Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/ulOcPAHF5DcO-R1iEJ1tTJFt7kw.roa
File: ulOcPAHF5DcO-R1iEJ1tTJFt7kw.roa (raw, json)
Hash identifier: SC7c9zi4KqhocQLb08LXIpBLd63jvs3yUSg9X1km658=
Subject key identifier: BA:53:9C:3C:01:C5:E4:37:0E:F9:1D:62:10:9D:6D:4C:91:6D:EE:4C
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 01856E8B0CAF97C7C427DC8BAE0A24A23B2B
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/ulOcPAHF5DcO-R1iEJ1tTJFt7kw.roa
Signing time: Sun 01 Jan 2023 18:14:44 +0000
ROA not before: Sun 01 Jan 2023 18:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56624
IP address blocks: 31.133.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:0c:af:97:c7:c4:27:dc:8b:ae:0a:24:a2:3b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Jan 1 18:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba539c3c01c5e4370ef91d62109d6d4c916dee4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:e8:43:69:6f:61:43:5c:c4:d0:0c:cc:12:
e4:a9:9c:8b:9c:76:2c:38:10:bc:02:80:a6:4f:88:
31:8a:06:7d:88:fe:7f:2a:62:09:0e:57:74:f9:e0:
be:68:6e:f5:c4:a5:98:6a:cd:0e:f0:f2:0a:75:fb:
7b:2d:89:ca:b1:8d:8a:6f:3e:7e:bc:fc:5b:6c:47:
15:46:e0:57:d9:5f:ca:fc:7a:05:4b:7f:8c:e6:e1:
de:6d:03:e3:3a:84:f8:15:e6:33:2b:94:62:67:83:
ec:c4:f1:41:4d:88:81:2f:3c:54:53:62:f4:2d:39:
11:b5:36:3b:ba:c1:1b:e5:ff:08:d8:a8:25:a8:91:
a4:65:9f:3e:3b:2a:29:39:ed:2d:70:18:52:ea:bc:
18:b6:73:17:fe:4b:4e:92:c8:ad:36:ca:7c:3a:f5:
25:74:64:8c:6e:e2:46:8c:a3:0f:24:1c:08:bc:f1:
80:f3:83:b0:a7:e5:f5:19:b9:4d:63:49:1a:81:4c:
a4:f1:0b:3d:68:5e:9e:b1:5a:0e:1b:86:64:a1:3d:
c0:f7:13:4c:0d:b8:c5:2a:f6:bd:ad:30:ae:87:9e:
b3:1d:cc:9f:71:55:a6:d5:ae:06:78:d7:01:47:1e:
28:9f:42:4c:4b:b5:cf:60:79:43:1e:72:fb:4a:9b:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:9C:3C:01:C5:E4:37:0E:F9:1D:62:10:9D:6D:4C:91:6D:EE:4C
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/ulOcPAHF5DcO-R1iEJ1tTJFt7kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.8.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:07:39:a3:fe:76:58:23:be:3d:4a:bc:7f:64:c3:fe:27:bc:
f3:bb:f9:ad:65:ce:2f:55:00:a1:f7:2f:b1:38:f8:cf:d0:f5:
e2:9a:8c:d2:41:7e:20:38:a8:d2:b5:f8:a5:7f:24:a7:3e:53:
17:e0:ba:ce:29:09:94:8d:f6:d3:ce:e0:b6:25:18:fb:a2:88:
0f:3c:27:2c:71:db:21:68:20:29:a4:49:72:a2:b3:51:fb:d9:
ce:fd:01:7a:34:3b:be:e0:46:c1:13:15:7a:11:2f:a3:c2:3c:
6f:87:f8:14:d0:35:57:5e:42:2c:7f:1a:fd:f3:de:98:e0:2f:
01:eb:13:e7:2e:d5:07:57:fc:ff:77:72:f0:14:a8:b0:9a:30:
fa:c6:ae:93:2e:4a:7e:0b:b2:dd:b6:0c:6e:60:59:cb:7e:0d:
c2:52:26:fa:ac:0b:71:c0:93:c0:69:0e:5a:b6:f4:65:a8:d4:
d2:fd:aa:2f:b4:51:41:18:d2:0c:b8:e2:42:ff:cd:51:da:51:
ad:4a:b7:d8:cb:d9:c5:76:c7:a0:84:0f:c2:c9:23:ab:cf:f4:
ed:c6:55:ba:ac:55:79:53:95:5e:75:0e:41:d4:f3:05:25:38:
50:42:cc:fc:d3:11:ad:97:e9:39:b7:28:28:45:d9:bc:35:ad:
39:89:82:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:44 2024 by rpki-client on console-ams.rpki-client.org