Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4f220c-5f6e-467e-a26c-9843cd23fb04/1/EcMpHtw7SpP3B0tUMqi-RNo72Ig.roa
File: EcMpHtw7SpP3B0tUMqi-RNo72Ig.roa (raw, json)
Hash identifier: gs4gyw8LP+OJCd5LiP3Nu52bcXHxMwRxe3a9FpogEIg=
Subject key identifier: 11:C3:29:1E:DC:3B:4A:93:F7:07:4B:54:32:A8:BE:44:DA:3B:D8:88
Certificate issuer: /CN=19da8fa2a19630873ed48b06af65ce17d1507566
Certificate serial: 01856D9D262D8D1A34E3E91AC530663DD33D
Authority key identifier: 19:DA:8F:A2:A1:96:30:87:3E:D4:8B:06:AF:65:CE:17:D1:50:75:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdqPoqGWMIc-1IsGr2XOF9FQdWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4f220c-5f6e-467e-a26c-9843cd23fb04/1/EcMpHtw7SpP3B0tUMqi-RNo72Ig.roa
Signing time: Sun 01 Jan 2023 13:54:53 +0000
ROA not before: Sun 01 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212560
IP address blocks: 31.193.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:26:2d:8d:1a:34:e3:e9:1a:c5:30:66:3d:d3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19da8fa2a19630873ed48b06af65ce17d1507566
Validity
Not Before: Jan 1 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11c3291edc3b4a93f7074b5432a8be44da3bd888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:28:6e:3f:8e:05:96:d3:24:4d:33:57:54:
b9:4c:b4:57:e1:d4:5a:d4:9f:b6:62:bb:9c:75:ca:
e2:ef:14:31:7a:1e:eb:94:94:f4:da:ac:5f:9d:75:
3e:bf:ea:28:11:7d:9e:82:cc:1a:72:07:40:10:51:
a0:6c:b8:49:a9:ef:9f:5e:6b:dc:d3:5e:a3:f6:76:
c6:a2:2f:2d:4b:27:3b:df:d0:f6:40:8c:86:30:96:
6e:d9:39:85:fd:86:28:90:44:af:e5:c3:84:28:47:
71:2f:63:a8:34:34:70:76:70:83:dc:c2:0d:19:fb:
e7:30:bf:ed:ec:9e:e3:f0:db:dd:20:11:1d:d2:9f:
21:45:56:b1:36:b4:2a:6b:af:66:8d:8d:1c:90:78:
7d:45:89:68:cf:24:85:d7:ad:8c:6f:b1:d1:97:e2:
91:6b:90:20:9c:7d:01:1c:3e:e6:fe:0d:70:20:9e:
7c:83:33:90:16:19:8f:60:91:c1:99:e6:6a:d5:10:
b5:ef:dc:73:25:7f:6d:35:56:9b:86:0a:8f:ec:d2:
fa:e6:a2:bc:16:ee:36:c5:86:71:25:d1:df:6b:25:
86:45:8b:7b:c2:10:cd:c6:b6:13:f9:35:4d:a4:2b:
c7:e7:85:60:62:f0:32:2a:7d:3e:cc:e0:cf:58:64:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:29:1E:DC:3B:4A:93:F7:07:4B:54:32:A8:BE:44:DA:3B:D8:88
X509v3 Authority Key Identifier:
keyid:19:DA:8F:A2:A1:96:30:87:3E:D4:8B:06:AF:65:CE:17:D1:50:75:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdqPoqGWMIc-1IsGr2XOF9FQdWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4f220c-5f6e-467e-a26c-9843cd23fb04/1/EcMpHtw7SpP3B0tUMqi-RNo72Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4f220c-5f6e-467e-a26c-9843cd23fb04/1/GdqPoqGWMIc-1IsGr2XOF9FQdWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.184.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b0:65:70:f6:9e:2f:2f:8b:cf:6a:fd:5c:03:7f:d9:b4:92:
25:c5:c4:3a:7a:d1:d7:a1:23:7c:01:a0:2b:9b:bc:19:dd:0f:
e9:5f:b0:e5:2f:fb:88:0f:30:8a:c4:0c:bd:be:24:8f:12:04:
ad:e1:6f:b0:72:81:99:f1:71:3c:bd:71:47:64:02:8c:e4:54:
2f:90:1d:97:4a:20:d0:8c:5b:c4:48:ae:a1:b2:e1:02:e1:dd:
ff:24:7e:ac:b5:ad:c5:da:15:7f:82:be:52:49:11:88:6b:a2:
74:35:a1:8c:25:7d:d3:dc:f0:dd:84:ac:78:10:ef:d1:53:4a:
fd:ce:2d:0d:64:dd:13:c0:4d:86:7c:e8:e6:8e:c3:55:8b:53:
0f:95:43:7f:55:0a:de:9a:ab:b5:30:6d:f1:2e:e5:34:15:65:
52:07:76:9d:56:64:a8:0b:d3:c9:42:33:1f:1e:32:99:38:17:
1a:a5:64:d1:34:0d:5d:b7:6a:ce:45:fa:a2:24:87:8e:dd:51:
31:df:9f:25:c7:a2:d1:99:7c:65:26:15:90:8f:39:fe:ba:ec:
cf:67:6c:03:ca:7b:e6:15:4f:e6:a6:51:07:de:29:74:fc:c0:
69:9d:c1:63:03:d8:f3:3a:34:26:df:6e:a5:9f:fa:03:f2:eb:
df:4f:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:39 2024 by rpki-client on console-ams.rpki-client.org