Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ImQLt5bfzfDYzyzxqiNoc5YzDe4.roa
File: ImQLt5bfzfDYzyzxqiNoc5YzDe4.roa (raw, json)
Hash identifier: tFuMBj0nvrp7cLXyAB3/4Jzcsu1cQJB39xruRKBMhjU=
Subject key identifier: 22:64:0B:B7:96:DF:CD:F0:D8:CF:2C:F1:AA:23:68:73:96:33:0D:EE
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 01856C6EF9985DBFD7991F2BD476749FAB90
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ImQLt5bfzfDYzyzxqiNoc5YzDe4.roa
Signing time: Sun 01 Jan 2023 08:24:50 +0000
ROA not before: Sun 01 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57849
IP address blocks: 31.47.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f9:98:5d:bf:d7:99:1f:2b:d4:76:74:9f:ab:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22640bb796dfcdf0d8cf2cf1aa23687396330dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:3d:a0:fa:f4:0a:c1:7f:b8:56:a1:7a:1a:
0b:6b:37:3c:de:27:ad:0f:19:ac:32:26:42:f4:8a:
16:ed:49:c4:1e:f9:33:ba:a4:64:c2:86:95:99:dd:
37:27:5b:6c:62:45:46:15:9b:51:ba:bc:6e:99:a3:
55:3f:06:19:1c:63:4f:2a:aa:28:80:9b:45:42:d8:
81:a2:59:b8:11:d5:03:84:7c:9c:82:72:e0:df:ee:
ce:26:c3:66:df:58:5b:0d:c6:a7:d4:a9:57:fa:75:
c1:0b:eb:6a:cf:24:0d:91:8a:52:0e:5b:79:84:45:
30:8c:a0:65:33:a4:f5:ca:52:9c:9a:e3:8d:ee:60:
eb:d3:4e:c8:ed:fd:9c:d3:e2:d9:d1:9d:be:e9:e5:
9d:af:2d:64:6a:e2:dc:f5:7b:dd:a4:df:d0:cc:67:
28:55:8d:19:91:98:16:12:ec:f9:93:56:3d:e4:41:
a8:09:c8:29:05:3b:46:95:00:54:0d:f9:c1:fc:aa:
30:46:bf:45:a5:87:05:f9:8a:85:7b:6c:96:4b:70:
3e:ff:64:ea:cf:53:57:64:07:d9:9f:fc:c4:16:e3:
eb:ea:3d:19:07:1a:d4:71:42:96:f9:fe:46:c1:33:
58:00:0b:04:02:74:3d:e5:42:2b:fb:e6:e4:5a:99:
62:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:0B:B7:96:DF:CD:F0:D8:CF:2C:F1:AA:23:68:73:96:33:0D:EE
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ImQLt5bfzfDYzyzxqiNoc5YzDe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.197.0/24
Signature Algorithm: sha256WithRSAEncryption
89:52:34:1a:f8:11:a9:6c:5a:0e:5a:cf:ca:44:82:69:f0:85:
64:2e:a9:d5:79:59:be:9e:cf:7c:4d:60:8b:a7:ca:15:4e:ba:
ea:58:d3:70:12:c2:12:47:76:95:65:d1:36:64:26:5d:21:b0:
38:a2:b3:14:80:5d:09:fe:b6:ad:2e:18:45:b9:a7:1e:4e:96:
da:4c:4d:5c:bc:3e:db:f4:90:ed:f3:14:8e:bf:bd:f3:27:ee:
11:78:cf:6e:6d:2c:ba:cf:80:3a:f0:d7:9e:01:b0:05:3a:5a:
e4:77:6a:95:4f:82:53:2c:b7:73:c6:55:a0:75:f1:d3:e2:4a:
1a:81:67:8c:c9:b5:4d:7a:32:d9:4e:8d:49:52:f2:d2:7b:58:
47:69:4b:53:93:5b:a3:c8:3a:cb:77:be:46:1b:8b:70:f4:af:
e9:fb:63:c6:b8:ea:ac:59:2f:1c:39:0b:93:75:93:57:1d:30:
ab:a4:26:1f:a3:14:a4:f4:74:6c:17:0e:69:40:bf:34:36:c2:
a0:b3:f6:02:19:db:22:ec:2a:4d:17:cb:c7:3f:6d:53:4c:1e:
9a:92:08:52:1b:31:bc:2c:ff:cf:2d:16:90:4f:8d:a6:35:53:
60:3b:e1:0d:60:87:ea:3c:ec:72:54:1c:69:6d:a7:54:56:aa:
44:e1:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:29 2024 by rpki-client on console-fra.rpki-client.org