Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/H2dP8MpiTMQYtJQP41qkqPqQSn4.roa
File: H2dP8MpiTMQYtJQP41qkqPqQSn4.roa (raw, json)
Hash identifier: kY1Te6mAurnpTLn8duUZb0KRy2nMIMoBCUt+rC3m5K4=
Subject key identifier: 1F:67:4F:F0:CA:62:4C:C4:18:B4:94:0F:E3:5A:A4:A8:FA:90:4A:7E
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 01856E267713143634BE5CFE9F9881F9B03B
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/H2dP8MpiTMQYtJQP41qkqPqQSn4.roa
Signing time: Sun 01 Jan 2023 16:24:52 +0000
ROA not before: Sun 01 Jan 2023 16:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210057
IP address blocks: 31.14.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:77:13:14:36:34:be:5c:fe:9f:98:81:f9:b0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Jan 1 16:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f674ff0ca624cc418b4940fe35aa4a8fa904a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:4a:ed:1c:17:13:2c:ba:da:de:b5:95:ae:
54:32:e3:9e:db:34:7c:4b:bc:09:27:49:89:76:e0:
54:9c:41:25:16:85:85:c4:53:e8:77:9d:bf:c0:bf:
ce:89:77:d6:85:a9:ef:40:96:6b:88:59:40:08:1c:
94:4b:68:ab:23:b7:51:32:ed:e0:28:d8:45:48:3c:
41:50:03:2f:85:65:f0:18:9a:86:fd:ea:21:55:13:
f1:cc:c6:ef:6a:b0:e5:55:16:2c:20:28:ca:bb:79:
b8:c5:f3:80:8a:40:0e:b8:bd:59:22:c1:8d:0d:04:
f3:11:e9:17:6e:32:0f:33:99:3a:6a:1a:c0:a8:a7:
fe:c8:e9:cc:2f:4d:a4:b3:24:d5:b2:c5:0e:53:9f:
e1:10:8d:e7:07:94:75:eb:ee:84:54:3d:23:6d:53:
66:31:4d:cc:cd:51:d8:4b:85:31:c7:89:55:0b:5a:
cf:7b:c4:7f:a7:4d:bd:4a:c3:60:49:bf:32:67:f5:
e6:69:97:90:6e:14:07:02:54:26:b3:f4:fe:74:c0:
14:b2:bd:98:99:96:d2:6d:bb:c6:d3:1c:fa:b3:9b:
72:43:ff:c3:9a:97:09:3f:96:c2:1e:e7:c3:4f:d2:
31:45:0d:8f:d4:e0:2f:b3:60:64:92:a2:6c:f2:d1:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:4F:F0:CA:62:4C:C4:18:B4:94:0F:E3:5A:A4:A8:FA:90:4A:7E
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/H2dP8MpiTMQYtJQP41qkqPqQSn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:34:ad:4a:52:da:2a:03:95:a7:2c:3d:5d:34:e9:45:29:60:
0f:dd:15:67:e0:74:e8:78:3d:f9:e6:3b:e3:2f:8c:b1:8d:26:
3b:09:ff:77:72:f1:27:8c:89:30:9b:45:0b:59:33:fa:79:5e:
82:b6:16:a7:94:45:65:d5:38:70:7c:2b:6d:f2:a1:01:9a:bd:
e8:d0:7e:33:97:44:c9:d9:bf:1f:60:2e:8f:4f:6f:f2:09:7e:
de:e7:7c:fd:c1:06:8c:2a:32:8f:f1:a1:6b:39:62:bf:66:43:
7e:a0:b7:f6:9f:58:f0:77:11:bd:33:dd:23:2a:82:b2:db:f7:
cd:79:3a:26:d0:91:4c:27:65:27:6e:d1:3c:64:a2:67:9f:f7:
98:44:37:fa:c6:ad:33:86:da:12:f6:a3:1a:40:59:9c:cd:d0:
ba:ba:db:aa:a5:0b:90:ce:bb:9d:c8:8e:3b:5f:73:b2:e3:f6:
d5:e8:00:ff:9e:ee:39:08:71:f7:a8:5f:6a:40:3c:9f:57:c2:
45:9f:85:95:8f:20:95:6f:f4:32:ba:5e:38:7d:e5:c7:8c:3a:
7c:c7:07:1e:23:0f:6a:f5:f6:93:0b:30:ec:9b:a1:82:89:05:
62:95:d8:95:0c:8d:b5:63:38:99:72:61:15:b6:07:3d:89:0f:
e6:37:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 14:18:20 2023 by rpki-client on console-ams.rpki-client.org