Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/aAbm2pLPJxwVilE_po5xddqv7qk.roa
File: aAbm2pLPJxwVilE_po5xddqv7qk.roa (raw, json)
Hash identifier: N9F5oO1sHr6KD8dCfUGdFuEtRRTfWajeb4ZI9Kyh34g=
Subject key identifier: 68:06:E6:DA:92:CF:27:1C:15:8A:51:3F:A6:8E:71:75:DA:AF:EE:A9
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01864FF4870999F000E2C62F1BC355A66DE6
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/aAbm2pLPJxwVilE_po5xddqv7qk.roa
Signing time: Tue 14 Feb 2023 12:44:30 +0000
ROA not before: Tue 14 Feb 2023 12:44:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51411
IP address blocks: 178.236.32.0/22 maxlen: 22
178.236.32.0/24 maxlen: 24
178.236.33.0/24 maxlen: 24
178.236.34.0/24 maxlen: 24
178.236.35.0/24 maxlen: 24
31.25.92.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
31.25.94.0/24 maxlen: 24
31.25.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:f4:87:09:99:f0:00:e2:c6:2f:1b:c3:55:a6:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Feb 14 12:44:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6806e6da92cf271c158a513fa68e7175daafeea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:2a:3c:0c:09:fc:b6:ef:df:d1:fc:63:00:
4d:6c:aa:75:1f:9b:87:4c:5f:00:bf:46:fd:51:ac:
7b:60:99:79:b9:ec:19:41:ed:99:d9:d2:d8:f5:30:
70:31:ba:93:f5:e6:db:1d:cb:1d:90:16:f2:01:12:
21:eb:7c:7d:d1:c8:76:6d:f4:27:3a:4a:90:0e:06:
d1:cd:49:7a:31:e6:e8:19:c2:63:4f:aa:cc:a3:51:
5b:15:45:09:c1:28:ad:c7:ed:86:eb:4f:b9:b7:e2:
c0:b8:52:5d:26:df:08:00:8c:be:40:06:17:8d:a8:
54:87:8b:75:09:3c:e1:f1:89:51:8f:72:c8:4f:30:
9c:09:03:cb:5a:26:a5:01:0a:fd:36:a1:af:0e:cc:
59:81:9c:dd:80:ed:a9:42:b9:e5:2a:b2:74:1b:4b:
3e:b8:09:10:1d:6b:7a:55:e6:9a:a6:51:c8:14:af:
d1:51:90:9b:4c:f9:b0:1f:95:1f:4c:02:6b:f7:83:
c8:2e:a7:5f:15:8e:44:b6:53:3e:44:ba:0e:c1:ea:
b4:9b:3d:ab:09:8c:c7:93:81:8e:b9:e1:e0:6f:75:
bc:fb:6f:21:b9:de:31:20:86:32:e4:bc:c8:2a:ab:
32:b5:15:02:b1:3b:f2:66:bb:cf:e7:89:a2:1e:30:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:06:E6:DA:92:CF:27:1C:15:8A:51:3F:A6:8E:71:75:DA:AF:EE:A9
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/aAbm2pLPJxwVilE_po5xddqv7qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
178.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
94:8b:06:ab:59:4e:1d:80:82:27:5b:c8:dd:65:f6:2f:b5:87:
7c:6a:c1:bc:cd:d2:22:cc:39:07:d6:c7:14:5f:3f:ea:37:ef:
4c:5a:b4:69:5f:4c:b3:ad:6d:32:d1:0c:ca:46:15:74:1b:7c:
1b:ce:66:d2:9a:c6:d2:2e:3a:9a:f4:13:f7:9c:ae:d8:63:f7:
ce:16:19:c1:fe:16:fd:a3:8a:65:3f:b1:0f:eb:03:45:f9:38:
1b:5e:fc:47:81:5a:c0:8d:79:6c:3e:29:75:2f:aa:bd:2c:ed:
95:60:76:1d:ff:32:14:0e:3d:a2:1b:f3:1c:1a:f1:30:a5:d4:
8e:eb:fe:79:3f:a4:84:67:05:57:93:48:52:c1:30:21:a7:19:
46:89:1e:3c:b0:ca:f5:d9:79:c1:ad:84:37:64:31:af:b6:0f:
d1:e0:63:ec:5b:e1:f4:7e:b5:a3:13:44:ed:66:1d:cf:3e:86:
34:6b:16:00:2a:35:c5:ad:83:6b:1c:10:6d:3a:9a:79:0a:d0:
82:f8:26:36:4d:28:03:eb:f9:cb:da:8b:c3:96:9c:de:f6:53:
e4:9c:ed:85:c3:5a:f6:f8:33:1a:2e:43:5e:67:d1:2f:08:9a:
9b:73:ba:28:ae:47:4a:a7:9c:4a:a4:f5:40:f6:f4:0e:96:f5:
5a:0b:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:17 2024 by rpki-client on console-ams.rpki-client.org