Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/GLuEa1LURLyjP7BhWRcNAg2l-5c.roa
File: GLuEa1LURLyjP7BhWRcNAg2l-5c.roa (raw, json)
Hash identifier: B9CBw1RNA5Zze+f3P63jvLCUsXrx8SwTwi+1WmCz2Rk=
Subject key identifier: 18:BB:84:6B:52:D4:44:BC:A3:3F:B0:61:59:17:0D:02:0D:A5:FB:97
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 018608094B8F1EA9F83E50F08B1C89C9759B
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/GLuEa1LURLyjP7BhWRcNAg2l-5c.roa
Signing time: Tue 31 Jan 2023 13:34:32 +0000
ROA not before: Tue 31 Jan 2023 13:34:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200467
IP address blocks: 31.135.179.0/24 maxlen: 24
31.135.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:09:4b:8f:1e:a9:f8:3e:50:f0:8b:1c:89:c9:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Jan 31 13:34:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18bb846b52d444bca33fb06159170d020da5fb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:da:84:f2:7d:86:37:a8:0f:c5:07:ee:22:
c5:0e:87:c6:8b:61:25:64:32:a3:8f:82:83:ca:3e:
ab:92:fe:3c:07:67:f8:d1:07:58:c4:2e:18:c8:f0:
87:c4:57:de:6c:96:e2:ac:c0:75:0e:4a:b7:92:f6:
9b:10:d7:d6:6a:20:9a:9d:5e:38:a7:7d:2f:ba:43:
1d:e4:8f:0e:29:5e:09:17:20:50:89:22:56:c5:2e:
1d:43:35:70:e4:66:73:ec:a2:93:9a:22:ec:f8:58:
a4:78:a7:0a:fe:03:7c:d6:9b:63:78:64:5f:7c:7a:
a7:a8:33:91:6c:02:bd:b6:3a:8e:6b:80:e3:6f:4f:
22:da:1a:44:f9:48:93:89:15:c9:e4:f4:42:b6:2d:
89:83:a1:e0:9f:3d:ab:e8:5f:1d:60:e6:2b:ac:d3:
9a:c2:cb:2a:46:1f:a6:c5:c6:68:29:75:8a:f7:11:
38:80:bf:f3:54:cb:7c:1b:1c:dd:e2:0e:4a:9f:b2:
4a:dc:0c:64:93:90:1e:42:8b:7b:70:8a:23:53:51:
c8:b0:8c:20:dd:cb:1e:1f:32:f9:9c:44:99:ab:fe:
a8:a4:6b:67:b7:a8:36:34:8f:fd:1d:f6:c3:d6:a5:
10:9e:cc:22:6f:12:96:3d:a8:e2:34:a1:d1:9c:9a:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BB:84:6B:52:D4:44:BC:A3:3F:B0:61:59:17:0D:02:0D:A5:FB:97
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/GLuEa1LURLyjP7BhWRcNAg2l-5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.177.0/24
31.135.179.0/24
Signature Algorithm: sha256WithRSAEncryption
21:05:1d:17:87:c4:55:13:c9:e8:eb:b8:61:08:33:8f:aa:af:
08:fb:00:19:85:b2:23:dc:d1:2c:b4:0f:58:10:f3:3b:e5:8d:
69:ee:07:5e:fb:f9:4f:65:23:80:9f:5b:4a:69:5e:0d:9f:6d:
5b:97:95:21:6d:00:9d:91:ca:ed:97:3c:8c:1a:a1:91:69:a5:
1a:ff:89:47:de:ed:3a:56:c2:49:cd:b1:45:25:26:4c:0d:35:
54:ed:61:cc:af:80:e0:74:f9:ed:71:f8:91:62:73:b3:3b:b0:
e6:6b:92:62:f7:0e:c2:d4:01:9a:7d:12:3f:dc:9b:54:06:e5:
12:d7:55:3c:f4:f9:ea:29:93:d0:cf:a7:8d:6b:30:97:5c:6c:
7b:50:fe:b1:b8:a9:81:bf:c6:14:66:00:08:08:4b:54:3c:07:
da:f0:30:cb:83:d0:26:16:cb:32:1b:d7:f8:11:b7:6f:36:be:
c1:b2:76:31:a6:77:70:05:9e:c8:98:d3:11:f1:59:b8:3a:3b:
b8:6a:7c:b2:7c:95:8f:a0:df:1f:c1:2a:eb:1b:0b:92:0f:e3:
14:13:aa:49:55:fc:5d:ff:2c:79:4e:17:95:80:29:d7:36:18:
d1:58:66:33:3d:0b:e7:da:46:80:2d:59:4c:74:c5:02:c2:24:
1e:c4:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:24 2024 by rpki-client on console-fra.rpki-client.org