Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ypwyIxWrjuBrnH-CrxWUIpX6p7w.roa
File: ypwyIxWrjuBrnH-CrxWUIpX6p7w.roa (raw, json)
Hash identifier: 2NA1LY1YOl+iXXZr6jKAhChBTX9PhyxtWkCoF7b/o/4=
Subject key identifier: CA:9C:32:23:15:AB:8E:E0:6B:9C:7F:82:AF:15:94:22:95:FA:A7:BC
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018573220FD1F410EF619F5DAD31B6530BFE
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ypwyIxWrjuBrnH-CrxWUIpX6p7w.roa
Signing time: Mon 02 Jan 2023 15:38:10 +0000
ROA not before: Mon 02 Jan 2023 15:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209720
IP address blocks: 92.118.134.0/24 maxlen: 24
31.40.166.0/24 maxlen: 24
31.40.166.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:22:0f:d1:f4:10:ef:61:9f:5d:ad:31:b6:53:0b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 15:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca9c322315ab8ee06b9c7f82af15942295faa7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:d3:e6:c3:9b:95:bb:57:07:5b:35:19:6f:
ba:e9:11:74:33:c2:8d:cc:e2:56:a1:8c:4d:10:60:
ae:fc:d2:42:1f:e2:a4:ff:4f:dd:d6:1b:90:31:50:
c6:da:f8:a9:51:71:ac:76:b6:d9:29:2a:4b:a3:c4:
90:98:e9:05:ed:f6:90:1f:a6:6c:5d:87:ac:1f:92:
1a:9e:53:e2:8d:6b:80:bf:14:47:05:b2:6f:99:ed:
c8:a0:9f:3d:a4:f8:16:7d:12:af:35:b6:d5:d0:8d:
d4:b5:2c:93:6a:1f:e8:03:bd:a3:9a:f4:50:63:35:
ae:bd:1d:1d:49:53:d6:48:aa:bb:f9:79:1b:3c:41:
f4:63:da:3b:a2:7e:a2:c8:23:8c:73:6d:89:00:cf:
2b:41:31:0c:7b:06:d0:a0:ff:9b:bb:65:00:9a:0f:
7f:b2:a9:86:ed:5c:10:a8:62:9d:c5:22:83:d3:6a:
1e:36:ee:eb:15:e4:e5:01:1b:15:ca:4d:04:7d:12:
fb:d6:e6:8f:8b:ae:33:98:1c:44:f7:64:3e:1f:a6:
69:20:90:5e:23:b2:a8:66:11:27:8e:88:f9:e6:cc:
ab:03:0c:cd:e8:af:4d:8b:a1:31:0c:42:b0:47:c0:
db:7e:8f:d3:c1:17:ea:27:f2:03:be:66:d8:7a:5d:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:32:23:15:AB:8E:E0:6B:9C:7F:82:AF:15:94:22:95:FA:A7:BC
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/ypwyIxWrjuBrnH-CrxWUIpX6p7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.166.0/23
92.118.134.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a6:11:f5:90:42:64:84:e8:66:73:19:aa:d3:b0:d0:c6:bc:
7e:a2:61:e9:b2:53:e5:40:db:cf:da:5d:ec:08:73:0b:cd:87:
86:60:da:2d:ee:a7:ea:9f:9d:0d:c2:27:d5:33:08:c5:24:2d:
dd:e0:38:a9:a3:7f:2e:b4:00:c0:43:c7:ed:0d:0b:0a:1d:8a:
ff:e9:f2:b3:f8:a6:51:0e:02:eb:74:ef:0a:4a:ee:c5:75:d7:
10:fa:5e:e0:df:68:f1:3c:02:f8:25:0d:a3:f0:c1:e4:2f:b8:
4a:f4:a0:56:d4:76:ef:ed:b2:df:6e:90:38:72:55:0a:49:4c:
4f:fc:5f:e1:83:ba:2c:74:9c:a8:e5:94:dd:f3:76:04:77:a8:
46:b6:d1:97:a6:99:c0:8e:b9:3a:0c:b6:c0:72:fa:7d:3c:72:
ca:a0:01:ef:b5:7c:7d:cb:1a:84:b6:ac:1b:54:37:28:52:7a:
16:b5:79:d1:2a:99:19:72:e6:da:16:ad:4d:b0:87:14:56:83:
d6:14:73:55:55:25:b3:fc:2e:7a:b2:e6:fc:57:60:19:86:2d:
55:79:4e:db:ee:c7:a9:32:74:8f:82:58:b3:8e:52:c2:b7:f1:
3d:7f:a1:f1:26:33:e3:48:6c:44:60:e8:83:e4:33:0d:c8:de:
de:57:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:41 2023 by rpki-client on console-ams.rpki-client.org