Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/7jKgW4SIF9vyCDz9ro1nbP3Y9Po.roa
File: 7jKgW4SIF9vyCDz9ro1nbP3Y9Po.roa (raw, json)
Hash identifier: loEW1EQUhemQa6ByuksRR24W4aaEHNMspSUXOJGDBgU=
Subject key identifier: EE:32:A0:5B:84:88:17:DB:F2:08:3C:FD:AE:8D:67:6C:FD:D8:F4:FA
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 018573839D77F7A0B1898F9D727CB33839A3
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/7jKgW4SIF9vyCDz9ro1nbP3Y9Po.roa
Signing time: Mon 02 Jan 2023 17:24:43 +0000
ROA not before: Mon 02 Jan 2023 17:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213340
IP address blocks: 31.31.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:83:9d:77:f7:a0:b1:89:8f:9d:72:7c:b3:38:39:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Jan 2 17:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee32a05b848817dbf2083cfdae8d676cfdd8f4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:c1:4a:fd:81:15:cc:76:e5:13:64:91:6c:
03:da:7f:d1:8f:5d:98:fd:f1:0e:d8:82:bd:29:83:
aa:e5:04:9f:ec:6c:ef:cb:db:69:1f:53:6e:60:a8:
71:b9:41:fc:24:c4:df:d0:7d:cf:06:9c:6c:ed:1c:
6a:ef:44:0a:0d:28:ab:e9:72:38:bd:3a:70:03:ea:
82:ef:fa:68:f4:cb:4e:6d:d3:43:be:99:52:71:18:
13:e3:e2:a6:d0:40:71:41:49:5e:53:16:48:3d:0a:
5a:97:2a:a3:02:67:b3:97:3f:76:2d:2e:c7:f6:b0:
98:fc:db:f5:a1:65:40:63:2c:d5:ef:c5:4e:c2:a8:
4b:39:06:0d:85:53:f4:e1:dd:78:c3:8f:d0:35:85:
0d:8f:2b:01:11:d9:84:1d:14:27:e0:81:43:e9:29:
78:54:b6:63:22:d8:19:c4:2c:7a:18:ad:3f:54:85:
22:87:e2:45:bc:2f:1a:33:20:42:c1:f5:be:c0:52:
82:dc:27:7f:3e:06:17:ff:10:8f:d0:f2:bc:f4:68:
56:96:13:3c:8e:41:11:57:3e:f9:e8:e1:bd:3b:c8:
67:cf:2a:c8:65:f7:66:1a:54:a6:5c:d1:98:6a:2e:
3f:0f:11:15:55:4e:c0:bb:25:2f:18:5a:76:dc:79:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:A0:5B:84:88:17:DB:F2:08:3C:FD:AE:8D:67:6C:FD:D8:F4:FA
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/7jKgW4SIF9vyCDz9ro1nbP3Y9Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.171.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b4:08:13:b4:82:3f:58:f6:a0:62:0d:cb:4d:89:34:43:ee:
91:fa:b0:41:13:21:95:e4:c8:d3:0f:ac:65:d0:28:31:3f:b4:
73:27:8d:ca:de:3c:89:0c:13:8b:04:ec:dc:e4:53:7e:1f:1b:
5f:07:9f:f0:dc:d1:52:4b:4b:b5:f3:3d:51:b4:0d:fe:06:40:
03:73:02:9f:6b:81:d5:8c:51:b7:18:89:81:b6:63:a1:8b:f3:
38:79:42:7e:69:03:b2:71:50:80:5c:1a:f6:2e:41:a0:9c:7c:
00:41:73:eb:ec:cc:61:0f:d9:71:ee:6d:c6:8d:04:6f:15:26:
35:28:4d:48:7a:5b:27:9f:67:e0:66:78:3f:52:31:e6:01:67:
0c:3f:8f:79:bd:59:0e:29:84:34:01:23:e3:98:d4:a6:44:6b:
a2:6e:90:32:b5:05:50:2d:c4:78:cb:41:c7:91:a2:b0:cf:c3:
3c:4b:ef:e9:17:e2:c5:c8:5d:dd:c7:91:7a:e3:22:c6:58:9f:
b1:ea:12:68:15:5d:0c:e3:f0:b5:8c:6b:62:b6:f7:f9:72:71:
a8:f9:1b:ba:7a:56:a8:66:12:ad:cd:57:e3:38:0e:22:9d:5b:
60:75:67:c8:ff:d1:71:8f:d2:01:1b:a4:cb:2d:a4:06:b6:4f:
a2:ff:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:50 2024 by rpki-client on console-ams.rpki-client.org