Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/9htHpCEhtMFgOXNd86upB3gJmKM.roa
File: 9htHpCEhtMFgOXNd86upB3gJmKM.roa (raw, json)
Hash identifier: 1zY9rwwqzVJMCoB/0CDErKDFAkN+rwPLZWzUxuZXLp8=
Subject key identifier: F6:1B:47:A4:21:21:B4:C1:60:39:73:5D:F3:AB:A9:07:78:09:98:A3
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 01856BC1005B6EAC2757D05347C0C41FC3D1
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/9htHpCEhtMFgOXNd86upB3gJmKM.roa
Signing time: Sun 01 Jan 2023 05:14:48 +0000
ROA not before: Sun 01 Jan 2023 05:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:00:5b:6e:ac:27:57:d0:53:47:c0:c4:1f:c3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jan 1 05:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f61b47a42121b4c16039735df3aba907780998a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:bb:61:55:2d:cc:f2:74:e7:91:53:c9:d7:
81:0e:37:eb:d7:3c:df:da:16:af:a4:99:e6:c4:80:
c3:45:cf:09:4f:bb:df:6b:0f:fa:da:76:7b:5d:bf:
39:ce:32:25:3d:12:e5:36:27:3c:b2:d9:c9:8c:58:
24:85:26:45:29:66:a9:74:ae:55:28:98:d7:5f:8a:
01:74:e2:12:62:d6:c0:e6:e9:9b:6a:17:f2:f4:26:
53:e2:9d:ad:1d:18:86:ef:e4:fb:07:81:17:d9:ea:
bc:2c:56:ff:e8:3e:97:3b:6b:f6:aa:45:72:35:25:
9f:10:a2:d6:e9:0a:82:ad:76:7a:79:31:2d:7d:40:
93:c5:c4:a8:fd:b9:5a:05:a8:2f:02:7c:1c:1e:d4:
53:60:7e:e8:cf:56:1d:71:11:bc:e4:00:3b:93:9c:
f3:7d:f9:d3:bf:09:d2:04:4c:83:6e:1c:f6:c2:f8:
24:73:da:4e:2c:94:76:2f:0a:e7:6d:4c:f0:8c:d0:
39:4b:bc:72:93:af:90:d2:07:db:a8:59:5f:55:3b:
2b:cd:fa:c4:4a:07:29:6e:00:2b:51:c6:83:6a:f7:
d7:1b:58:10:e1:73:c3:b6:61:6c:5a:fe:8a:3c:32:
6f:91:4d:2c:95:46:4e:c1:b5:39:a1:4f:fe:14:4e:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:47:A4:21:21:B4:C1:60:39:73:5D:F3:AB:A9:07:78:09:98:A3
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/9htHpCEhtMFgOXNd86upB3gJmKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a4:28:8c:c6:72:01:1c:7c:ab:d9:1f:c6:1c:e8:b3:12:18:
2b:b6:d8:93:60:ac:6e:9a:79:1e:c3:8a:38:e0:a7:53:78:c5:
b7:23:ba:1c:f0:27:e1:20:0c:ba:72:3e:27:1e:dd:f4:b0:fa:
21:2f:58:ad:4e:f1:6e:b1:41:4d:96:73:3e:1e:48:45:f2:c0:
b1:3b:6d:d5:20:86:94:0f:d1:7f:66:c6:c3:9d:43:0b:99:31:
61:e3:b6:9d:44:d9:a2:d7:b2:6b:df:37:1f:99:1e:95:87:a9:
cd:39:ac:e1:48:83:bc:01:23:43:92:c7:45:72:ea:c5:47:f0:
97:9f:d3:af:57:46:88:81:85:99:f7:5c:1d:1e:0f:e5:58:4b:
df:ba:b8:86:7d:a4:0b:5d:cd:71:6a:bb:f5:b5:5d:26:89:b2:
69:ab:df:23:cc:a1:62:eb:3e:82:d0:2e:5c:d9:e5:13:6e:fa:
f0:72:fc:4e:74:33:ea:8d:a4:59:eb:cc:92:c8:83:93:1b:ee:
c2:99:2c:56:a4:7f:5c:c2:a7:8b:d9:66:76:0c:04:c6:e8:14:
1d:b4:21:b0:e6:64:ce:70:7b:62:f7:cf:fa:44:7d:6e:09:b7:
fc:ef:e9:e6:5d:c1:de:52:ec:cc:bc:1d:a7:dc:49:49:87:48:
7a:62:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:26 2024 by rpki-client on console-fra.rpki-client.org