Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/rDKInLTcWZ6pzeBVeM8TN_bEzS4.roa
File: rDKInLTcWZ6pzeBVeM8TN_bEzS4.roa (raw, json)
Hash identifier: w0cYHLiE1uvahBnUaCoBMxOgVIbKlzYTp3OmuLWVZ+k=
Subject key identifier: AC:32:88:9C:B4:DC:59:9E:A9:CD:E0:55:78:CF:13:37:F6:C4:CD:2E
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 018B84D383AAD9903A7133D550258C436D49
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/rDKInLTcWZ6pzeBVeM8TN_bEzS4.roa
Signing time: Tue 31 Oct 2023 08:22:16 +0000
ROA not before: Tue 31 Oct 2023 08:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57292
IP address blocks: 31.184.130.0/23 maxlen: 24
31.184.130.0/24 maxlen: 24
31.184.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:d3:83:aa:d9:90:3a:71:33:d5:50:25:8c:43:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Oct 31 08:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac32889cb4dc599ea9cde05578cf1337f6c4cd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:c1:c6:f0:94:0e:ee:a0:a0:8f:91:65:31:
d2:ad:12:5c:99:ce:48:ff:8c:8a:ba:f7:1e:b2:54:
c6:26:10:7e:ee:ac:b0:ed:0f:06:4a:d2:35:b7:16:
9e:51:9e:26:45:83:81:b2:81:6b:a0:c1:26:86:d9:
35:a3:d2:e9:1e:8a:1d:46:ed:18:5e:2f:f9:db:61:
1e:7a:78:5e:48:a8:8d:4d:89:1d:0c:27:7e:de:a8:
f2:ab:3c:b7:df:c2:43:ce:7c:8a:e8:98:50:e7:68:
89:de:e1:f6:7b:e6:19:68:36:87:7d:fb:61:e2:33:
77:e9:ba:8e:70:4f:30:00:92:4f:46:d2:67:04:f3:
c7:54:98:d5:e4:36:f2:c3:64:9a:35:6e:e6:cc:c7:
5d:4d:25:99:80:e1:e0:b9:3b:1c:79:70:fa:1a:fd:
23:aa:b9:c1:a9:26:89:66:2e:de:5a:d7:25:6c:07:
b7:ef:54:79:d9:74:b0:04:e6:c7:fc:da:52:51:52:
cf:b0:d4:61:14:7f:d8:1f:0e:eb:f8:5a:39:16:c8:
67:a5:23:ef:e3:09:5a:d7:22:7a:5f:a2:a8:7a:1d:
2f:35:a0:7f:41:c9:10:4a:5f:b7:ac:1f:9b:d1:d5:
bd:99:c6:c3:0e:8b:68:ef:bd:7e:4c:ce:4d:1a:79:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:88:9C:B4:DC:59:9E:A9:CD:E0:55:78:CF:13:37:F6:C4:CD:2E
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/rDKInLTcWZ6pzeBVeM8TN_bEzS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.130.0/23
Signature Algorithm: sha256WithRSAEncryption
42:6c:d2:6c:53:e3:63:a8:8b:27:a9:d4:a8:5a:29:af:e2:af:
57:c3:ee:98:be:2d:18:9c:dd:03:a3:cc:ee:8d:fb:5c:83:df:
a6:3f:ba:47:2b:cf:8d:6d:73:3b:6d:d4:df:f7:10:94:f9:36:
eb:18:96:ab:45:0c:97:f5:e6:70:e3:6a:8f:3b:36:bd:87:c3:
7d:54:58:55:50:2c:ab:8e:9a:3d:4e:05:c4:84:e3:18:dd:d4:
1c:fa:52:15:42:ae:c5:af:9b:02:04:96:85:f8:3c:37:ef:48:
82:b9:39:00:f7:3e:65:77:07:2e:77:f7:08:2b:b9:e8:70:5a:
bf:d0:0c:fd:5e:91:3a:d1:70:fa:de:70:22:c4:51:cd:fa:e3:
c0:c9:5a:dd:0f:28:00:b8:70:0c:92:c5:fa:f3:d6:ce:af:1b:
3c:22:6f:66:59:6d:d5:2f:f8:19:7b:26:ef:cb:88:47:f3:20:
0a:65:48:22:53:a8:29:d2:b8:8d:53:dd:a7:8b:c5:89:3d:ba:
36:5b:20:d1:3a:61:43:b1:a4:7f:1f:24:0a:95:81:a2:aa:5e:
52:4d:82:ac:57:0f:74:cc:d9:e2:03:44:f6:6d:ac:fb:1a:b1:
45:76:97:fc:89:38:4f:9d:fc:44:ee:98:01:68:cb:d2:81:6f:
2b:ae:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:52 2024 by rpki-client on console-fra.rpki-client.org