Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/5n3ZhHzwQx7V9yIevBUKGinZKMs.roa
File: 5n3ZhHzwQx7V9yIevBUKGinZKMs.roa (raw, json)
Hash identifier: Qx8b6IIcXz6lwpaYtDdsY7oq1kOlCejo8kt6KTagjw8=
Subject key identifier: E6:7D:D9:84:7C:F0:43:1E:D5:F7:22:1E:BC:15:0A:1A:29:D9:28:CB
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 01856FC2893127F9533C703471BA72E8DA1E
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/5n3ZhHzwQx7V9yIevBUKGinZKMs.roa
Signing time: Sun 01 Jan 2023 23:54:58 +0000
ROA not before: Sun 01 Jan 2023 23:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147293
IP address blocks: 31.14.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:89:31:27:f9:53:3c:70:34:71:ba:72:e8:da:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 23:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e67dd9847cf0431ed5f7221ebc150a1a29d928cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:11:b9:39:a4:39:12:47:4a:fa:78:f2:dc:
a2:eb:50:e1:bd:29:37:41:43:e6:62:12:ce:ec:e9:
c9:01:51:1d:51:7f:fb:cf:04:60:a7:1a:7f:15:8b:
36:cb:ad:35:2d:b9:4b:b8:cf:d3:89:c1:7d:2f:93:
5f:f0:c3:e9:f3:c2:0a:1b:4f:ee:93:09:59:8c:cd:
7d:51:8c:f3:0c:8f:15:39:1f:91:55:34:f5:b5:0f:
8f:45:50:7c:52:b9:21:bb:d6:24:cb:97:59:eb:d1:
bf:5b:9c:93:4c:8e:fe:2f:f1:ca:38:32:96:90:f0:
33:f5:a5:a1:43:bc:b2:13:48:b4:ce:23:c7:9e:78:
0d:43:11:f4:8e:f2:a7:ef:ee:a7:d1:73:6a:42:33:
58:d0:22:a6:18:22:a1:38:b7:6c:a6:c9:72:92:58:
7d:09:9e:0a:58:29:c7:3e:50:47:a7:dd:aa:c0:85:
48:40:8b:db:6d:a9:a5:a2:cb:89:08:80:38:21:5e:
43:64:4f:f6:b3:c0:fb:8d:3b:3e:60:2e:45:59:2b:
5b:67:93:5f:d2:b6:7b:c5:c6:74:7a:33:d6:5a:1f:
6b:be:46:32:e8:ac:ae:e3:32:87:6f:bc:26:ef:2b:
3c:65:61:73:bc:76:5c:04:db:05:7e:16:53:d1:82:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7D:D9:84:7C:F0:43:1E:D5:F7:22:1E:BC:15:0A:1A:29:D9:28:CB
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/5n3ZhHzwQx7V9yIevBUKGinZKMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:87:a3:ae:b5:bf:3e:0f:31:c2:75:92:ea:c7:da:d8:fd:cc:
d1:81:45:d4:8b:01:f8:3d:cf:e8:c1:ab:0d:38:d1:1c:78:a8:
50:d4:48:d0:e5:2b:16:26:39:e0:c9:42:46:12:1a:b1:8f:d5:
8a:7c:bc:b7:97:dd:8a:3f:8b:1c:8d:a3:7f:19:c5:ea:4b:d5:
20:39:3d:ad:8b:37:89:c7:d5:f6:7e:99:4a:97:55:59:0e:7a:
98:d9:98:da:a4:af:66:ce:e2:b7:e8:70:54:1c:65:15:ec:77:
15:3a:16:38:fa:61:df:dd:e9:22:dd:14:9d:ff:94:96:ae:50:
c5:dc:2c:c2:3a:60:5f:a6:00:28:8e:b2:4d:92:99:cb:04:72:
56:3b:57:35:ac:1a:ac:d1:1c:8c:c9:fa:c7:fa:01:b5:f2:b8:
e0:a6:9a:e0:e1:ef:ca:e8:20:ab:23:fe:dc:5b:8b:f6:98:42:
3a:f9:4c:67:ea:14:5d:1f:40:9a:8f:0b:92:13:ff:47:e8:66:
ef:74:16:57:eb:51:49:d7:95:e5:90:0c:df:21:69:77:f0:6e:
dc:f3:6c:e2:a8:a8:8f:20:fe:3f:2d:e8:af:1a:3e:de:04:34:
ff:5e:cc:55:ec:d7:13:87:59:ef:86:a1:97:e4:d4:7d:77:c7:
f7:00:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org