Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/i-A853WW_C2owgVgyYejFtUh1Mw.roa
File: i-A853WW_C2owgVgyYejFtUh1Mw.roa (raw, json)
Hash identifier: pTKr7v7hLKKMaiTx3eBOE/a9EQBdNvkCVQBy6Wwt1PY=
Subject key identifier: 8B:E0:3C:E7:75:96:FC:2D:A8:C2:05:60:C9:87:A3:16:D5:21:D4:CC
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185724710521F8C9A3FC3A753C73381D68F
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/i-A853WW_C2owgVgyYejFtUh1Mw.roa
Signing time: Mon 02 Jan 2023 11:38:57 +0000
ROA not before: Mon 02 Jan 2023 11:38:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198620
IP address blocks: 31.184.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:10:52:1f:8c:9a:3f:c3:a7:53:c7:33:81:d6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8be03ce77596fc2da8c20560c987a316d521d4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:19:cd:ef:65:ae:4a:21:97:42:6d:bc:32:92:
9c:be:ad:72:23:d0:fe:15:67:ae:7d:6e:1a:56:b4:
78:a0:ba:34:46:31:1d:f5:a6:9a:0d:75:9e:11:9a:
2c:0e:a7:93:27:a9:8b:b0:8f:6b:48:04:a6:56:75:
4f:13:7c:5d:65:d4:76:b0:ac:1b:b9:09:73:9c:0e:
ae:78:4b:44:92:ca:7a:fe:6c:45:75:9c:c9:71:8f:
fd:50:a4:fa:3f:07:41:77:a9:a2:c8:a1:07:68:82:
92:df:b3:c7:58:c7:5c:5d:66:19:39:f2:95:a0:f7:
13:67:74:9d:df:4f:bb:91:be:04:1c:af:59:3a:89:
bc:eb:0e:17:c1:08:ce:43:0e:85:18:c9:20:e5:1c:
ca:f1:38:8f:8f:36:dd:c0:25:12:41:d0:ff:bd:b1:
95:bc:b9:f4:2c:ff:a9:b6:39:31:5f:3e:90:6b:92:
be:39:12:39:48:83:f0:ca:bf:2a:d5:09:01:3a:46:
e7:ad:ca:76:6c:4c:84:4a:6d:2b:1e:aa:36:5e:88:
e8:3e:11:3d:f9:02:0e:75:c2:c4:6f:77:0c:dd:87:
fc:ea:26:b7:51:c6:a1:b3:ba:a7:8c:d5:7b:b6:28:
52:1d:6b:24:d0:3e:06:71:9b:a8:03:6b:b8:59:1e:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:3C:E7:75:96:FC:2D:A8:C2:05:60:C9:87:A3:16:D5:21:D4:CC
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/i-A853WW_C2owgVgyYejFtUh1Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:31:27:85:77:73:73:19:53:4e:ef:09:15:24:44:82:ff:b8:
72:7d:a1:35:27:06:4d:76:ad:7f:bf:83:74:1d:59:2b:7d:ae:
74:ee:da:26:28:54:af:fb:74:30:21:36:ff:e2:33:17:ef:3d:
ab:0f:fe:01:fe:a3:5c:46:35:1e:ca:69:3a:e5:5e:88:71:2d:
8f:24:72:77:7c:fd:6f:91:a3:4e:48:96:3e:12:f1:2f:23:1e:
bc:ed:6e:a7:68:75:d6:45:08:12:98:4a:c9:12:f7:0f:d6:03:
93:c6:02:57:91:99:88:6e:ad:fd:7e:46:62:52:0c:f0:48:2f:
4c:81:1a:de:d6:67:59:09:89:8c:e0:44:e7:be:13:f1:8e:2c:
e2:52:c9:e1:6d:28:eb:9e:63:9a:95:47:85:16:80:40:97:ed:
a1:f5:30:12:90:6a:2e:41:9e:ec:33:93:eb:af:eb:7d:e1:dd:
76:94:64:fa:4b:f7:b4:7b:80:5c:17:0e:7b:1e:6e:26:df:50:
2a:05:8d:cd:31:6c:76:ec:91:d0:04:64:44:7b:57:7a:67:96:
af:d2:e3:b8:6a:69:62:82:af:18:8f:61:8f:58:0a:87:2e:18:
7e:e7:b8:49:7c:e9:46:2d:22:6d:42:48:b0:d4:67:04:8c:db:
4f:e9:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org