Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/1UvcakXCSX5XxfYHb6O9ICPb9zI.roa
File: 1UvcakXCSX5XxfYHb6O9ICPb9zI.roa (raw, json)
Hash identifier: iGSBlS7136xZ/dwcDiSj0hwnDMf08vy40Mc3KlTSvCw=
Subject key identifier: D5:4B:DC:6A:45:C2:49:7E:57:C5:F6:07:6F:A3:BD:20:23:DB:F7:32
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 01856F1D95C8B71BA0BE1D6E6AB9E4D5C19D
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/1UvcakXCSX5XxfYHb6O9ICPb9zI.roa
Signing time: Sun 01 Jan 2023 20:54:47 +0000
ROA not before: Sun 01 Jan 2023 20:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197923
IP address blocks: 31.135.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:95:c8:b7:1b:a0:be:1d:6e:6a:b9:e4:d5:c1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Jan 1 20:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d54bdc6a45c2497e57c5f6076fa3bd2023dbf732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:a5:2a:c9:2f:20:b0:fc:05:a3:af:4c:7d:
99:43:56:58:59:a6:f5:cc:a1:2e:21:7a:8e:af:c3:
d5:b2:9e:0b:0c:b6:40:7e:12:bb:28:55:f7:21:64:
58:d9:0a:e2:91:f2:d6:8c:59:b7:b8:8e:5d:e7:c2:
90:d2:76:d4:35:ff:1b:53:e8:03:04:2e:29:14:a7:
58:8a:f3:d8:6e:31:ec:70:5a:07:dd:95:71:3d:48:
e0:0a:e9:19:16:83:29:e9:58:02:64:a8:98:c8:1b:
5a:56:ab:3e:c3:45:1a:55:a9:95:3f:8d:45:4e:9a:
ce:9e:05:3f:19:f9:3f:4b:66:93:8c:dd:b0:a5:5d:
c6:b2:b8:c8:9d:4f:f6:3b:e1:ae:26:cb:6e:7d:68:
fe:9b:d2:6f:58:1e:23:80:78:91:fa:89:52:31:a5:
73:5c:5b:ea:46:4a:8a:93:dd:ce:46:8f:8c:93:52:
47:57:57:19:f4:f3:75:29:c3:24:7d:92:83:8b:77:
01:27:9f:65:47:20:ac:f8:ce:02:d8:ac:be:51:1e:
6a:01:03:ed:ab:37:36:a3:81:28:66:3b:88:16:b6:
be:b0:9c:26:0c:fb:d3:19:0f:30:90:ba:46:00:8e:
f1:1e:21:ab:64:2c:8d:9d:4f:8b:27:1b:ae:55:42:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4B:DC:6A:45:C2:49:7E:57:C5:F6:07:6F:A3:BD:20:23:DB:F7:32
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/1UvcakXCSX5XxfYHb6O9ICPb9zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.178.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f2:6f:08:ac:89:c7:98:9e:3e:08:41:72:51:96:50:07:1d:
ae:b8:cb:71:7a:9f:6b:48:76:6d:ed:07:f6:06:72:fe:9d:1c:
2e:29:94:09:2a:7b:00:9b:4b:98:61:1d:e6:29:e3:8e:25:01:
2f:94:ac:63:62:bb:86:2c:8c:71:91:77:0c:29:02:c1:9d:8a:
25:15:fe:63:48:c2:13:ce:37:62:10:89:2c:68:c5:39:93:05:
de:5f:fa:34:a5:42:e4:a2:2c:48:5d:cd:a3:d1:16:5a:ae:95:
73:92:06:4a:83:04:5a:71:65:7a:84:dc:a8:e3:78:2d:cb:85:
1a:5f:87:0e:a5:22:b9:c9:e7:5e:77:a2:70:f6:21:ed:5c:78:
bb:d3:bd:8a:65:16:ed:2b:b8:96:82:9a:85:d8:d2:60:11:49:
d0:8b:65:2e:f0:90:6c:28:b1:54:e9:e0:25:dd:c8:22:2c:6e:
6b:13:0a:b7:23:6b:46:fb:56:34:cc:2d:d3:2b:5e:45:75:29:
92:af:a6:59:c2:a3:1d:7a:52:af:08:89:42:2f:ab:ae:0a:12:
ac:3b:96:aa:82:42:c4:ab:47:c9:07:93:57:bc:a4:04:7e:a4:
bc:0d:12:9c:68:c8:23:b3:b1:2b:8f:da:1b:11:da:81:44:5f:
b3:5d:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org