Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/lYgFddP4VtJhyKyxNm_9v3COy_w.roa
File: lYgFddP4VtJhyKyxNm_9v3COy_w.roa (raw, json)
Hash identifier: 7CHVvVPAU7F3S9vbYyu6lKNyMWOH5sbcffAcAaVDy6Y=
Subject key identifier: 95:88:05:75:D3:F8:56:D2:61:C8:AC:B1:36:6F:FD:BF:70:8E:CB:FC
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 0187EFFC58E066DA0D1B025F0CBA32F6F125
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/lYgFddP4VtJhyKyxNm_9v3COy_w.roa
Signing time: Sat 06 May 2023 07:35:05 +0000
ROA not before: Sat 06 May 2023 07:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50330
IP address blocks: 31.220.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ef:fc:58:e0:66:da:0d:1b:02:5f:0c:ba:32:f6:f1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: May 6 07:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95880575d3f856d261c8acb1366ffdbf708ecbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:5c:70:36:e3:b4:ed:aa:ba:2f:42:f9:f4:
68:81:a8:57:6a:32:b4:e1:7d:e5:3d:8b:b5:c4:75:
35:fe:f0:4b:6c:ed:3f:dd:68:2e:b7:dc:5f:f0:69:
c9:44:61:df:52:2b:94:ff:8a:29:c5:d7:e8:9d:b0:
8e:c8:f7:a3:3b:ac:ee:93:8c:3e:f8:02:f1:f6:43:
16:d4:c4:8e:67:a2:b9:ab:9a:78:2f:76:2f:93:eb:
f1:bd:a0:9d:cf:32:c0:ca:3c:71:4c:ba:8e:81:ae:
9e:46:10:df:24:24:93:d9:0f:4f:c1:82:6e:de:e6:
e5:7a:05:cc:10:51:9f:79:31:ed:72:58:c6:b4:4c:
10:b8:89:4a:31:1f:09:b9:b6:e7:c7:c2:3c:5e:38:
a7:31:a1:9e:82:6e:a5:5f:77:c4:20:1b:10:94:fd:
82:3b:0a:1e:cb:41:e8:6f:52:d6:e6:87:07:73:e3:
8c:7c:82:7b:d1:bb:3c:73:8d:35:92:0f:cb:69:03:
b5:69:40:20:8e:7e:45:61:a3:62:7f:87:a4:41:7f:
1a:02:eb:d7:c9:bc:59:a9:87:b2:74:d1:ff:b6:3d:
1f:f6:b6:39:de:8f:2e:0c:9c:a2:ec:6a:ec:ad:a7:
3d:5b:07:7c:61:ff:b1:34:1a:d0:48:67:ac:d1:4f:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:88:05:75:D3:F8:56:D2:61:C8:AC:B1:36:6F:FD:BF:70:8E:CB:FC
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/lYgFddP4VtJhyKyxNm_9v3COy_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e4:18:72:1f:c8:d8:05:02:a3:f4:65:e0:6f:cc:9e:40:a4:
78:1e:2c:0c:22:4c:4c:88:3e:68:2e:b3:7c:6c:4a:1b:fc:ee:
6a:f7:73:59:da:e1:77:6f:6e:7a:6e:1c:e4:24:24:e9:7d:eb:
28:01:04:ed:dc:57:49:ac:0b:a4:9c:a4:68:04:74:b2:cc:2c:
6e:63:e1:09:6b:5c:cd:66:14:07:f6:71:1d:e1:44:2a:ec:ff:
3e:9b:c6:08:36:cb:bb:67:eb:fa:6f:80:fc:24:fb:34:e5:de:
c5:1c:4f:06:fb:a7:ba:29:92:2c:2a:da:5b:58:29:a7:d8:57:
3e:93:9c:31:8e:69:5c:1a:6f:19:29:8c:58:5a:59:c7:85:82:
8a:8b:14:92:cc:bf:b2:ce:0a:21:15:05:5a:90:8f:aa:a6:1d:
9e:f1:74:5d:92:92:1e:7c:78:b8:8b:40:0f:7a:7b:5b:7d:92:
18:6e:03:1f:63:5e:72:bc:eb:08:a7:cb:40:f0:5d:69:63:45:
3b:5f:ed:90:32:1f:4d:70:1e:6c:d9:36:ab:29:46:33:26:99:
6a:1b:ae:bf:75:8f:32:68:9c:4d:87:32:ca:36:54:42:de:7e:
c2:9e:d3:0a:69:dc:74:6d:a3:ed:17:b9:e0:72:0e:b1:51:a4:
ab:e9:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:46 2023 by rpki-client on console-ams.rpki-client.org