Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/zarH9YnNEsoYvOPMui0lN2t4wpo.roa
File: zarH9YnNEsoYvOPMui0lN2t4wpo.roa (raw, json)
Hash identifier: 8V61mwzvBQnDOkEwY2UzpF1y34kLlHkBEh0fyUgjd+M=
Subject key identifier: CD:AA:C7:F5:89:CD:12:CA:18:BC:E3:CC:BA:2D:25:37:6B:78:C2:9A
Certificate issuer: /CN=8fad478776df320a8667e75e69e09efb73938b64
Certificate serial: 01857169A7F067806D989665AFFCF6CEF1A0
Authority key identifier: 8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/zarH9YnNEsoYvOPMui0lN2t4wpo.roa
Signing time: Mon 02 Jan 2023 07:37:07 +0000
ROA not before: Mon 02 Jan 2023 07:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48551
IP address blocks: 31.193.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a7:f0:67:80:6d:98:96:65:af:fc:f6:ce:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fad478776df320a8667e75e69e09efb73938b64
Validity
Not Before: Jan 2 07:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdaac7f589cd12ca18bce3ccba2d25376b78c29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:b0:e9:6f:d6:28:5e:be:78:c1:c9:bc:16:
d3:18:2b:f8:9a:4f:9d:47:95:08:8c:3b:05:cf:a3:
49:52:e5:0b:f5:4c:96:00:36:51:5a:d5:dd:39:e9:
f4:e9:7d:30:48:2f:c1:d4:16:34:7e:9c:4b:da:8a:
f7:6e:48:2f:e0:97:ef:66:19:89:a8:a4:e2:86:c4:
8b:ab:ff:6a:6d:72:54:64:2c:8a:56:fd:d3:34:cd:
cd:88:83:c7:c4:f4:0f:9e:44:e2:e1:71:dd:d5:2e:
8c:a6:5b:5b:ce:94:d3:86:8a:19:1f:83:1c:55:cf:
eb:bd:5d:52:0f:b4:85:c1:d4:f7:a4:64:51:14:87:
b1:5a:6c:69:3b:e3:e0:90:ab:60:9a:59:80:2f:54:
8d:2d:0c:1a:72:64:e8:87:a7:e2:c4:6d:1e:53:53:
bd:d1:41:bc:fe:f9:b1:84:02:a5:97:9e:e0:0c:bf:
89:00:a7:3e:ea:84:6c:a0:b7:fa:e1:51:3b:e1:16:
98:d5:b3:2c:cf:df:11:1d:89:42:ce:04:26:29:80:
6c:cd:74:29:3a:70:cb:b1:ee:d0:ae:b4:ca:ad:43:
87:e9:03:42:de:1d:48:b2:54:79:16:24:a8:6b:e1:
8b:0f:ce:9e:35:f8:6e:0b:d4:5a:c4:df:be:0c:21:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AA:C7:F5:89:CD:12:CA:18:BC:E3:CC:BA:2D:25:37:6B:78:C2:9A
X509v3 Authority Key Identifier:
keyid:8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/zarH9YnNEsoYvOPMui0lN2t4wpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:13:75:95:76:05:c1:53:c6:cb:c1:41:8b:b8:0e:d1:eb:6d:
c2:41:f3:c6:2e:3c:dd:b6:ca:ef:31:92:52:9d:40:8c:3c:85:
69:ae:29:0b:4e:22:32:5b:a6:b5:db:3c:8a:28:10:f2:d6:fb:
bc:6c:b5:15:40:a4:35:f3:67:e7:6d:14:a9:26:8a:3a:e2:4b:
df:f2:34:c0:8b:3b:a1:06:78:61:1e:f2:92:f7:8b:66:e3:6b:
63:6f:c5:3d:22:50:ae:b8:5e:b1:58:1c:a7:34:cc:4d:f0:25:
da:fd:4c:df:f7:4e:96:42:5e:83:ad:43:e5:ae:b9:eb:29:47:
bd:40:d5:95:71:9a:71:de:e6:36:7d:ac:c1:58:ac:5e:83:a1:
2a:ff:2e:0b:94:5a:21:69:35:1f:82:5c:fa:a0:9f:a9:b7:1a:
01:1c:0b:51:0d:77:94:30:66:01:ef:3b:7b:08:2f:5b:33:55:
6c:b5:25:69:0c:d7:4c:e1:25:f1:fc:8e:03:36:ff:ba:68:b1:
68:44:bb:93:bf:c2:7a:b1:07:26:14:3c:e1:21:8f:54:23:4b:
de:cc:19:46:b2:9a:fb:7a:49:ed:67:04:9a:54:3f:61:b2:1f:
d4:83:fb:58:ae:96:8a:56:fd:04:87:57:f3:35:f2:14:7c:b2:
9c:67:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:15 2024 by rpki-client on console-ams.rpki-client.org