Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/1dLl7BZE-vqfIaoFjFqv823qRmY.roa
File: 1dLl7BZE-vqfIaoFjFqv823qRmY.roa (raw, json)
Hash identifier: J0F/GwTf5vk+jhgjEa93JJM0uI3TqPJCDFUIW+5v38M=
Subject key identifier: D5:D2:E5:EC:16:44:FA:FA:9F:21:AA:05:8C:5A:AF:F3:6D:EA:46:66
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01856B811B225852AFF4D2806906F70FAE7E
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/1dLl7BZE-vqfIaoFjFqv823qRmY.roa
Signing time: Sun 01 Jan 2023 04:05:01 +0000
ROA not before: Sun 01 Jan 2023 04:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199575
IP address blocks: 31.172.163.0/24 maxlen: 24
212.18.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:1b:22:58:52:af:f4:d2:80:69:06:f7:0f:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 04:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5d2e5ec1644fafa9f21aa058c5aaff36dea4666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:11:5a:f0:3e:ca:f1:d6:19:4a:9e:4e:12:
4b:f4:77:6a:24:52:93:3d:96:69:48:0f:4e:f9:15:
78:cf:42:08:58:bb:fd:ca:0e:5b:e0:ab:ea:90:bb:
d6:ed:7d:fe:9c:75:e3:36:f7:f0:a2:f2:dc:f5:c7:
be:b4:97:54:10:34:84:50:07:cb:ba:e3:59:fd:2a:
9e:ce:8c:bd:29:85:da:5c:5d:29:5d:16:21:31:19:
61:7d:01:74:f2:22:fa:b9:c7:22:86:9f:05:86:db:
99:e5:c2:93:ee:4f:76:45:ed:fb:d1:a0:ee:34:4e:
5f:21:89:c6:46:d3:3b:76:6c:f2:ef:0e:4b:d2:50:
15:c5:1e:ca:81:0e:ac:2e:be:ef:20:9a:8f:68:7a:
78:b8:06:b7:31:1b:1a:e5:14:87:26:96:2b:a8:50:
29:f2:f9:6e:f4:7e:7c:07:97:2d:40:03:c8:98:08:
27:36:d3:87:5d:ab:68:a6:3d:a5:bf:9a:41:7d:52:
3a:df:d9:56:d9:20:90:5a:bf:dc:23:b2:aa:a5:c3:
6a:45:c0:12:dd:d8:9c:ef:72:ff:7e:14:2b:b8:a5:
b3:77:4a:68:55:5b:b0:40:f4:9d:19:7f:a6:cb:e9:
65:30:a9:5e:1d:0a:0d:f9:7b:f4:74:ab:b9:8e:ff:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:E5:EC:16:44:FA:FA:9F:21:AA:05:8C:5A:AF:F3:6D:EA:46:66
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/1dLl7BZE-vqfIaoFjFqv823qRmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.163.0/24
212.18.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:6e:d4:08:76:8c:0d:ab:87:80:f6:2f:46:8a:60:4a:78:a5:
2c:0c:08:12:00:f4:74:db:8e:85:98:54:23:58:65:ea:d8:f0:
f1:21:af:ce:13:ca:2f:24:7c:6d:ce:f5:41:86:f9:11:82:e3:
e4:43:9c:de:c7:d2:df:ff:76:d2:4e:0d:46:69:41:98:b7:18:
36:27:0c:37:dc:3e:c8:eb:e9:91:ae:22:35:7f:9f:62:72:48:
d0:3e:9f:d9:13:be:57:9c:66:20:ce:1c:a1:af:a6:6f:f3:b5:
bb:fb:f6:e0:12:99:c4:c2:da:07:96:f4:97:9f:03:da:ed:bb:
37:42:0f:e9:a8:90:fc:c8:37:83:ca:5a:5e:19:f1:13:f0:b8:
f0:66:2a:e5:45:c0:7e:2f:fe:94:08:32:52:72:28:a4:d1:61:
f5:c2:5e:4d:59:43:7c:d5:0a:8c:24:76:bb:67:15:5e:ad:9e:
5b:22:4a:6c:dd:32:ed:c6:cd:66:28:ba:81:43:ea:41:4a:0e:
b1:17:80:2c:87:7a:65:63:b5:cd:f0:ac:0f:8b:94:da:ab:26:
94:b8:c6:35:37:38:39:97:18:b6:b8:b9:34:dc:fb:ed:2b:ad:
cd:c7:e1:8b:46:40:50:01:72:7e:8c:09:85:4f:d3:ba:e4:1c:
af:15:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:52 2024 by rpki-client on console-ams.rpki-client.org