Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/u7be7-_6-VIaud_z2_l6gmn_FLU.roa
File: u7be7-_6-VIaud_z2_l6gmn_FLU.roa (raw, json)
Hash identifier: VsTbzR4N9INer5bMTwfwQJUgmGbtmbxvDPcyyWvLxIo=
Subject key identifier: BB:B6:DE:EF:EF:FA:F9:52:1A:B9:DF:F3:DB:F9:7A:82:69:FF:14:B5
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 01856F1D9611D9CF45FCEFD9B57D649ECA6B
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/u7be7-_6-VIaud_z2_l6gmn_FLU.roa
Signing time: Sun 01 Jan 2023 20:54:48 +0000
ROA not before: Sun 01 Jan 2023 20:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204722
IP address blocks: 31.135.182.0/24 maxlen: 24
31.135.182.0/23 maxlen: 23
31.135.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Sep 2023 07:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:96:11:d9:cf:45:fc:ef:d9:b5:7d:64:9e:ca:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Jan 1 20:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbb6deefeffaf9521ab9dff3dbf97a8269ff14b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:36:a1:85:e0:60:ad:b2:85:c6:f4:a7:1b:
cf:71:dc:5e:02:d3:d0:76:6e:48:dd:9f:6b:eb:45:
88:74:7c:c1:53:26:06:52:13:14:92:ad:9e:86:a1:
61:b3:22:51:1e:df:24:71:70:db:81:99:c0:c7:31:
8c:c9:2c:a5:5c:a7:66:f8:f4:f8:02:82:10:25:c5:
16:61:c0:87:b2:69:58:65:f6:63:24:01:80:ed:e7:
8a:f1:3a:17:af:8d:1e:b5:ee:85:67:d9:01:78:e6:
f8:65:bd:76:fd:69:80:b5:46:95:ef:cb:17:3e:c4:
6f:ac:4e:f2:60:3c:9d:73:a9:66:1f:40:86:6f:40:
96:01:27:bb:be:55:db:95:1c:ef:48:73:51:7b:7a:
15:8e:bc:54:5d:14:76:7b:16:1f:98:6e:93:a0:05:
20:3c:aa:7f:c6:7a:50:88:78:5c:ed:c5:81:1c:91:
dd:8a:f9:70:b1:56:8c:f7:8b:63:55:fa:ef:63:ea:
fe:a0:84:7f:04:73:a6:a0:a4:b7:74:69:1a:f9:93:
e3:61:1e:82:67:72:ed:16:81:49:91:b8:99:42:17:
59:a1:5e:d2:fe:a9:6e:cf:14:87:ae:b5:e6:9a:f0:
e0:67:49:9c:21:f0:70:a2:44:62:93:ed:b0:9c:7e:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:DE:EF:EF:FA:F9:52:1A:B9:DF:F3:DB:F9:7A:82:69:FF:14:B5
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/u7be7-_6-VIaud_z2_l6gmn_FLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.182.0/23
Signature Algorithm: sha256WithRSAEncryption
80:6d:90:d9:6d:41:c2:99:86:11:82:3e:32:ad:58:3a:5e:2e:
ac:3c:3a:40:71:71:f8:3e:1a:85:9c:88:9d:78:68:10:f2:ac:
0d:5c:55:a9:81:5f:cf:e1:aa:64:d2:7f:de:2d:29:a3:9c:3d:
c6:cd:56:67:e5:45:3d:3a:ca:4c:ff:f8:3d:18:ab:9a:2d:cf:
51:46:3a:e5:c2:2a:2d:88:99:8c:94:51:51:27:1b:ff:f3:8a:
ca:f5:b0:22:0d:f4:6a:e7:4b:96:4b:f0:24:fa:6c:21:0f:65:
69:9e:d1:ce:ca:8f:d7:f8:45:e8:91:3c:f5:73:6c:18:84:6e:
59:73:1c:69:c1:ed:ba:26:6d:b1:c1:77:a5:36:e4:30:dc:79:
d1:90:eb:a4:67:79:c6:3c:37:6f:0f:bc:b3:1f:b1:9d:2d:e3:
68:a0:9f:51:76:b6:cd:30:36:fd:2a:8c:b6:4b:66:93:b0:85:
29:4d:d3:a8:d3:45:c5:48:be:fa:b6:30:b5:9b:f7:6f:91:89:
5c:4a:65:32:e3:a4:11:86:e9:f0:d3:d1:01:a6:f2:05:07:1a:
ac:d3:a5:f2:43:67:0a:38:a0:05:90:31:8f:bb:7a:1e:10:b9:
93:78:59:05:d3:84:e2:8d:55:81:88:78:38:91:84:e0:f4:66:
9a:9f:24:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org