Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/EFVIDuPrsrMDz_R6EUFdwnXGYJs.roa
File: EFVIDuPrsrMDz_R6EUFdwnXGYJs.roa (raw, json)
Hash identifier: dR0u3UmDmMCFQkg1RV/CKXouxQOwbbIt5E4vaR/+aUg=
Subject key identifier: 10:55:48:0E:E3:EB:B2:B3:03:CF:F4:7A:11:41:5D:C2:75:C6:60:9B
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018573220AC690077331A168B0D4992B8ECE
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/EFVIDuPrsrMDz_R6EUFdwnXGYJs.roa
Signing time: Mon 02 Jan 2023 15:38:08 +0000
ROA not before: Mon 02 Jan 2023 15:38:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47629
IP address blocks: 31.40.176.0/23 maxlen: 23
31.40.174.0/23 maxlen: 23
31.40.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:22:0a:c6:90:07:73:31:a1:68:b0:d4:99:2b:8e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 15:38:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1055480ee3ebb2b303cff47a11415dc275c6609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:db:43:af:e7:77:16:00:aa:0a:74:8a:22:
c5:34:b2:3c:69:fd:cb:0e:e9:1d:73:9b:7f:3c:fb:
41:0a:e8:3e:03:98:64:d9:68:00:15:59:10:a8:43:
87:18:91:24:a5:98:28:ac:e5:33:2e:68:c6:2f:f7:
b1:99:47:f4:83:6f:1b:38:32:93:80:96:13:7a:8c:
ec:a0:f1:92:37:e6:72:c3:42:fb:22:23:8a:5c:7d:
8f:b2:fc:9e:af:70:50:a4:b7:96:b2:e5:dc:67:b5:
ad:fa:90:89:78:71:3b:ab:6b:80:dd:37:34:48:7b:
43:bc:25:91:bc:59:4e:d3:dc:15:62:1c:34:91:42:
61:a7:ad:17:97:13:fb:62:44:fb:b5:52:da:0a:f7:
f1:2c:38:9a:f9:f2:c4:8a:33:cf:34:76:6e:4d:a1:
45:46:7b:4e:b2:a1:e2:14:e9:92:85:79:f5:fd:c6:
61:55:c9:0a:cf:6a:e1:cf:c5:4b:3c:b5:e9:37:67:
c2:7e:c3:44:78:c3:ad:2f:0c:81:60:06:f9:09:95:
46:91:c8:c7:ee:2c:19:71:62:81:9e:89:9c:09:35:
db:59:37:1b:41:c0:09:03:b5:2d:7b:a6:7f:5a:8b:
df:3b:f5:21:32:1d:d1:dd:84:13:74:7b:4a:f4:6e:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:55:48:0E:E3:EB:B2:B3:03:CF:F4:7A:11:41:5D:C2:75:C6:60:9B
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/EFVIDuPrsrMDz_R6EUFdwnXGYJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.174.0-31.40.177.255
31.40.184.0/22
Signature Algorithm: sha256WithRSAEncryption
32:db:47:55:b8:40:b1:51:67:f2:8d:83:1c:b3:59:ea:fe:ee:
94:6d:8f:11:c9:69:49:bc:14:e7:64:f7:39:65:dd:5c:d2:2d:
fa:34:4b:72:2f:aa:cd:85:00:b5:6e:ae:4a:eb:82:6f:b2:85:
f1:86:bf:93:70:9b:d8:fe:77:cd:40:10:79:1d:6c:58:fb:da:
f7:89:3e:0f:d9:92:fe:5d:ec:1c:92:da:71:9b:ee:42:67:07:
8e:d1:04:b8:7a:fd:6a:cd:2d:8f:47:c0:41:75:c9:6f:e4:b3:
49:9c:2a:31:f9:e8:e3:4d:24:5f:01:c1:94:1b:66:f3:16:15:
40:b6:24:99:e5:72:eb:71:8a:5e:49:74:83:81:3a:b9:c2:3e:
1e:f5:df:3a:13:d2:d9:c1:16:d7:f5:f8:ac:8e:dc:40:d8:02:
75:19:08:6f:fb:40:80:a0:df:ff:21:4e:28:7e:31:4b:6f:58:
88:9c:1b:ac:8c:4c:d4:e6:6c:24:aa:25:38:46:40:2a:1b:b4:
a5:10:91:51:f6:dd:d7:47:32:5e:4a:b5:e5:c4:44:59:89:31:
00:10:9c:eb:c7:bd:ca:dd:45:3f:05:80:74:63:62:99:ea:d9:
b8:e7:19:58:fe:18:b7:81:12:36:85:b3:6f:8d:5c:a4:a1:97:
2c:3e:a2:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org