Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/1ULuKv0HrrW3Od4UD85gAfpttAo.roa
File: 1ULuKv0HrrW3Od4UD85gAfpttAo.roa (raw, json)
Hash identifier: 810Tet3TSzfl3bDFILyIRsvh1KCRWeoiuUD1atZuxvw=
Subject key identifier: D5:42:EE:2A:FD:07:AE:B5:B7:39:DE:14:0F:CE:60:01:FA:6D:B4:0A
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018573221301D49D5CF381942C00814C3CE4
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/1ULuKv0HrrW3Od4UD85gAfpttAo.roa
Signing time: Mon 02 Jan 2023 15:38:10 +0000
ROA not before: Mon 02 Jan 2023 15:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211867
IP address blocks: 31.40.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:22:13:01:d4:9d:5c:f3:81:94:2c:00:81:4c:3c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 15:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d542ee2afd07aeb5b739de140fce6001fa6db40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:46:00:dc:bd:0d:57:3d:b2:5a:37:e0:f7:
46:1c:3a:9c:db:36:86:f8:06:87:2b:0e:0c:52:d1:
5e:6b:d2:62:b4:70:87:b8:81:85:a2:0e:f4:c8:c4:
d1:e1:92:4d:16:82:a5:28:57:49:76:c7:38:5c:ae:
39:f2:83:5b:95:4a:1a:72:fb:ce:97:0d:7e:df:b5:
4e:10:1d:b2:10:ba:dc:72:2f:70:13:6c:38:7a:66:
d5:a8:a3:48:8a:f0:5d:09:e4:ac:e8:55:91:a2:2d:
36:ae:5a:06:47:52:26:ec:82:64:96:92:4b:de:85:
aa:85:43:68:52:a1:ef:be:9e:dd:29:24:78:dc:cd:
d5:6d:0b:20:73:c8:04:a1:2b:8e:34:26:eb:28:ed:
5c:ed:97:d5:f6:95:dc:5a:42:fd:59:9b:d4:4b:a5:
c0:a7:a8:09:b4:29:6e:db:6f:35:22:99:a8:58:6a:
2f:d6:b5:60:d3:55:71:4e:1d:1a:e4:dc:f0:c3:4d:
e7:c4:c3:97:d4:d9:94:0f:9b:4f:d3:62:c3:0b:35:
ce:d0:87:52:58:d1:f4:2d:1f:e2:ae:c0:3a:7c:69:
b9:97:3a:0a:18:28:bb:45:8b:ad:15:bf:d7:3e:7f:
59:13:4f:1e:d9:06:c1:1d:33:da:39:a7:c6:73:a7:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:EE:2A:FD:07:AE:B5:B7:39:DE:14:0F:CE:60:01:FA:6D:B4:0A
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/1ULuKv0HrrW3Od4UD85gAfpttAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.142.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d4:cc:2b:79:90:1c:a0:7f:cd:e0:31:24:57:89:db:ce:fa:
12:18:7f:13:51:53:72:61:d0:94:8d:12:7b:5f:4c:43:c9:4d:
e1:e3:07:af:76:40:72:de:90:75:42:44:e9:fd:27:83:56:4d:
d2:84:e4:09:4d:bd:ef:af:63:e5:e1:d5:34:43:d5:05:f3:3d:
d4:0f:26:55:3d:53:5b:80:3f:99:e5:ac:8d:d6:78:49:60:d2:
dd:a1:e2:56:24:93:15:2e:a6:65:17:d9:1b:39:eb:80:ec:f2:
5d:b1:7c:16:31:5a:8b:59:92:89:48:32:d2:77:14:cf:d2:33:
31:08:9a:97:9e:8d:ff:49:35:d2:e0:36:1e:ca:f5:41:f7:10:
b6:75:ef:6d:2c:dd:e3:ff:65:76:3e:e8:7c:ac:58:db:26:7b:
3c:a5:95:d1:84:86:92:45:3e:f0:f6:25:9a:1a:51:60:c0:fe:
45:36:89:bf:76:fd:b5:ff:57:de:05:99:85:00:16:52:0f:15:
70:17:ca:a6:eb:ae:88:e6:d9:84:f5:eb:38:03:92:cb:dd:7b:
25:15:a1:78:8d:ad:eb:88:4a:1c:ac:67:94:07:38:d7:af:be:
3b:06:0a:44:b7:89:05:82:59:b2:cd:c6:ed:42:bb:5c:5f:39:
d7:86:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:35 2024 by rpki-client on console-ams.rpki-client.org