Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/Xvu-y9vaaTc8nJHrobKZL6Hq_iU.roa
File: Xvu-y9vaaTc8nJHrobKZL6Hq_iU.roa (raw, json)
Hash identifier: qQsOnsUkaUFY6cs6TRprpGt6q2zrcq8prc9WNEzbzxk=
Subject key identifier: 5E:FB:BE:CB:DB:DA:69:37:3C:9C:91:EB:A1:B2:99:2F:A1:EA:FE:25
Certificate issuer: /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial: 01856BAEDC21C3716C2B3FA4B7C0D19F6E0C
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/Xvu-y9vaaTc8nJHrobKZL6Hq_iU.roa
Signing time: Sun 01 Jan 2023 04:54:59 +0000
ROA not before: Sun 01 Jan 2023 04:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56787
IP address blocks: 31.223.177.0/24 maxlen: 24
31.223.178.0/24 maxlen: 24
31.223.179.0/24 maxlen: 24
31.223.176.0/24 maxlen: 24
31.223.181.0/24 maxlen: 24
31.223.182.0/24 maxlen: 24
31.223.180.0/24 maxlen: 24
31.223.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:dc:21:c3:71:6c:2b:3f:a4:b7:c0:d1:9f:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
Validity
Not Before: Jan 1 04:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5efbbecbdbda69373c9c91eba1b2992fa1eafe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f1:be:bb:46:50:09:cf:c6:81:4e:ee:33:d4:
f6:de:bb:15:9a:63:f5:c2:bd:79:9f:0d:1e:91:99:
9d:62:d8:cd:da:c7:b8:15:ed:8f:fd:e4:97:01:a4:
25:53:61:0c:8d:d8:57:a5:47:03:b1:a1:5a:d8:4e:
0c:c3:9d:0c:be:b4:d4:8d:5c:7f:27:4b:6d:a2:a7:
03:96:e7:4f:bf:4b:0d:d1:51:6e:da:c3:1f:95:28:
cd:95:f9:ab:49:0b:09:82:32:13:5c:a2:b0:e4:9c:
14:63:57:72:b5:cf:e4:c2:9a:b5:0e:0f:43:c8:65:
df:3e:35:36:c4:6d:97:68:3b:f0:96:a1:22:55:e3:
78:c8:b8:7f:fa:b6:1d:90:1e:b9:a6:a3:18:e4:0f:
2e:ac:99:6a:e2:57:1a:c8:f7:98:50:ea:4e:f0:13:
c2:5c:7d:06:d7:27:54:1b:69:39:7f:b6:1c:ac:c0:
01:df:c7:4a:5f:6a:5f:6b:8c:40:e8:b0:9c:9f:38:
ab:b1:31:87:84:56:70:dc:57:72:11:0e:d5:bd:1d:
fc:a5:1d:36:1a:90:0a:55:2e:79:5c:b4:9e:49:83:
8d:78:ee:25:b4:04:a1:82:01:af:30:10:a1:fc:99:
a6:fd:3b:e1:79:9a:27:35:8b:43:03:93:5d:12:b0:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FB:BE:CB:DB:DA:69:37:3C:9C:91:EB:A1:B2:99:2F:A1:EA:FE:25
X509v3 Authority Key Identifier:
keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/Xvu-y9vaaTc8nJHrobKZL6Hq_iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.176.0/21
Signature Algorithm: sha256WithRSAEncryption
24:a5:87:0b:5d:dc:30:8b:01:69:6e:9c:05:08:cd:9f:1b:dc:
11:f2:99:03:af:32:31:8e:2b:c6:e5:29:75:30:b5:2a:f3:38:
e3:b6:bb:85:c7:42:81:3f:6f:cb:b0:6b:68:61:6a:c4:ba:c9:
f3:cb:69:0e:1a:be:6c:6a:fd:3d:84:d0:76:e3:8b:fd:ca:a2:
7f:4f:b2:cb:82:e4:0c:ef:cb:08:01:fa:79:fc:c1:bf:74:58:
e4:c0:c3:1d:ae:0f:a5:63:2d:dd:3f:52:9d:cc:25:01:49:bf:
6d:4f:a2:5e:af:9d:f7:82:ea:f4:db:94:55:c0:67:9e:cd:dd:
c2:95:70:79:ef:9a:f1:2f:17:ee:de:f3:e0:e6:e6:4b:6b:cf:
ca:84:18:2c:e9:36:5f:ef:d9:fe:a0:3c:1f:0b:31:b4:13:14:
2a:3f:18:bb:54:5f:ca:88:ff:79:cd:4a:46:1e:70:75:00:f4:
e0:a4:87:cb:b7:ed:e5:5a:c1:ac:20:7f:4e:14:52:8b:9b:bf:
1d:87:75:cd:27:a2:ee:c9:ff:1f:b3:0d:93:39:17:75:a7:cc:
dc:b5:86:cc:ed:43:9c:9d:f6:78:32:36:9f:47:a6:da:ee:13:
04:37:8f:9a:f3:47:19:d9:72:75:08:a1:a5:f5:42:7f:97:14:
fb:95:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:44 2024 by rpki-client on console-ams.rpki-client.org