Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/CJP6MoOdLu3B7HmUBt1Ztu-4EIU.roa
File: CJP6MoOdLu3B7HmUBt1Ztu-4EIU.roa (raw, json)
Hash identifier: GWThjs0DI5/UZsJZA7oJ4znq7RQOtIF7x4FN46h/HQk=
Subject key identifier: 08:93:FA:32:83:9D:2E:ED:C1:EC:79:94:06:DD:59:B6:EF:B8:10:85
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018573220B6D1E3D9D2D1BB14143C6502EA3
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/CJP6MoOdLu3B7HmUBt1Ztu-4EIU.roa
Signing time: Mon 02 Jan 2023 15:38:09 +0000
ROA not before: Mon 02 Jan 2023 15:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48882
IP address blocks: 31.40.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:22:0b:6d:1e:3d:9d:2d:1b:b1:41:43:c6:50:2e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 15:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0893fa32839d2eedc1ec799406dd59b6efb81085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:29:0b:8f:3d:7e:49:02:e1:a4:0f:7c:df:
8a:7b:af:41:ae:6b:4c:b8:65:08:de:e7:a2:76:5e:
60:b4:a2:ea:6a:42:01:4e:23:70:fe:09:f2:3b:8f:
6a:8a:66:9b:c8:35:7b:56:99:a8:e8:27:a7:b4:ca:
45:7a:57:50:9a:b8:45:15:c0:59:2e:92:65:89:f7:
41:a7:4c:6f:ac:a3:5b:ca:cf:dc:98:bc:67:d9:e9:
80:a5:b2:ed:ec:d1:02:9a:eb:80:84:7f:9f:ad:94:
1e:37:fc:55:5c:3a:15:93:b5:b0:00:4b:7b:f8:6c:
42:db:ad:ad:73:ea:b9:ea:71:06:32:41:6d:80:31:
82:4a:3f:b4:0d:95:b5:74:fc:ae:85:42:bf:1b:18:
77:ca:f2:e0:2b:f9:2f:19:ef:60:18:5c:64:b7:2e:
1d:37:98:a1:96:b4:d4:e7:cf:57:70:1e:74:ee:8a:
bd:b1:20:d4:2b:e1:44:af:af:99:c8:65:66:3a:4f:
fd:3f:32:c2:08:59:4b:93:be:68:1c:de:23:74:e2:
41:2b:16:01:98:99:3c:62:c2:a6:de:86:e6:da:65:
72:85:94:ce:84:87:67:0f:24:6b:d1:71:52:63:18:
77:ea:9f:9c:c3:38:64:58:39:05:c3:ea:3b:c0:2f:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:93:FA:32:83:9D:2E:ED:C1:EC:79:94:06:DD:59:B6:EF:B8:10:85
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/CJP6MoOdLu3B7HmUBt1Ztu-4EIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.156.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6c:82:6e:b4:8d:48:e7:60:9b:7a:7e:b8:61:0f:79:e7:8b:
79:c0:d5:2f:40:d9:c2:40:cb:ae:ea:dd:d1:4c:5a:7e:4e:ea:
e9:f6:8c:e8:b0:33:c9:ae:36:4a:4b:12:6f:e2:97:e8:72:58:
c8:ad:a3:4c:85:43:e6:d7:50:f4:71:9e:8b:8a:f0:c4:d0:5c:
85:09:cf:c4:89:1f:4c:c3:8b:6b:17:11:d3:93:82:c0:ef:61:
74:b1:5d:a8:83:4f:fb:0b:2f:14:25:32:2e:06:1e:d8:64:0f:
05:04:58:87:0e:e8:33:b8:e0:8d:8c:a6:c6:42:7e:02:a9:0c:
fe:7a:92:a7:b6:f2:67:a5:c5:c5:b6:56:7c:ec:69:91:18:71:
df:e8:f5:9a:2e:b4:f9:e9:6c:0f:d4:cc:2b:c5:22:e0:29:3e:
a0:ec:fb:df:71:e7:a3:d2:42:43:77:94:9b:f1:86:29:37:65:
19:74:98:dc:89:6b:18:33:37:b2:60:a5:3f:3e:13:c3:73:76:
f2:a1:d3:c0:b3:bb:66:89:33:12:60:47:5a:25:c1:13:dc:2b:
63:e8:b9:ec:8a:60:80:6c:96:7f:d4:c0:0a:4a:25:60:b5:0e:
8e:0a:82:92:3f:22:69:74:90:c2:bc:b3:b6:5c:04:f9:3d:d4:
59:26:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:35 2024 by rpki-client on console-ams.rpki-client.org