Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Gjl2F7krzOL8VIKgpVIpV2aAMMo.roa
File: Gjl2F7krzOL8VIKgpVIpV2aAMMo.roa (raw, json)
Hash identifier: xiA9nsFqR5yzKyoe14OLzucfrSg73oszkqBwLUlv9k4=
Subject key identifier: 1A:39:76:17:B9:2B:CC:E2:FC:54:82:A0:A5:52:29:57:66:80:30:CA
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01860260409716A7BA17FE6E8FE339A9125B
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Gjl2F7krzOL8VIKgpVIpV2aAMMo.roa
Signing time: Mon 30 Jan 2023 11:11:47 +0000
ROA not before: Mon 30 Jan 2023 11:11:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57679
IP address blocks: 31.40.152.0/24 maxlen: 24
31.40.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:60:40:97:16:a7:ba:17:fe:6e:8f:e3:39:a9:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 30 11:11:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a397617b92bcce2fc5482a0a5522957668030ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:0e:55:46:0d:b1:78:24:4b:4b:d0:3a:9e:
57:b9:54:b7:10:08:2e:7d:cd:0c:2d:f0:93:b8:fb:
49:5b:2f:4a:60:87:79:48:d1:74:a4:f4:7b:87:81:
3e:23:68:ef:ac:d3:f5:88:c2:b5:a0:39:74:2e:80:
d4:2f:0a:49:f9:4c:5f:b6:3c:54:ec:96:f3:e1:77:
ad:07:eb:f4:67:0c:d0:19:7a:e5:d8:71:56:00:db:
05:29:24:61:d8:50:72:65:23:34:4a:df:11:1f:6b:
9a:7f:c6:a8:12:55:77:b5:7a:e2:86:88:d6:30:5f:
fb:76:98:42:a1:0a:7c:f0:ef:74:fa:4b:6c:f4:fa:
8b:3f:ce:44:40:29:aa:e3:74:fa:53:de:c6:9e:45:
ee:a4:7f:40:a5:9a:9e:da:d7:e1:b5:a5:73:57:2a:
9a:36:92:48:78:ef:38:75:d9:fb:ba:43:76:71:e7:
dd:30:da:2d:56:e2:e6:93:06:37:36:8a:87:ab:b7:
61:47:54:52:c8:b4:0f:ba:f8:f3:df:d1:f8:2c:64:
ae:83:3d:ad:94:b1:23:3e:74:d4:07:52:17:45:41:
55:95:06:f5:90:ff:f9:ce:35:27:21:12:fc:43:39:
af:66:1a:a5:8b:92:00:fe:7d:43:50:1a:7d:4e:83:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:76:17:B9:2B:CC:E2:FC:54:82:A0:A5:52:29:57:66:80:30:CA
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Gjl2F7krzOL8VIKgpVIpV2aAMMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.152.0/24
31.40.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:64:3e:89:95:19:a9:49:2f:f2:b0:0b:ea:0a:6f:39:42:10:
f5:e4:91:ea:bf:99:b2:1e:a5:ac:5a:90:0e:ef:1a:18:95:c1:
1f:27:f1:bd:d5:19:a1:c8:16:31:e9:19:3f:51:bf:bd:9f:1a:
f5:79:5c:1c:a8:86:15:67:27:e8:60:db:52:f4:d9:d9:5c:a0:
1b:58:39:e4:f6:fa:06:fe:8a:67:d6:4e:5b:9f:1e:ac:81:9f:
a6:47:79:39:d7:a5:d4:3f:a9:cd:16:32:0a:dd:e3:09:57:75:
0c:8e:c6:e0:90:64:15:bf:28:0f:88:e1:c0:37:fe:21:7d:01:
12:63:c1:e0:40:97:c5:57:36:5c:05:4d:ed:84:00:13:65:47:
0a:c9:b3:80:38:ea:79:43:da:79:5f:9e:fc:9d:ae:06:22:d7:
3b:1e:54:3a:84:3a:ad:f0:56:ec:2e:26:f3:a2:6a:fe:6c:51:
25:9c:2e:6a:9f:5d:74:68:9e:ee:30:a0:21:c5:e5:54:e8:34:
3b:b8:1f:bf:89:5c:c7:57:58:56:e5:f7:df:e3:92:d6:90:1d:
44:f5:54:95:47:5b:ea:ac:2e:f7:26:1c:e9:ce:38:4e:3c:8e:
25:85:ec:a7:30:95:07:25:b7:70:a5:69:65:b8:cd:02:5b:f7:
76:7a:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:17 2024 by rpki-client on console-fra.rpki-client.org