Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2SwDNlH_yy0QWH3iMNnJU_j-u4c.roa
File: 2SwDNlH_yy0QWH3iMNnJU_j-u4c.roa (raw, json)
Hash identifier: 9eIoetQGUZ3SBWZ6K3CF5VvUymRmseZU5w6Zclm4vpo=
Subject key identifier: D9:2C:03:36:51:FF:CB:2D:10:58:7D:E2:30:D9:C9:53:F8:FE:BB:87
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018BF14C752E5FD6BB681B33C6AED3F79ADF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2SwDNlH_yy0QWH3iMNnJU_j-u4c.roa
Signing time: Tue 21 Nov 2023 09:53:21 +0000
ROA not before: Tue 21 Nov 2023 09:53:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201159
IP address blocks: 146.120.171.0/24 maxlen: 24
31.148.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:4c:75:2e:5f:d6:bb:68:1b:33:c6:ae:d3:f7:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 21 09:53:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d92c033651ffcb2d10587de230d9c953f8febb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:a2:4b:1d:3e:1b:87:5d:cd:3f:4e:d7:a7:
d7:07:4b:91:2e:a4:97:28:ac:42:65:8c:54:c8:e2:
79:31:fa:44:a3:ca:59:bc:e2:fe:f1:c8:e9:88:c6:
6b:eb:77:07:b2:dd:86:51:93:ce:c2:48:7f:1b:8d:
f8:e8:be:b5:d3:c3:2b:e7:61:8d:37:7f:64:c3:4c:
89:c7:5f:c9:b9:15:15:4a:09:0f:f2:fb:a3:de:6d:
ea:87:50:6c:9d:f4:6f:34:74:6c:e2:53:38:ff:5c:
65:f0:ef:f9:b5:f0:9c:6a:bc:ab:26:e7:05:0c:77:
b4:13:be:d9:8a:98:84:de:80:bd:3f:f4:5e:87:43:
da:10:7b:85:8c:07:33:c4:20:7f:3a:4c:9f:92:24:
4f:7f:11:16:6e:c2:5a:42:5c:87:9f:ed:27:5e:56:
7a:b4:7b:33:bd:eb:bb:df:4f:fa:84:6b:70:a8:55:
aa:5b:26:34:ce:a8:be:0e:46:0a:ca:c8:88:bb:89:
e0:0d:ec:59:12:f9:3c:ca:0d:6d:b0:18:ce:c1:f0:
a8:f8:05:6b:c8:ad:6a:78:6c:df:ee:f4:5d:00:67:
13:e0:8c:f2:16:7a:3f:86:03:d2:64:6a:68:04:58:
07:5a:74:c2:99:52:01:e2:15:19:91:e9:5d:4b:0f:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2C:03:36:51:FF:CB:2D:10:58:7D:E2:30:D9:C9:53:F8:FE:BB:87
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2SwDNlH_yy0QWH3iMNnJU_j-u4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.170.0/24
146.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0a:7c:74:8d:03:e9:eb:d2:a5:70:f7:8c:f1:de:48:ab:82:
1b:a1:42:89:85:c7:d4:2f:00:3e:28:4c:3c:e2:0d:bb:56:ee:
50:63:13:eb:63:c1:e8:48:91:f6:d8:9b:ca:44:63:5d:97:50:
f7:f0:fc:55:92:fb:18:e7:90:a7:96:98:13:33:90:8b:69:5c:
68:5c:d2:88:1d:bc:d4:ca:ef:f8:bc:00:33:a5:e5:d3:ee:c2:
d2:bc:05:dc:ed:9a:2c:54:b2:7a:e5:5d:75:97:ad:0b:c4:03:
da:5a:cd:3f:b9:61:6c:01:6a:1f:82:43:5e:4f:37:d1:16:c0:
8d:8b:82:c6:0f:03:4b:fe:66:4c:3f:87:e2:3c:79:88:32:cf:
00:2a:4e:39:de:da:85:96:e1:17:33:0a:d2:a1:6a:f0:db:61:
b5:bf:92:3e:74:68:d3:a2:31:9b:31:fa:2d:8b:fd:36:06:fb:
0f:8e:36:86:97:a2:e0:5a:f4:09:65:61:d2:60:77:f0:da:4a:
d9:6f:13:f5:f7:83:5b:bc:53:41:d3:42:83:54:0b:62:95:c8:
51:1e:25:5b:d2:c4:a8:ca:bf:b0:35:56:20:ab:5a:98:2e:9e:
d9:42:89:68:7c:3b:8d:1c:6e:db:57:ac:61:24:7b:95:34:ce:
42:a8:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:30 2024 by rpki-client on console-fra.rpki-client.org