Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/cem0_mLml4n7L76N45Ha_wxFGrU.roa
File: cem0_mLml4n7L76N45Ha_wxFGrU.roa (raw, json)
Hash identifier: cxKfTaLgU3ppBu3XiULj9sEY45j4RuZP5zYYIf164T0=
Subject key identifier: 71:E9:B4:FE:62:E6:97:89:FB:2F:BE:8D:E3:91:DA:FF:0C:45:1A:B5
Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial: 01856F391429E9992F9F4E62DFC0A83E98D8
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/cem0_mLml4n7L76N45Ha_wxFGrU.roa
Signing time: Sun 01 Jan 2023 21:24:49 +0000
ROA not before: Sun 01 Jan 2023 21:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204122
IP address blocks: 31.170.96.0/24 maxlen: 24
31.170.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:14:29:e9:99:2f:9f:4e:62:df:c0:a8:3e:98:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Validity
Not Before: Jan 1 21:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71e9b4fe62e69789fb2fbe8de391daff0c451ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:8e:40:6b:1c:7a:c6:b7:94:c7:33:65:c3:
79:66:46:dd:5f:80:dd:c2:dc:ef:c1:ca:da:fc:d8:
61:63:48:f9:41:27:51:92:51:21:62:0c:c3:88:b1:
27:d3:ee:90:a6:2c:ec:82:98:1b:ac:96:b7:cc:d9:
3a:f2:9f:a6:21:88:ee:45:e2:39:f3:e3:19:45:2d:
1c:8e:1f:c3:3d:7c:63:bd:d0:ab:2b:7e:81:41:5d:
e4:d2:ef:61:f2:d6:2f:29:b3:d8:e1:fd:15:b5:cc:
05:81:74:e9:c2:73:48:95:b6:6c:bb:29:fd:4c:2d:
35:57:9d:65:f4:81:27:2d:6a:ed:63:77:4c:e9:8d:
78:39:a5:a0:9c:fd:53:7b:c1:f4:47:8f:4c:fb:a4:
19:ae:62:04:27:df:7b:a6:dc:f3:ff:54:d1:03:57:
7a:99:40:87:4a:96:b5:16:cf:fc:05:05:79:5d:7c:
f2:b0:09:d3:7a:fd:a3:4a:fb:95:a9:5c:fa:f6:57:
39:5a:9b:b5:b1:92:74:7f:8a:79:c0:19:ab:bf:1f:
a7:27:71:fc:01:c9:fe:8e:c0:4f:14:57:e7:4a:74:
c5:b9:94:6b:84:b1:d9:83:d1:de:55:93:36:43:a4:
d7:5d:a4:ef:97:fb:cc:ff:a2:11:2a:7b:36:eb:f6:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E9:B4:FE:62:E6:97:89:FB:2F:BE:8D:E3:91:DA:FF:0C:45:1A:B5
X509v3 Authority Key Identifier:
keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/cem0_mLml4n7L76N45Ha_wxFGrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.96.0/23
Signature Algorithm: sha256WithRSAEncryption
55:6f:3f:ad:ce:ea:b2:d6:21:30:a5:4d:63:36:7c:cd:63:f1:
db:6c:cc:24:74:06:62:ad:f0:47:b4:21:65:73:f4:2f:ac:eb:
a0:1b:8a:35:37:67:55:67:9a:a0:80:48:b2:ff:b6:f2:47:65:
ab:a2:2b:6d:fa:15:e7:8c:da:b9:5b:ed:ba:5b:5a:c1:7a:54:
64:75:02:3e:28:e2:40:57:02:f5:50:7d:89:2b:d9:1c:3f:6d:
4d:c6:ea:db:e0:2b:b5:8a:77:4b:61:d1:90:74:ad:98:a2:b0:
a6:0f:3c:d2:f2:2a:82:c5:fb:9b:cb:6d:64:a5:73:02:54:25:
a9:bc:cd:2b:49:b9:48:52:12:0f:66:da:47:a7:4c:bf:cf:bc:
5d:b5:21:29:ae:70:56:3b:1b:76:43:7d:26:e2:c3:51:92:69:
da:c0:b2:39:c9:dd:3d:95:d7:8a:64:3f:7b:98:b7:05:ee:66:
e9:ca:cf:52:ee:42:ab:50:4e:19:a3:53:78:e1:7f:bd:18:c3:
b1:38:bc:3b:0b:da:fd:3c:63:b0:1d:81:82:ce:2b:df:00:41:
e4:40:16:15:ba:83:b8:90:e1:f1:ac:3f:6c:cb:67:33:97:e6:
59:e2:a9:d9:40:50:86:9e:22:a0:0b:74:31:b7:03:0e:30:6e:
9b:d6:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:26 2024 by rpki-client on console-ams.rpki-client.org