Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/N9qjD3g4OPVeDk_Mt5c4V1wTz4o.roa
File: N9qjD3g4OPVeDk_Mt5c4V1wTz4o.roa (raw, json)
Hash identifier: t18DtKw8UFfFjkiVFT6GqWH6NzRjITpNAC4jKgxCgQE=
Subject key identifier: 37:DA:A3:0F:78:38:38:F5:5E:0E:4F:CC:B7:97:38:57:5C:13:CF:8A
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01856DCACB4DD7A498E0896AD98D0CD977E8
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/N9qjD3g4OPVeDk_Mt5c4V1wTz4o.roa
Signing time: Sun 01 Jan 2023 14:44:44 +0000
ROA not before: Sun 01 Jan 2023 14:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 31.133.92.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:cb:4d:d7:a4:98:e0:89:6a:d9:8d:0c:d9:77:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 14:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37daa30f783838f55e0e4fccb79738575c13cf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b7:c7:87:73:62:7e:53:e0:fd:ff:75:79:67:
33:1b:ed:a8:9c:ff:d5:c2:63:7a:5c:a4:8a:55:09:
e2:c1:ac:6d:1c:4d:a4:79:da:45:1f:7a:82:ff:9f:
30:60:e7:05:d2:66:71:be:85:06:ed:3f:42:4d:67:
17:75:24:5a:88:80:e9:e3:74:34:f3:6e:41:bd:f8:
10:84:5c:3e:8a:05:b7:91:61:24:26:a0:70:fc:22:
b0:14:1e:3f:82:64:85:fc:ef:24:e8:06:c9:0e:55:
7c:b6:0c:a7:42:8d:13:73:fc:dd:10:2d:bb:d3:76:
83:62:d0:39:9e:14:aa:3f:b7:b1:b7:49:b7:35:cb:
34:03:0f:72:52:a0:18:fb:f9:2d:5a:0c:6f:e7:db:
a7:b5:cf:8c:b5:b6:bf:08:2c:22:66:0c:1d:ce:f1:
26:5b:9e:b8:e7:2f:68:2f:51:eb:ce:60:e9:24:0d:
a0:fc:ba:cc:70:57:63:a1:06:6f:eb:aa:2c:29:b8:
14:86:39:d2:ed:11:1e:33:b8:5c:8f:77:f9:be:4d:
0a:e1:59:b0:2f:a6:ed:d0:b8:c7:b4:46:b3:10:7e:
81:70:91:cf:4a:1f:45:71:ad:7a:cf:0d:a7:bc:a5:
ab:04:28:c6:6b:ab:d6:15:bc:5a:ae:8f:2d:c8:d2:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:A3:0F:78:38:38:F5:5E:0E:4F:CC:B7:97:38:57:5C:13:CF:8A
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/N9qjD3g4OPVeDk_Mt5c4V1wTz4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:13:b0:22:cb:40:02:e1:48:35:a0:c7:5e:8e:4c:3c:57:30:
5f:22:fd:62:0c:db:8e:d7:f5:5b:7e:9f:0e:f3:8b:bc:d1:64:
e8:e1:a8:ec:f3:dd:f0:96:dc:a4:52:d9:2b:42:98:2e:de:21:
0a:b8:be:28:a9:c8:bb:92:bf:e2:a5:0a:29:6f:33:98:b8:e0:
6f:bb:79:03:73:c1:51:6e:57:83:cd:15:89:92:dd:0f:f1:f1:
16:7b:1e:de:c3:e3:f6:b0:8e:67:8b:b0:99:e5:31:01:88:d4:
79:d0:6e:9a:5b:f6:28:7d:bc:d5:e7:9c:d5:38:02:f2:46:44:
30:2a:3e:a8:3d:e9:a4:56:7d:30:e4:b4:a9:11:5a:0d:81:80:
8d:a3:9e:b2:4d:de:0a:d1:3b:f1:32:43:d0:ff:ab:51:d8:57:
46:b5:3a:a6:e3:1c:13:71:da:4f:1e:b4:f1:b8:6a:e3:98:cd:
34:f9:8e:3c:08:86:27:d0:56:a7:d9:97:13:a1:63:92:45:b3:
1a:b0:db:41:2c:c4:93:64:c1:32:34:a9:5b:bb:c1:f6:13:37:
82:c1:cb:65:26:13:a8:85:9d:79:0f:26:0a:df:e5:d6:b8:d3:
0a:6e:bb:d6:7c:2d:bc:4c:b2:a4:ef:10:3f:7c:68:86:13:7a:
bf:be:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:45 2023 by rpki-client on console-ams.rpki-client.org