7f:2f:48:14:ec:69:15:67:5e:8d:
0c:be:d1:4f:75:dc:19:89:77:5a:7d:b1:e2:e8:c9:65:ce:20:
e7:91:14:61:19:c4:a9:3f:f2:f2:1d:7e:12:6e:7a:25:52:41:
c9:40:02:04:93:e5:01:2e:4a:4a:7a:b8:b2:23:6f:b9:4c:63:
ce:1e:65:ea:58:d9:f5:72:b3:6d:d8:27:b5:c2:67:44:3a:d8:
b7:f5:6a:41:29:7c:fb:a7:29:74:74:11:d5:1c:82:1e:86:f9:
98:6f:03:f0:b8:46:e2:10:de:27:89:af:20:2d:82:9a:81:87:
14:cc:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:21 2024 by rpki-client on console-ams.rpki-client.org