Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/c7vj7TMoJSi5kLwsRyHB3OFnlBk.roa
File: c7vj7TMoJSi5kLwsRyHB3OFnlBk.roa (raw, json)
Hash identifier: DcXWgqIFhGGNkDQt89LGf61tVszKUnnHDIhHs3HF1+M=
Subject key identifier: 73:BB:E3:ED:33:28:25:28:B9:90:BC:2C:47:21:C1:DC:E1:67:94:19
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 018B19D92F26A1FDE4727B794BFC9177A292
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/c7vj7TMoJSi5kLwsRyHB3OFnlBk.roa
Signing time: Tue 10 Oct 2023 13:49:05 +0000
ROA not before: Tue 10 Oct 2023 13:49:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29486
IP address blocks: 178.21.128.0/21 maxlen: 21
31.24.128.0/21 maxlen: 21
81.27.32.0/20 maxlen: 20
2a00:1c90::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:d9:2f:26:a1:fd:e4:72:7b:79:4b:fc:91:77:a2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Oct 10 13:49:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73bbe3ed33282528b990bc2c4721c1dce1679419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:d3:c4:3c:3c:7e:3e:03:75:d9:bd:7b:cb:
23:2c:78:d0:c0:ab:32:17:a6:07:db:8d:97:17:b7:
cb:38:0c:63:37:60:28:52:42:13:05:d4:20:47:5e:
5b:13:1c:de:5c:72:b0:3b:2d:9d:38:09:7d:a4:88:
e5:7c:aa:1a:ba:e9:18:e5:8c:ef:06:bb:a5:04:98:
53:dd:8e:ac:39:18:4c:64:ed:c9:db:ae:b4:9b:34:
fa:0a:7a:9f:6e:fe:8b:24:13:02:8f:86:27:b9:97:
a6:55:a1:ad:a9:f2:ab:d9:7c:37:f5:f3:cf:8c:ad:
e8:12:e4:11:a0:c2:c7:b6:77:81:26:71:e9:ab:1f:
cc:4a:fb:9d:1c:d3:da:c0:6b:fd:61:d5:75:31:2a:
35:fd:9c:5b:c3:dd:fd:d9:8b:66:36:72:e5:f2:9c:
5d:56:fb:b3:b1:44:a6:dd:5b:79:a7:2e:15:8f:61:
f1:1e:1b:4a:12:d6:f6:48:b7:85:36:3b:e5:cb:c9:
c9:6d:dd:5b:51:15:8e:ff:38:ae:f1:c8:9e:17:28:
2c:1b:46:dd:bb:b7:c7:56:e9:fb:a8:20:ac:c6:5b:
22:0c:29:07:ef:41:6c:95:6d:9c:ef:d1:93:b8:62:
cd:2a:a1:e4:d3:b9:15:45:a5:4a:6f:00:0f:d9:75:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BB:E3:ED:33:28:25:28:B9:90:BC:2C:47:21:C1:DC:E1:67:94:19
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/c7vj7TMoJSi5kLwsRyHB3OFnlBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.128.0/21
81.27.32.0/20
178.21.128.0/21
IPv6:
2a00:1c90::/32
Signature Algorithm: sha256WithRSAEncryption
7f:4b:90:dc:1c:d4:c1:2a:66:31:9e:20:e4:44:48:6d:27:f3:
07:f0:21:29:02:20:d3:00:7c:81:e3:18:fc:a9:ef:3f:d7:a4:
56:ce:30:15:84:75:a2:31:bf:81:9e:f6:54:27:1c:1e:51:ce:
8f:ce:71:f0:4f:02:ab:e8:53:79:c6:84:62:38:70:9c:29:42:
93:5d:78:00:7f:36:95:91:8f:d7:7f:99:e9:47:ae:ee:40:e1:
0f:14:26:74:a2:62:48:f7:8d:b5:3b:9d:b9:d7:c0:2b:52:9b:
54:dd:cb:c9:d6:09:07:76:1c:f6:3c:af:6f:fe:6a:b8:22:c5:
cd:55:e1:b2:b9:cc:1a:79:d0:44:b7:f4:bd:dc:9a:40:6d:7d:
ca:62:a5:7d:5c:aa:b5:56:1f:01:49:44:b3:77:21:cc:ff:b8:
4f:e1:0e:28:87:69:46:13:64:a1:8e:77:c7:13:36:21:73:75:
f6:fd:6e:b3:f8:44:3e:60:8b:94:f7:b5:63:a1:65:7a:79:ff:
79:79:62:0f:ed:4f:00:ae:76:0d:da:19:f5:e8:62:72:a1:8e:
6e:fd:21:10:b4:00:0e:a2:a6:7f:57:5d:17:fb:a7:1a:1d:a3:
3e:d7:e3:a9:bf:74:74:b7:65:87:28:97:c6:1f:71:fe:c7:96:
4d:5a:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:11 2024 by rpki-client on console-fra.rpki-client.org