Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/ir9abhmdOyvYHYOF46h0DvDY68I.roa
File: ir9abhmdOyvYHYOF46h0DvDY68I.roa (raw, json)
Hash identifier: CyA2fczZ0LKO2nNu0RC8eEPgQ7vf44Os8ViowgN7ztg=
Subject key identifier: 8A:BF:5A:6E:19:9D:3B:2B:D8:1D:83:85:E3:A8:74:0E:F0:D8:EB:C2
Certificate issuer: /CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
Certificate serial: 01856ED4B388CE60A84834F9716615600C32
Authority key identifier: 3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/ir9abhmdOyvYHYOF46h0DvDY68I.roa
Signing time: Sun 01 Jan 2023 19:35:11 +0000
ROA not before: Sun 01 Jan 2023 19:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 31.222.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:b3:88:ce:60:a8:48:34:f9:71:66:15:60:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
Validity
Not Before: Jan 1 19:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8abf5a6e199d3b2bd81d8385e3a8740ef0d8ebc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:b0:93:2c:11:f1:c5:ca:1a:13:b9:86:3e:
12:f4:b4:91:c4:b6:ee:94:22:d8:55:83:e2:55:7d:
cd:86:fb:f8:f9:a7:47:8c:0d:ce:b3:50:c7:01:ca:
a5:e2:0a:39:88:c6:6b:c7:31:94:08:71:61:3d:3c:
43:5e:38:ee:73:b3:b5:8d:4e:f3:0c:f2:e4:38:0c:
7c:66:7c:da:ff:8e:98:35:53:e3:75:86:0a:24:3b:
33:63:97:4a:29:53:83:2a:4d:f6:19:8b:af:44:b4:
a6:9f:66:6f:56:de:ca:02:8a:29:8d:7d:fd:f4:08:
ee:60:4a:eb:38:8f:0b:59:8c:e2:ed:a7:6e:aa:e7:
f0:7a:05:46:a5:c2:b1:43:af:21:ba:c1:25:4d:16:
71:73:08:46:43:4d:b7:79:0e:cc:1b:b8:e9:26:35:
35:99:df:07:fa:29:09:f0:76:14:9d:42:e5:a4:59:
ce:fd:24:a0:55:39:90:09:d2:99:15:f6:2c:f8:6b:
06:d3:b2:48:bc:e2:89:c0:af:5d:c6:3b:6f:7c:f2:
e5:c2:2b:bd:9a:43:32:39:e4:16:4e:35:9c:b0:4f:
e3:33:0f:e0:a5:7a:cb:dc:53:b6:53:1c:a7:b2:b8:
33:28:07:67:2a:e0:e0:84:a7:c3:0b:bf:20:0a:f2:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BF:5A:6E:19:9D:3B:2B:D8:1D:83:85:E3:A8:74:0E:F0:D8:EB:C2
X509v3 Authority Key Identifier:
keyid:3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/ir9abhmdOyvYHYOF46h0DvDY68I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:eb:4e:bf:f6:a4:d1:a9:df:26:ff:4a:c2:70:5e:f0:7d:1e:
d6:10:97:d2:6c:14:22:26:ff:87:4b:fb:99:9e:98:18:aa:2a:
19:8e:20:b9:f1:e3:56:7a:81:8a:f7:f3:ac:a6:4d:18:44:26:
63:f4:c1:45:2a:be:db:32:74:f3:e3:8c:88:9b:73:a3:e7:aa:
60:99:c0:b1:cd:81:f3:51:6d:57:de:5a:cf:25:95:11:79:cc:
b1:8a:1e:0c:5e:78:18:88:3c:68:a7:6a:7c:7d:89:9a:35:64:
38:11:e3:a4:89:84:64:35:a7:05:48:4a:bc:8e:c2:24:e3:97:
0d:48:fb:c2:a3:25:b8:62:24:d5:60:05:76:e5:3e:d4:64:96:
d1:9a:8e:94:26:92:55:05:e5:35:7d:5f:6b:be:ff:80:26:93:
ce:27:69:d5:4f:14:f4:3c:a5:eb:48:10:e5:80:b8:04:e8:ab:
0c:18:88:af:62:cf:12:72:d8:5f:0f:2b:b4:25:11:df:35:98:
e8:bb:90:a0:08:b2:38:d1:df:4c:69:bf:6f:e8:cc:7b:ae:aa:
29:aa:3c:c7:ce:f9:27:69:85:6d:94:b4:86:29:d3:f1:02:38:
38:8b:0b:b4:ef:77:8f:de:e7:e9:31:57:ca:23:0c:8d:c0:9a:
c4:95:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:23 2023 by rpki-client on console-ams.rpki-client.org