Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/nCHabmylGpM0X5X8twXHcHS2ifw.roa
File: nCHabmylGpM0X5X8twXHcHS2ifw.roa (raw, json)
Hash identifier: vlJjym5fBAt7tEnBHX82spa3NJ+fcSM63AOcXbEng+U=
Subject key identifier: 9C:21:DA:6E:6C:A5:1A:93:34:5F:95:FC:B7:05:C7:70:74:B6:89:FC
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028F1B698E21377A8F5F5EA639DAB4
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/nCHabmylGpM0X5X8twXHcHS2ifw.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209154
IP address blocks: 31.145.11.0/24 maxlen: 24
31.145.9.0/24 maxlen: 24
31.145.8.0/22 maxlen: 22
31.145.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8f:1b:69:8e:21:37:7a:8f:5f:5e:a6:39:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c21da6e6ca51a93345f95fcb705c77074b689fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:0e:5b:46:24:92:39:46:d6:5f:44:7b:31:
09:89:5d:19:d2:c6:b1:42:56:63:68:da:27:18:83:
d4:9e:ea:25:b6:39:3b:b3:9e:96:e5:87:be:43:93:
6d:27:a3:39:75:73:dd:2c:0a:c0:db:86:ff:9c:df:
b4:5c:52:20:5f:c4:14:06:3f:6a:bc:46:16:06:32:
5b:83:63:6c:77:a9:40:72:40:5d:00:91:dd:7f:7b:
ae:b8:60:cc:f8:09:d2:79:81:be:0c:d5:97:b8:23:
b6:97:76:7c:b3:6a:1e:c6:ff:f6:65:b0:8f:a4:ef:
f2:d9:7b:4e:89:02:6d:d9:9a:f1:48:8b:50:cb:c2:
7c:f9:37:75:0c:e5:65:31:f2:d1:52:8a:cf:d1:0a:
29:1b:b5:c6:25:d3:41:54:1e:c8:7b:f5:a8:7a:50:
44:2c:6c:f0:03:7e:4b:57:1b:58:bf:ac:cc:6d:2b:
7e:26:28:66:39:d6:43:eb:28:ce:2a:1f:0a:eb:7e:
57:87:4c:41:5f:e0:a9:67:93:59:e2:e2:58:de:bd:
4d:15:55:ae:b3:ea:9f:cb:a7:16:2c:a6:7e:f5:9e:
82:30:cc:ba:3c:46:94:7d:30:57:00:6f:46:9a:95:
6f:7c:20:72:5c:98:6c:c2:db:c2:53:25:ed:02:28:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:21:DA:6E:6C:A5:1A:93:34:5F:95:FC:B7:05:C7:70:74:B6:89:FC
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/nCHabmylGpM0X5X8twXHcHS2ifw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.8.0/22
Signature Algorithm: sha256WithRSAEncryption
27:65:a5:3d:88:3c:2f:93:31:d4:80:32:1b:dc:7d:76:3c:8d:
4c:50:66:47:c8:91:d6:ab:c3:da:06:0c:e5:3d:13:72:5e:9c:
50:1e:22:0f:e6:e8:c5:7d:30:13:fd:6b:44:4e:af:f6:88:8d:
83:a1:19:53:2f:1a:fa:75:ea:21:ec:59:8a:d8:bb:c1:56:38:
b5:e8:8c:b2:95:f6:ab:82:5b:0c:79:5e:ef:95:ed:2e:98:b6:
43:5a:73:0a:3b:d3:a9:8e:fd:cc:7c:a2:3a:b0:d6:f8:b8:97:
af:c3:ad:86:9c:32:8c:9b:7d:a7:25:b2:03:ef:cd:03:2a:00:
c0:c8:8f:7a:3f:f9:3a:1d:0c:aa:fc:f4:17:fc:f8:8b:eb:00:
a0:b6:44:dc:4c:50:30:ef:a3:4d:ca:d8:e5:d9:ab:79:c7:01:
47:11:59:df:92:d5:67:40:cc:a2:9f:e2:48:1e:ed:8d:58:34:
52:84:98:56:dc:7b:da:b1:45:60:e7:d1:41:20:8a:3e:9f:c6:
e6:00:0e:7b:63:18:6f:a6:58:85:cb:86:92:07:17:5a:cd:54:
d1:ef:1e:c8:ef:eb:62:e8:6b:9d:8d:6f:0a:2b:a5:4c:3a:e9:
63:fd:e9:ad:c3:1c:1e:3f:c2:4c:08:87:bb:e1:01:c9:71:a4:
7d:78:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org