Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/9vMveN2OZ9JHwSqtwgNbR9coVX8.roa
File: 9vMveN2OZ9JHwSqtwgNbR9coVX8.roa (raw, json)
Hash identifier: CU6wKFpIVmFI7i/e74fKtWDbrsg1hUtkgBNLwd2ECHM=
Subject key identifier: F6:F3:2F:78:DD:8E:67:D2:47:C1:2A:AD:C2:03:5B:47:D7:28:55:7F
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 01856F1D8FC1D8665B7C4118274EE34B7353
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/9vMveN2OZ9JHwSqtwgNbR9coVX8.roa
Signing time: Sun 01 Jan 2023 20:54:46 +0000
ROA not before: Sun 01 Jan 2023 20:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48024
IP address blocks: 31.22.104.0/22 maxlen: 24
31.22.104.0/24 maxlen: 24
31.22.105.0/24 maxlen: 24
31.22.107.0/24 maxlen: 24
31.22.106.0/24 maxlen: 24
2a02:7080:3000::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:8f:c1:d8:66:5b:7c:41:18:27:4e:e3:4b:73:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 20:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6f32f78dd8e67d247c12aadc2035b47d728557f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:2f:fb:87:69:1a:67:57:97:0c:a9:4a:9f:
a4:98:e2:72:d9:fe:2b:c2:e5:f4:d1:e7:c9:e5:c2:
c7:34:cf:c3:a2:80:a3:c5:33:b2:27:52:9b:39:2c:
63:cc:41:61:e6:fc:2b:37:c2:1b:f6:a1:23:d8:ae:
ab:7c:ff:c3:ed:cc:32:3f:59:ae:a5:af:c9:3c:6f:
3c:05:49:e8:cf:1d:d8:87:8b:69:14:e0:72:6c:c2:
9b:9a:1a:f3:ed:ff:a4:b9:2c:08:e0:a7:9d:22:c6:
63:b6:0f:14:be:10:56:37:fa:8e:b5:73:28:dd:f6:
f9:b0:5f:bc:4d:a4:ba:00:d1:07:79:27:33:d3:6b:
89:bc:05:3c:be:f0:a2:a7:43:84:23:80:3a:b3:88:
23:37:83:e0:16:75:a9:3a:0f:9d:32:50:a1:5a:e7:
b9:bb:fb:17:ea:92:9d:aa:be:2a:03:5e:97:7f:fb:
b3:9b:ee:9c:45:86:93:b1:7a:6e:91:84:d4:55:f8:
9f:96:f9:87:6a:8f:a9:a7:76:09:2e:9e:f8:4e:a3:
e0:0f:b9:fb:94:d9:c2:fc:4d:16:e6:88:ff:e9:4b:
fc:8f:75:f0:f9:8d:05:89:72:b5:b6:0b:f4:66:70:
5b:11:5f:18:14:9c:f3:a9:aa:fe:5f:65:f4:52:3a:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F3:2F:78:DD:8E:67:D2:47:C1:2A:AD:C2:03:5B:47:D7:28:55:7F
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/9vMveN2OZ9JHwSqtwgNbR9coVX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/22
IPv6:
2a02:7080:3000::/36
Signature Algorithm: sha256WithRSAEncryption
31:fc:24:1d:31:60:6b:fc:f5:6a:77:fa:ce:7d:67:03:46:e2:
36:18:a9:3a:c7:16:88:4a:8f:90:56:59:d6:0c:a8:67:1e:2c:
9f:33:c2:9b:f0:49:78:3f:df:26:87:4d:fa:e3:c3:34:e5:03:
b3:23:99:df:d8:48:69:17:65:2f:51:9b:36:25:ca:fb:3a:d4:
d6:42:d6:b1:78:f7:83:ee:2d:ab:9a:16:11:d6:d3:ca:c9:8e:
56:73:d1:29:60:bd:ba:9d:48:72:c0:a9:a2:e4:cb:b2:f1:50:
4d:ad:70:6b:1b:7b:30:9a:db:70:c4:db:23:26:b7:e7:a5:39:
6e:fa:f5:96:1d:21:96:8d:b4:95:69:aa:3b:d3:bf:f4:3d:2c:
8f:c6:f7:32:aa:1c:b0:0c:81:f0:55:7a:85:ec:61:c5:9e:57:
2c:2e:6c:bd:f3:9a:5f:40:bf:0b:71:29:39:df:06:f7:28:de:
20:13:ce:f7:4f:30:82:c3:b3:b4:04:0d:cb:c7:af:cc:a9:52:
3c:27:48:b3:65:b2:5e:48:1b:37:ca:8e:ca:e5:d5:5e:57:56:
ec:90:cb:de:e1:46:c9:ca:34:2c:38:79:f1:1b:e5:b8:3d:38:
cb:c8:34:2f:2a:ca:21:76:9b:cb:e2:64:cc:7d:0a:09:92:72:
f4:d4:98:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:47 2024 by rpki-client on console-fra.rpki-client.org