Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T4pvxSOvd4dk_XZqz9LtTB-02DE.roa
File: T4pvxSOvd4dk_XZqz9LtTB-02DE.roa (raw, json)
Hash identifier: C5WiBwRAoGVnMQeIFgivawzf80NQ1aR8EMI9SE1QvZs=
Subject key identifier: 4F:8A:6F:C5:23:AF:77:87:64:FD:76:6A:CF:D2:ED:4C:1F:B4:D8:31
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956FA95B9730022858EF0F2E386451
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T4pvxSOvd4dk_XZqz9LtTB-02DE.roa
Signing time: Mon 02 Jan 2023 03:45:19 +0000
ROA not before: Mon 02 Jan 2023 03:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61031
IP address blocks: 31.148.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6f:a9:5b:97:30:02:28:58:ef:0f:2e:38:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f8a6fc523af778764fd766acfd2ed4c1fb4d831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:13:62:d9:ca:d9:f5:5e:17:a9:21:3e:f1:
a9:a9:e6:30:13:44:af:48:bc:31:48:c8:f0:38:e0:
2d:0c:6c:26:a2:b8:6c:0d:3d:a9:4f:d6:68:32:b0:
22:b5:a1:ee:3a:18:7e:95:68:aa:9d:9d:39:8f:3e:
b5:21:6e:65:f8:5e:d3:37:92:af:ad:6c:16:7c:9e:
df:01:5c:90:36:92:60:47:bb:b2:8a:92:56:d9:2b:
d1:ce:75:3d:0b:5a:88:0e:33:38:c9:0e:56:8f:d1:
fb:96:e5:a3:e5:eb:bf:14:7d:2c:71:50:f7:7d:8c:
d8:f6:43:8f:81:1f:6f:1a:f4:1d:b1:dd:f0:f6:31:
d0:c2:26:44:3a:a8:0a:2a:40:60:6a:d2:83:81:12:
d6:1a:2d:16:e9:2a:5a:b6:f6:87:0f:4a:80:b7:0b:
0b:17:1f:67:09:c2:fa:7f:ef:1c:91:74:cc:92:8e:
34:4a:fc:d2:ab:0b:6f:04:ec:ae:d7:25:49:cc:d6:
88:9d:21:5d:36:29:a1:4c:73:be:21:50:3e:77:dc:
60:3e:67:54:cf:9b:03:12:2e:07:99:4d:45:8a:3a:
7b:4b:64:ba:64:ce:f9:31:5a:c4:22:2c:39:56:3c:
fd:90:97:35:65:1a:85:4f:63:9d:6f:9b:0f:18:0e:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8A:6F:C5:23:AF:77:87:64:FD:76:6A:CF:D2:ED:4C:1F:B4:D8:31
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T4pvxSOvd4dk_XZqz9LtTB-02DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:5a:82:f0:ce:64:14:b1:c9:db:a4:f4:b2:eb:9c:ef:7a:0c:
8f:a9:00:cc:b7:e6:0b:f6:d3:12:dc:3f:6f:be:2c:fa:a5:e0:
23:bf:2b:ee:ed:93:6c:6b:d3:d5:5b:ae:83:0d:c3:8a:15:14:
b3:0f:18:3d:db:bf:4f:6c:15:7e:31:b5:6b:d9:ee:9b:87:c6:
e4:6d:05:7f:c2:8d:e1:d5:3f:e6:10:f4:50:29:02:32:6b:64:
f5:71:60:13:33:9b:dd:dc:c7:34:d7:72:f1:7d:b7:f8:c3:83:
68:31:32:2d:fb:d1:b0:b3:6a:a0:56:12:23:01:1d:e9:16:99:
2d:ac:f0:bf:a0:20:f1:d8:a1:59:6d:92:1f:26:b1:50:90:fe:
04:2a:00:86:26:b5:1d:7c:c3:c3:ac:24:be:4a:46:de:f6:8f:
d8:30:81:c0:1f:3e:9a:c5:e1:af:4f:be:c2:2b:56:03:99:41:
38:5a:51:08:d2:39:97:88:8a:93:7a:6d:47:ab:a4:20:06:74:
ce:67:d7:aa:26:c0:8a:c5:14:2d:01:0d:da:54:31:70:a4:80:
0d:39:c6:3b:27:bd:18:7f:46:11:86:3e:fc:75:bf:cc:8a:cd:
6f:43:61:4a:c1:c8:70:b9:b6:25:2a:a0:f4:30:14:d9:24:5c:
d7:08:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:00 2024 by rpki-client on console-ams.rpki-client.org