Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/nBWts0YQ9c3tET31nVHDTkIk7zs.roa
File: nBWts0YQ9c3tET31nVHDTkIk7zs.roa (raw, json)
Hash identifier: 0toDvldIxVqcjw2aeRbEeOG/KajnsqY7tIqvi9JEDGM=
Subject key identifier: 9C:15:AD:B3:46:10:F5:CD:ED:11:3D:F5:9D:51:C3:4E:42:24:EF:3B
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 01856C6EF8C14C2B3F7A50B7CA81004C8E60
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/nBWts0YQ9c3tET31nVHDTkIk7zs.roa
Signing time: Sun 01 Jan 2023 08:24:49 +0000
ROA not before: Sun 01 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57491
IP address blocks: 31.47.198.0/23 maxlen: 23
31.47.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f8:c1:4c:2b:3f:7a:50:b7:ca:81:00:4c:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c15adb34610f5cded113df59d51c34e4224ef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:24:5f:14:7c:19:d6:35:af:c0:ad:09:2c:
9d:b2:4b:d0:18:91:4d:6b:c3:00:8f:5e:75:3f:03:
e3:91:2d:1e:5a:d0:bb:f0:c4:2e:03:9a:5b:01:8f:
38:97:db:61:f7:ca:66:92:87:71:a3:eb:2a:58:8e:
64:0e:38:4e:07:5d:71:5f:ba:89:3a:08:92:d6:b1:
9c:66:9d:91:f2:63:70:3a:3f:48:93:39:b0:a7:40:
8b:e5:31:02:91:64:ec:4b:2a:b2:da:45:e8:8f:75:
b8:74:fc:14:e0:8d:f5:19:a0:d9:c9:b4:d1:f8:4f:
a2:98:31:ce:8e:43:45:f6:a9:54:37:92:07:e2:7a:
cf:45:57:ee:e1:e8:1b:21:99:a2:5f:f1:06:f6:6d:
5c:46:b0:d5:af:c3:4e:b2:2a:d8:87:6a:c8:70:b7:
bd:4f:45:bb:17:44:df:22:12:2e:36:39:12:58:44:
00:f6:00:43:63:a3:33:04:a3:ab:70:7b:af:3c:ef:
15:de:b4:cb:5e:60:16:88:fe:d7:60:14:19:4b:e8:
74:74:8d:61:b5:ae:b4:04:8b:8a:4c:31:e2:0a:40:
55:c6:e7:f1:5b:72:c1:16:a5:ab:fe:ac:f8:a8:0b:
21:3f:ef:03:d7:21:79:2e:78:5a:a5:1f:ac:e4:31:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:15:AD:B3:46:10:F5:CD:ED:11:3D:F5:9D:51:C3:4E:42:24:EF:3B
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/nBWts0YQ9c3tET31nVHDTkIk7zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:7d:7c:b5:f7:a9:5f:75:e4:31:72:17:48:80:d7:60:8e:4e:
15:69:86:95:c3:2c:90:a1:83:d4:ba:68:fc:af:89:63:53:78:
3e:82:80:75:22:64:f6:21:76:7f:62:a0:9a:c5:fa:3b:d2:9e:
6c:87:ef:48:f4:5b:f9:32:db:d3:4d:d9:f8:b8:94:14:b7:39:
33:4d:c0:ee:9e:e5:28:31:9b:b4:fc:c7:93:4c:7e:0f:05:32:
98:44:c2:82:5a:b5:e1:93:ca:1b:73:46:e3:8e:6b:04:e3:e1:
1f:f6:31:cf:96:ae:b3:cf:90:c3:32:5e:4e:52:0d:e3:4d:d3:
9d:32:4b:5e:4c:db:82:15:b3:64:76:4f:a0:cc:52:24:38:ae:
b8:f6:0d:cd:10:65:9c:55:cb:59:c3:1e:18:26:78:9b:c5:ca:
52:15:56:d0:f1:45:91:3e:be:06:b4:c1:41:81:64:f9:a4:12:
1e:80:cb:61:5a:3c:1d:15:65:77:1e:53:14:79:fb:d0:c9:6b:
c7:db:42:a1:6a:b5:3a:e7:da:c5:fc:ec:b2:af:78:cd:c6:be:
f2:6e:b7:16:f3:f9:a6:a2:4a:82:74:66:57:5e:d5:d1:37:ac:
b3:5e:cd:cc:19:b9:e5:b0:66:ae:8e:79:24:21:fe:a4:83:7e:
fc:ba:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:41 2024 by rpki-client on console-ams.rpki-client.org