Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/mC0o9VF_oj5NM2X8mKC4z-bPeew.roa
File: mC0o9VF_oj5NM2X8mKC4z-bPeew.roa (raw, json)
Hash identifier: Sw3mn4WHIvz9LhspMzHROnHSMQOd0kZhsKPn5lfwP4w=
Subject key identifier: 98:2D:28:F5:51:7F:A2:3E:4D:33:65:FC:98:A0:B8:CF:E6:CF:79:EC
Certificate issuer: /CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Certificate serial: 018B865E1A1669DB91C33EB3B354AC1C6A0E
Authority key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/mC0o9VF_oj5NM2X8mKC4z-bPeew.roa
Signing time: Tue 31 Oct 2023 15:33:15 +0000
ROA not before: Tue 31 Oct 2023 15:33:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 31.193.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:5e:1a:16:69:db:91:c3:3e:b3:b3:54:ac:1c:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Validity
Not Before: Oct 31 15:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=982d28f5517fa23e4d3365fc98a0b8cfe6cf79ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:2d:36:96:f6:8a:09:7b:fc:d5:c1:1f:71:
05:3c:c0:3d:b3:e1:96:36:ec:e4:24:2e:95:16:85:
c5:75:b4:82:4f:ea:93:77:1a:98:74:e6:49:64:2e:
c1:0c:13:0a:3d:f7:a6:19:40:84:42:60:b3:4e:9c:
44:a5:c3:e8:5b:41:e9:a5:e5:a6:19:0b:6c:47:76:
c9:40:f9:d0:a5:ab:f4:9c:1c:4a:1d:63:01:c8:a5:
0e:6d:cf:96:ed:04:96:8b:63:c8:dd:6a:73:9d:cc:
03:84:d4:0c:21:9a:3e:e5:8a:5f:85:f8:eb:41:dc:
14:45:5c:5b:94:63:b6:b4:47:9d:16:35:55:21:05:
c3:ab:3b:8a:26:03:bb:d6:8e:2e:b9:7f:1b:20:ee:
77:4d:35:0c:54:f2:a0:8c:ea:b2:09:c3:61:ec:94:
49:da:9b:96:a7:32:a3:d2:14:bb:a3:d5:eb:e8:86:
93:a7:76:9d:10:a5:a4:69:75:3a:51:4d:a7:65:30:
30:8b:9a:65:d9:17:78:8d:53:3e:61:63:96:a7:2c:
c0:d2:0a:60:70:85:08:05:ed:65:08:0a:35:b3:4c:
ac:df:39:be:1b:40:c7:59:34:b2:25:6f:a6:13:8d:
72:cf:05:5d:73:5b:11:02:97:e4:be:b0:5b:82:2a:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:28:F5:51:7F:A2:3E:4D:33:65:FC:98:A0:B8:CF:E6:CF:79:EC
X509v3 Authority Key Identifier:
keyid:05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/mC0o9VF_oj5NM2X8mKC4z-bPeew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:da:ec:1a:cc:7a:e2:58:d0:56:fe:5e:19:c5:64:6c:f7:ac:
b6:62:77:53:33:14:81:10:31:b0:b3:4b:06:a1:00:b9:a7:bc:
1f:5c:bc:03:5e:e0:1d:30:ca:cf:57:dc:7c:f0:9d:c1:26:6e:
c0:3b:7f:64:ef:e0:8e:b1:56:3a:2b:56:65:63:a1:6b:07:35:
94:fd:27:b5:56:fa:fd:e4:82:c1:9d:37:23:51:a8:ab:3f:df:
90:fb:8c:50:b2:56:bd:9f:e5:dd:cd:44:a6:34:8e:8e:0d:fa:
5c:f4:9c:e5:4d:40:6d:5d:ea:fa:2e:55:08:83:0b:80:82:4d:
a1:db:ac:81:30:de:2a:60:d6:21:87:8c:df:39:65:7f:cc:fe:
80:74:66:f2:90:3e:5c:a3:7a:cc:8a:e3:d1:c5:17:0e:5c:e4:
46:75:00:34:42:87:84:76:8e:99:99:a5:5f:83:0e:c4:15:d9:
ff:92:93:38:cb:99:e1:8d:e0:0b:ac:f8:c7:35:05:5c:0a:52:
f9:89:66:a6:85:8a:00:22:68:3c:01:66:d5:8c:9c:de:3c:17:
3a:2b:e1:cd:13:2b:3d:09:73:bf:41:10:de:5b:95:1c:f3:19:
b7:a2:fb:22:9a:04:c1:98:6b:03:9b:d2:e9:1c:1c:fe:f8:df:
be:3e:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 11:57:58 2023 by rpki-client on console-fra.rpki-client.org