Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/Xsq0QXYIbxw3lwuXmW3bHRIEu90.roa
File: Xsq0QXYIbxw3lwuXmW3bHRIEu90.roa (raw, json)
Hash identifier: /aj9T3ISL30s5xKrJzkezpelH8df/jJBJYItp448FEQ=
Subject key identifier: 5E:CA:B4:41:76:08:6F:1C:37:97:0B:97:99:6D:DB:1D:12:04:BB:DD
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 01856F5DF4ED5C144965B5BBFD760D612C5A
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/Xsq0QXYIbxw3lwuXmW3bHRIEu90.roa
Signing time: Sun 01 Jan 2023 22:05:06 +0000
ROA not before: Sun 01 Jan 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44181
IP address blocks: 31.7.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f4:ed:5c:14:49:65:b5:bb:fd:76:0d:61:2c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jan 1 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ecab44176086f1c37970b97996ddb1d1204bbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:46:f8:ee:98:68:96:0c:4d:e2:29:fe:03:
5b:4e:6d:d2:f3:c8:e0:72:e9:3f:61:a4:9a:8f:b3:
fa:0e:ae:bd:79:6c:72:97:ca:70:77:47:45:21:ea:
5b:69:94:d1:6d:90:56:68:7c:d3:aa:65:e4:bf:98:
8d:2d:94:dd:d4:2e:f5:f2:8b:c2:52:b2:ff:8e:8a:
06:ff:89:46:ab:18:e9:23:f4:31:cf:b7:fa:b0:85:
29:5c:fb:42:d2:59:a8:22:f8:fd:8e:91:81:ef:19:
b7:1d:80:d7:76:21:b9:b6:8f:81:2c:5e:53:49:30:
6e:e5:63:53:9f:3a:c0:3b:94:03:20:d8:86:e7:fc:
4e:40:40:21:a4:41:b7:7c:c4:f7:da:5d:5a:c2:6c:
eb:c5:fc:f4:16:4f:d5:92:2c:e6:d4:21:f7:f8:36:
e0:67:e5:0e:c9:fa:c6:93:1d:15:b5:b6:e0:3b:5b:
72:21:84:38:1c:81:8e:60:7c:41:be:16:a4:fa:77:
6e:ea:6a:34:25:59:a0:2c:b9:ef:d5:fa:e1:4a:d7:
5d:7a:ec:4f:87:6a:b6:c9:5a:b1:46:40:ca:6e:19:
57:77:3a:3e:4b:74:db:1e:59:55:2a:de:f7:6d:65:
f8:23:54:75:1e:8b:b9:a3:28:6d:6c:03:37:8e:4a:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:B4:41:76:08:6F:1C:37:97:0B:97:99:6D:DB:1D:12:04:BB:DD
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/Xsq0QXYIbxw3lwuXmW3bHRIEu90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.82.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:b7:59:9c:bc:dd:82:40:f9:15:fc:b0:8c:10:d8:8c:60:43:
c6:41:5e:c7:5b:87:0a:5c:19:fb:e8:23:19:be:61:76:4b:65:
43:a9:a0:e3:e0:f4:07:be:49:98:9d:39:80:c7:44:d3:19:45:
08:97:f0:94:7a:0d:81:c7:b0:7e:2d:2a:52:ca:76:00:da:2e:
eb:00:c6:b9:65:24:a5:bf:bb:6f:d8:ec:fd:26:51:ee:2c:4d:
6a:fa:90:6f:ec:6b:aa:95:b0:6f:11:10:8e:47:d8:5c:34:bc:
a9:36:54:73:7f:bd:70:04:b6:9f:26:d3:be:11:02:f9:c4:3b:
e1:3d:c8:90:d1:8c:48:cb:6b:7e:c2:c7:d5:03:19:f0:13:91:
55:aa:e7:9f:39:e0:1a:3f:9d:d9:6a:e2:6e:b6:11:43:03:20:
a8:55:bd:76:2e:20:c8:49:55:49:76:87:5e:f3:f7:dd:f4:ae:
8a:1d:22:20:ec:7f:c8:ad:4b:d7:29:82:ba:5a:6f:83:91:f1:
f8:9e:1e:18:53:3c:20:24:83:c5:29:7e:b7:27:a2:27:4d:7a:
af:c8:fe:0c:14:b6:45:72:34:be:f8:cf:30:18:9a:a7:aa:6c:
45:f3:3e:ad:09:60:eb:f0:c5:e0:84:64:1a:93:e0:65:93:8d:
a9:96:83:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:19 2023 by rpki-client on console-fra.rpki-client.org