Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/lliclQS5cHKJ_Apq3Afb7xnvFGc.roa
File: lliclQS5cHKJ_Apq3Afb7xnvFGc.roa (raw, json)
Hash identifier: X1yW5EopfWukzsx0WfbeCzMDF7K8ZVd7UjYh6PZdsvQ=
Subject key identifier: 96:58:9C:95:04:B9:70:72:89:FC:0A:6A:DC:07:DB:EF:19:EF:14:67
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0186C52F28C32467FD31D243B518A644F390
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/lliclQS5cHKJ_Apq3Afb7xnvFGc.roa
Signing time: Thu 09 Mar 2023 07:04:07 +0000
ROA not before: Thu 09 Mar 2023 07:04:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 31.14.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:2f:28:c3:24:67:fd:31:d2:43:b5:18:a6:44:f3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Mar 9 07:04:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96589c9504b9707289fc0a6adc07dbef19ef1467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:61:83:bf:22:4d:44:f5:e9:9d:fd:9b:dd:
0e:90:f3:74:e1:ea:2d:eb:7d:ba:15:21:ab:ef:c3:
6a:2d:e8:68:f6:05:17:7c:65:7d:ae:9d:1d:e1:f7:
42:1c:f0:f5:96:d7:ac:57:31:0b:b8:69:00:b2:fc:
f9:3c:85:83:55:74:c9:9c:b5:00:10:bc:28:65:f5:
15:1e:8b:d6:8e:f4:57:5f:15:04:d7:01:4b:20:9f:
91:af:ce:68:b2:e5:14:62:0c:57:00:1f:bc:0c:53:
50:48:2b:14:9b:d1:83:75:83:b8:ee:df:d5:47:e6:
37:d3:b9:3e:9d:88:87:7c:1a:35:57:5a:40:f0:52:
24:6d:24:23:5e:1e:38:72:64:a9:8b:05:02:5b:11:
bb:e2:81:d7:7e:f7:1e:ca:46:f6:25:04:32:d8:55:
cc:0a:d7:93:4b:b9:f3:ce:45:d6:39:7e:c1:12:0d:
cb:c7:e0:0e:29:8e:73:37:3b:bd:3d:19:fa:7d:71:
9f:ae:e1:dd:7d:71:c4:0d:83:45:f9:4f:4f:2e:0c:
a4:00:e3:c1:1a:80:a9:8f:79:4a:49:c5:d5:f5:80:
37:82:24:3e:59:9d:89:33:78:7b:c9:72:da:eb:81:
ee:92:e3:13:a0:96:da:d3:a2:19:1c:f7:98:89:44:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:58:9C:95:04:B9:70:72:89:FC:0A:6A:DC:07:DB:EF:19:EF:14:67
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/lliclQS5cHKJ_Apq3Afb7xnvFGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.38.0/23
Signature Algorithm: sha256WithRSAEncryption
13:ef:0d:40:e0:44:92:4f:6c:69:4d:87:25:19:1a:82:bd:af:
22:33:d2:94:55:5c:2e:16:e8:e6:3c:cc:a4:17:e6:4a:6e:2c:
a0:d6:5c:5b:59:8e:31:43:ca:cd:72:be:6f:5b:68:fd:b1:8c:
ef:63:ff:73:27:08:d4:24:29:41:63:38:29:7e:97:5a:e8:e2:
40:dd:b9:b7:df:9c:d6:01:95:87:13:97:75:35:6e:4a:a5:02:
7b:3d:be:cd:2f:b4:f8:6d:58:46:d4:9e:09:c8:f0:74:56:9f:
05:82:4a:e1:05:cf:d1:0d:9a:6f:9e:da:5a:66:4b:9a:0f:7c:
9a:12:60:7f:07:90:5f:2f:a4:6c:94:cb:ad:bc:45:2a:d0:96:
2d:09:d0:82:45:20:80:39:44:d7:89:1b:fc:16:1a:51:43:04:
a7:4c:33:6c:5c:6b:12:16:d1:16:a0:07:12:bc:da:65:35:10:
d7:7a:cc:bb:94:f1:bc:1b:fe:38:0b:bf:8e:c8:20:8f:fd:d9:
1f:e3:5e:f6:9f:48:11:f8:f5:f0:7c:f2:a2:ff:15:48:5f:f2:
b6:be:b1:10:6a:14:00:1b:7c:f2:22:24:82:a5:45:00:06:46:
d6:a9:8b:4d:eb:78:2c:9f:07:1f:07:5e:bc:07:b8:37:d7:69:
0b:97:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org