Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/kSVPMMtrRLA1A57wbemxf12L8W4.roa
File: kSVPMMtrRLA1A57wbemxf12L8W4.roa (raw, json)
Hash identifier: GiJiwl1odvnGKmGcyW781jxgUqjKEX5vV8jXlN/x5uI=
Subject key identifier: 91:25:4F:30:CB:6B:44:B0:35:03:9E:F0:6D:E9:B1:7F:5D:8B:F1:6E
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 01856B934C328038987AA6AB175652988717
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/kSVPMMtrRLA1A57wbemxf12L8W4.roa
Signing time: Sun 01 Jan 2023 04:24:53 +0000
ROA not before: Sun 01 Jan 2023 04:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47286
IP address blocks: 31.129.192.0/19 maxlen: 24
31.129.192.0/23 maxlen: 23
31.129.196.0/22 maxlen: 22
31.129.200.0/21 maxlen: 21
31.129.212.0/22 maxlen: 22
31.129.208.0/22 maxlen: 22
31.129.216.0/22 maxlen: 22
31.129.220.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:4c:32:80:38:98:7a:a6:ab:17:56:52:98:87:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jan 1 04:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91254f30cb6b44b035039ef06de9b17f5d8bf16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:f3:c4:58:a9:74:4f:74:b6:a5:36:c6:76:
d1:42:be:7b:34:e5:b7:9a:18:cf:0d:37:a6:a0:c8:
cf:3f:52:ab:06:df:2e:18:77:c5:8b:a2:6c:39:7c:
40:82:89:2c:c0:7c:2b:cd:07:ae:aa:0d:eb:03:1f:
12:84:c0:8a:4b:7e:e9:f6:bc:4c:b1:29:c1:9b:31:
cd:78:0e:25:69:d9:75:39:63:4a:db:ea:9c:5a:68:
20:e1:8a:d6:7d:40:07:8b:dd:41:4d:86:ca:70:4c:
67:00:75:2e:1c:f1:9a:23:5e:d2:da:42:46:42:46:
62:2d:af:b8:cd:73:44:fc:5d:59:6f:ea:96:33:23:
86:02:95:f5:07:cd:62:16:3d:23:7b:4c:5e:16:9c:
b7:74:f9:db:07:dd:22:d8:96:77:56:81:8c:e4:78:
9e:7d:8d:0a:bd:9c:3a:06:db:df:a2:8e:a1:d7:3b:
91:3c:40:3f:9a:cc:27:9e:28:7b:b3:19:ca:5b:02:
75:1a:57:3d:d2:82:9c:af:a2:79:22:fd:33:34:7f:
e5:69:6d:24:97:48:6f:14:f7:82:d0:b9:0a:c9:52:
fc:60:91:ce:d4:2b:28:6f:d4:49:ea:89:57:94:ff:
d8:3f:4c:14:ef:bb:82:f9:e0:30:95:38:03:d8:4e:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:25:4F:30:CB:6B:44:B0:35:03:9E:F0:6D:E9:B1:7F:5D:8B:F1:6E
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/kSVPMMtrRLA1A57wbemxf12L8W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:bb:39:f1:51:c3:66:c4:22:49:22:2c:c0:4a:1d:b9:4c:1d:
75:c1:3d:61:16:a6:34:7a:81:1c:05:67:a9:e9:43:ca:58:12:
a8:86:d7:3f:cb:32:fc:c1:9a:19:a0:6d:0a:66:c0:35:5e:0c:
fe:77:c2:44:a5:c0:cf:f4:01:ed:19:ef:b6:80:7b:58:21:be:
e7:3d:a7:26:21:dd:89:6c:b2:b6:52:e5:e2:31:61:87:cd:10:
7a:64:58:49:ca:17:0e:9d:63:93:36:0a:3e:4b:9a:94:a4:26:
bf:c5:41:f9:96:2a:88:81:a9:29:72:cb:87:c0:20:41:8d:c9:
09:00:5c:5d:01:bf:91:21:4b:ec:32:75:b5:c6:45:b9:82:5d:
c9:a6:c2:d5:e1:c3:22:d6:72:19:a0:cd:f9:02:37:15:14:a7:
f1:29:c3:91:ea:8f:7c:1f:53:d2:74:7a:f1:1e:a3:2f:05:04:
c3:15:8d:ad:4d:60:4b:ca:60:bc:0e:b6:f6:ba:eb:f3:79:c6:
f9:ff:69:3d:24:43:7a:c9:df:97:01:96:02:98:20:a8:af:42:
4e:71:33:68:de:32:ba:04:fb:5c:39:83:49:60:11:9e:8b:58:
d2:96:cf:f9:35:65:9a:25:51:ce:49:0e:38:05:ed:0f:9c:fe:
bf:c2:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:27 2024 by rpki-client on console-fra.rpki-client.org