Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/Ij0va2B5TE4pq1DJ801H6cZDXGQ.roa
File: Ij0va2B5TE4pq1DJ801H6cZDXGQ.roa (raw, json)
Hash identifier: 98Q+TwxXKBSPY1Q/znI/5awTkZAuRPRo7oYQ496bvuA=
Subject key identifier: 22:3D:2F:6B:60:79:4C:4E:29:AB:50:C9:F3:4D:47:E9:C6:43:5C:64
Certificate issuer: /CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Certificate serial: 018571F0FD0DCFEEA64EFD9D863C184665A4
Authority key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/Ij0va2B5TE4pq1DJ801H6cZDXGQ.roa
Signing time: Mon 02 Jan 2023 10:04:56 +0000
ROA not before: Mon 02 Jan 2023 10:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 31.193.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:fd:0d:cf:ee:a6:4e:fd:9d:86:3c:18:46:65:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Validity
Not Before: Jan 2 10:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=223d2f6b60794c4e29ab50c9f34d47e9c6435c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:14:11:bc:6b:d7:78:1f:d3:aa:6f:bb:ac:
76:5e:19:ed:df:05:75:4c:3f:6b:3d:f2:b7:21:ce:
23:14:8f:91:65:45:5e:62:80:f5:3d:51:0e:9f:9a:
d4:6a:5e:38:31:c7:ff:15:de:58:09:c4:2e:d5:db:
f8:91:40:6b:3f:46:8e:85:90:88:53:a7:9d:5b:f8:
20:27:1e:e6:01:5e:d4:bb:87:e0:27:10:c1:31:4f:
0d:8b:43:be:11:3c:a9:77:8e:0b:cb:62:ef:97:cb:
fe:f8:fa:13:c6:e8:27:70:ce:41:54:a0:cf:6d:7f:
3a:11:5a:80:33:6b:b7:8d:b7:2c:0b:e0:d6:77:71:
8b:29:3a:06:ec:3d:fd:f7:3a:62:5e:d6:b8:d5:fc:
ec:b5:6d:c6:53:99:e9:35:e5:07:d9:4e:91:58:d5:
15:3b:90:4c:a6:b8:49:c4:a7:10:fc:1f:ed:e5:10:
e5:21:b6:3c:2c:a1:84:fd:7d:3d:da:1a:39:d7:eb:
12:e6:06:d4:fa:95:ed:b1:f2:7e:bc:d2:0a:e2:e6:
17:ad:83:a8:d3:da:1f:a1:5b:9f:73:a1:c3:8c:a9:
70:ec:90:c1:32:95:af:37:be:ed:f9:57:73:8e:31:
b2:d5:91:6a:b2:10:03:76:3f:fc:30:d5:f7:61:c9:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3D:2F:6B:60:79:4C:4E:29:AB:50:C9:F3:4D:47:E9:C6:43:5C:64
X509v3 Authority Key Identifier:
keyid:05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/Ij0va2B5TE4pq1DJ801H6cZDXGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e0:92:4f:19:4f:77:3a:13:25:16:0b:a5:b8:1c:4a:33:97:
35:24:a3:26:af:b2:57:e4:07:fc:a2:62:28:4f:dc:64:1a:b5:
b6:f7:52:4d:ee:5c:bd:40:77:29:f2:19:4b:a1:d8:9a:d4:06:
f0:5e:62:4b:78:74:67:19:82:e7:94:9d:aa:5a:53:08:01:7b:
98:8d:73:e6:aa:6f:2e:1e:53:31:3d:b2:d5:e3:d4:4b:d3:dd:
29:b9:6d:ca:db:fa:86:49:b9:46:e4:67:b8:2d:a8:d4:8a:c5:
05:c3:bf:40:a6:59:59:54:2b:de:96:a9:40:5d:81:b1:34:af:
df:7a:45:02:d7:88:46:e2:3c:60:c7:e0:f8:dd:99:e1:75:2e:
ff:60:a3:06:92:e4:fe:5d:dc:b0:4d:58:50:f1:c5:bd:c1:16:
8d:8b:06:4a:22:d3:0a:9b:de:c9:5e:19:6f:aa:e1:2b:04:5c:
6c:fc:e4:ea:dc:60:1c:7b:2e:c7:c4:82:55:3b:f7:1e:bb:38:
b4:bb:7c:c3:63:ca:94:27:35:74:fb:df:c4:57:62:a5:0b:6f:
af:96:d4:ed:26:01:77:af:13:46:6a:e3:d0:81:2b:c7:43:12:
fa:92:da:e8:ff:7f:86:a3:a4:c4:57:08:8d:7c:64:ea:90:4c:
c7:55:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 09:32:52 2023 by rpki-client on console-ams.rpki-client.org