Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_EAejYPIPhGtpJLZ8q02baBcxqY.roa
File: _EAejYPIPhGtpJLZ8q02baBcxqY.roa (raw, json)
Hash identifier: FOhPrfHCQB5r8ZZ53wKXJnB2ChjG5uK6S5UrurXv4D0=
Subject key identifier: FC:40:1E:8D:83:C8:3E:11:AD:A4:92:D9:F2:AD:36:6D:A0:5C:C6:A6
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0185700285E7E615202CE547FC8D7C06886E
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_EAejYPIPhGtpJLZ8q02baBcxqY.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50875
IP address blocks: 212.15.25.0/24 maxlen: 24
31.145.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:85:e7:e6:15:20:2c:e5:47:fc:8d:7c:06:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc401e8d83c83e11ada492d9f2ad366da05cc6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:50:b8:93:34:c7:1d:ef:10:1b:55:24:33:
ba:ea:c9:dc:29:60:21:3f:5b:56:a2:0f:d5:2b:73:
14:3e:5e:e7:4c:c5:6b:53:42:9a:b6:6f:13:61:e5:
bf:f8:d6:dc:65:2e:70:c2:09:22:f2:15:9b:52:f7:
b1:aa:a4:24:f6:c7:50:4e:56:39:e3:77:fb:10:21:
9b:76:75:9e:04:f9:a1:a7:80:8f:0a:ab:57:19:8e:
ee:d7:b5:8d:ea:6c:7b:d2:f0:d6:d6:d4:cc:07:1f:
70:45:da:db:5e:61:3f:d0:4e:e8:56:ee:e6:d1:fc:
c9:56:0e:06:98:f2:08:9c:ee:ac:f9:6c:89:d3:2b:
6a:d8:d3:45:82:30:6b:a9:6f:95:05:66:11:3c:a9:
92:b6:8e:a1:7c:b1:1c:08:85:db:d7:be:9b:02:79:
9d:0d:9a:fb:0a:5b:60:fe:ca:a1:f5:84:b8:e2:bf:
76:69:bd:83:a1:1f:97:6d:71:a7:17:82:d7:f4:f6:
97:3a:56:76:f4:bb:e4:c8:36:71:55:ca:a7:47:6a:
09:bf:25:0a:e4:01:b1:02:c7:91:dc:9c:e3:46:f3:
9a:46:0c:9f:7f:0b:e7:86:b1:21:c7:60:59:45:8b:
c5:80:3d:9d:fe:03:3a:64:61:5c:cc:82:b7:e4:2a:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:1E:8D:83:C8:3E:11:AD:A4:92:D9:F2:AD:36:6D:A0:5C:C6:A6
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_EAejYPIPhGtpJLZ8q02baBcxqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.82.0/24
212.15.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:6a:ee:cf:ed:37:d3:b6:15:15:06:20:31:3d:55:19:ab:eb:
41:c3:2f:90:c0:3a:7d:46:d6:9c:18:ec:f5:8b:d9:f9:aa:6d:
9d:4e:29:a6:09:f2:e8:d2:e1:a4:20:cd:c0:ce:63:75:0d:1d:
75:fd:d1:dc:b2:22:d3:fc:51:fc:cd:6c:8a:a0:6e:f7:2e:45:
2f:9e:35:a0:b0:12:0b:e9:d9:12:66:16:1c:90:8e:a4:9f:7d:
d5:da:5e:ec:17:b9:b2:65:74:0a:9a:6c:75:0d:70:a0:f3:a0:
b9:b5:04:fe:49:bc:34:47:8f:cc:13:8b:6f:6e:1c:4c:df:d5:
c9:88:5b:0f:f9:cd:67:d3:50:4c:23:cf:7d:1a:c5:58:ef:76:
55:1c:e7:19:dc:bc:68:a7:51:39:ff:3c:b5:5e:3c:78:e6:3f:
ee:42:8b:db:53:07:51:79:00:c1:8d:15:63:11:d4:3f:2d:76:
e3:a9:6d:be:d4:92:6d:58:e9:6d:a7:1f:88:d4:7b:60:f7:28:
64:7d:27:37:f0:65:15:ba:44:22:e6:c5:09:94:9c:6d:72:ec:
25:dc:c1:ad:20:b5:be:f4:81:ed:84:e3:35:67:c7:cd:a4:f6:
07:2b:7c:4c:d2:fb:88:a8:4d:84:26:75:f7:18:14:cc:ff:4e:
d9:d2:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:21 2024 by rpki-client on console-ams.rpki-client.org