Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Cseik29DGyz_vSNmQx14pB8SwBs.roa
File: Cseik29DGyz_vSNmQx14pB8SwBs.roa (raw, json)
Hash identifier: 5WSsc0Ih/IDR7nKyJ1my5i/5Kaz4/TVUENQtsKZGBgw=
Subject key identifier: 0A:C7:A2:93:6F:43:1B:2C:FF:BD:23:66:43:1D:78:A4:1F:12:C0:1B
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01856DB88FB4B8D75573754E2C06FC83C524
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Cseik29DGyz_vSNmQx14pB8SwBs.roa
Signing time: Sun 01 Jan 2023 14:24:50 +0000
ROA not before: Sun 01 Jan 2023 14:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21170
IP address blocks: 31.184.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:8f:b4:b8:d7:55:73:75:4e:2c:06:fc:83:c5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 14:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ac7a2936f431b2cffbd2366431d78a41f12c01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:3b:eb:aa:42:f2:7c:3e:05:d0:4f:99:3e:
61:30:28:28:6e:42:fa:6b:d4:5c:ce:0e:43:cf:1d:
63:d8:dd:77:e3:83:48:7f:bd:58:ed:1a:98:e8:6b:
68:b7:11:5b:b4:ea:11:6d:fa:87:eb:21:05:9b:65:
b3:5e:5b:57:46:2e:4d:0e:4f:12:49:5b:f3:0b:86:
60:f0:2a:17:f9:ce:79:ee:bf:4c:79:d0:c6:d6:ae:
89:ce:e3:e3:7b:5e:f9:1a:2a:69:ab:16:59:c0:73:
23:ad:27:f0:50:d0:6d:bd:81:64:72:ec:63:5d:29:
ba:8a:88:83:08:a3:bd:35:60:47:a3:0a:bb:11:c8:
fc:9d:8b:25:d0:32:e6:f5:83:03:f4:eb:71:f6:e0:
21:8a:a5:0f:46:c6:1e:4f:87:a4:d8:dc:a0:f1:2b:
32:ff:93:69:64:06:b2:38:7e:5f:c2:7d:63:ba:c5:
63:c0:42:51:70:0e:3a:61:14:82:28:13:3b:aa:a7:
a1:8d:05:66:70:20:57:c8:95:4d:a7:b1:9f:3e:4f:
ba:78:99:eb:93:31:b2:e2:86:fa:25:06:bd:ed:f0:
fa:3b:1b:b3:5a:b3:b8:19:a7:a7:33:8c:1c:86:7d:
80:4f:64:ec:d3:e9:cc:2f:9c:e1:0e:94:70:0c:7b:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:A2:93:6F:43:1B:2C:FF:BD:23:66:43:1D:78:A4:1F:12:C0:1B
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Cseik29DGyz_vSNmQx14pB8SwBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d7:cb:b7:7a:7f:d0:96:99:ac:08:39:9b:b4:ed:70:39:56:
4c:61:da:39:25:1a:56:41:86:b5:f1:2a:35:4c:f6:a8:5a:d2:
a2:a2:0e:35:ab:c5:06:98:ff:99:69:b5:c8:82:56:b1:dc:68:
50:e5:81:02:57:7d:2e:3d:1a:1d:2f:5d:fd:24:77:f0:19:cc:
77:e5:7f:bb:76:48:83:84:17:7d:02:76:d0:3b:5a:d5:3f:69:
26:54:5f:44:e4:26:8e:0f:33:af:5b:66:67:a7:b6:49:1f:7c:
af:ef:fe:36:a6:f3:d8:8e:e4:24:25:d7:c7:d3:55:02:a7:c7:
d5:78:b8:ef:8e:7b:62:de:06:67:ae:da:36:92:3a:3f:cc:ab:
3a:fc:79:2f:eb:40:34:e2:8a:55:63:39:b3:5d:69:6c:17:11:
ca:df:c6:a2:71:29:ce:d3:34:2f:ab:28:99:78:15:64:9c:9e:
38:0e:d9:6a:5c:d1:56:a4:fd:78:1b:64:fe:4b:f9:70:c0:1d:
37:f2:a3:24:aa:d2:80:6b:e8:7b:47:1e:34:63:a6:59:90:62:
6b:05:3a:5d:25:c9:bf:35:50:0a:bf:c7:e5:b3:8a:22:f5:aa:
c9:04:22:c1:57:d3:e0:be:3e:dd:01:ba:22:79:82:1e:06:3d:
23:fc:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:52 2024 by rpki-client on console-fra.rpki-client.org