Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/DLD7ZOLUAd5XDxuHcvsB0acooro.roa
File: DLD7ZOLUAd5XDxuHcvsB0acooro.roa (raw, json)
Hash identifier: H7yJ7312h90c5s3j6Yf3SJ52FoAMTrpEUXFHtgRCVL4=
Subject key identifier: 0C:B0:FB:64:E2:D4:01:DE:57:0F:1B:87:72:FB:01:D1:A7:28:A2:BA
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 0187CC5EC49B132A889FE85A3AAFD01A49B2
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/DLD7ZOLUAd5XDxuHcvsB0acooro.roa
Signing time: Sat 29 Apr 2023 09:36:15 +0000
ROA not before: Sat 29 Apr 2023 09:36:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210541
IP address blocks: 31.42.112.0/21 maxlen: 21
31.42.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:5e:c4:9b:13:2a:88:9f:e8:5a:3a:af:d0:1a:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Apr 29 09:36:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb0fb64e2d401de570f1b8772fb01d1a728a2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:89:5e:6f:c7:d9:06:82:6f:7b:4f:97:55:
87:cd:0d:60:95:61:d9:af:8d:94:e0:6c:a2:c7:af:
a7:d4:57:e6:9d:27:98:84:f2:8b:3c:56:ee:71:61:
b2:69:a9:2d:46:dc:4c:37:eb:12:5d:76:b3:09:67:
e6:19:54:26:6b:39:fe:9e:71:05:42:13:5e:2b:e6:
3d:d9:b3:ee:e3:06:b5:12:85:71:56:0e:74:c7:a6:
7a:06:a3:86:d4:ea:09:1e:52:46:75:31:7b:20:2c:
d1:cc:0f:89:d7:95:62:95:81:8a:96:42:53:ed:74:
a1:05:df:67:96:40:fe:11:c5:3f:4e:fb:fe:86:57:
b2:c1:d0:aa:cc:20:ab:58:04:13:44:9c:51:30:31:
8a:8e:6e:4d:3a:f8:92:ec:b3:e9:b8:00:80:38:79:
c4:c6:34:d3:ea:8e:d0:53:c6:50:aa:ea:0d:a8:4a:
79:e6:44:5e:d4:9f:8b:b9:17:d5:98:25:07:3a:1e:
73:fc:15:08:79:b8:9f:1e:c4:ba:ed:a6:ea:22:31:
43:d6:1f:98:63:1d:55:fa:59:6c:b4:8a:4f:83:7c:
81:85:4f:37:60:9a:10:ee:8b:0c:53:31:97:37:5a:
e0:4b:2e:0a:ca:50:6b:1b:60:88:6a:a8:4f:65:bf:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:FB:64:E2:D4:01:DE:57:0F:1B:87:72:FB:01:D1:A7:28:A2:BA
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/DLD7ZOLUAd5XDxuHcvsB0acooro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.112.0-31.42.123.255
Signature Algorithm: sha256WithRSAEncryption
34:7b:85:8e:d1:ed:a4:38:be:c2:45:00:25:4f:ea:ba:2b:cd:
ad:00:c9:f7:c1:28:23:04:25:7a:5f:36:bb:9f:f1:cc:a7:3c:
e8:b4:fc:34:f3:0b:b7:e5:c8:81:4c:e9:ee:85:e7:27:b1:7d:
b6:2c:27:d5:0a:5c:3f:73:79:76:1e:8d:5e:ff:04:89:28:61:
94:79:33:b3:64:7c:fc:c0:cf:96:de:22:39:58:4a:f3:4d:b5:
59:c7:31:3f:f6:85:e1:e4:24:55:16:36:8c:03:07:2c:26:0a:
90:36:3c:53:12:4e:20:44:fb:8c:db:8a:c4:4e:e8:30:bd:d3:
2f:b0:e7:30:89:a2:53:c9:b0:89:22:aa:39:10:c0:15:8f:99:
44:1c:d4:4f:33:3f:76:25:7e:26:08:b1:c6:8a:e5:82:61:90:
d6:8d:c5:16:9b:f3:75:1b:98:e8:75:3d:f0:8e:18:6e:69:1f:
01:28:51:35:b1:c8:17:2d:8b:a5:ce:ff:bc:2d:51:8f:e0:99:
4d:19:b6:68:f5:47:21:6b:e6:e4:83:a2:dc:3f:40:92:d5:5d:
90:8e:e6:4c:c4:a4:0a:e5:9e:2d:77:a1:a8:b6:54:40:b2:ca:
df:45:7c:dd:32:3b:89:4f:47:fa:c8:3d:bf:6c:4b:9d:8a:23:
b8:93:f0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:58 2024 by rpki-client on console-ams.rpki-client.org