Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/1-uwxjLJ6BsPPzypMes01m_plyLs.roa
File: 1-uwxjLJ6BsPPzypMes01m_plyLs.roa (raw, json)
Hash identifier: lXGo8uNJux2dqJywjzQ3GdB4c8In4Rk2uSo0Inl7rJc=
Subject key identifier: FA:EC:31:8C:B2:7A:06:C3:CF:CF:2A:4C:7A:CD:35:9B:FA:65:C8:BB
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01856DE655DFF19B42097D7312449E8B02E9
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/1-uwxjLJ6BsPPzypMes01m_plyLs.roa
Signing time: Sun 01 Jan 2023 15:14:49 +0000
ROA not before: Sun 01 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47844
IP address blocks: 62.122.88.0/21 maxlen: 21
31.130.0.0/24 maxlen: 24
31.130.0.0/19 maxlen: 19
31.130.1.0/24 maxlen: 24
31.130.2.0/24 maxlen: 24
31.130.3.0/24 maxlen: 24
31.130.4.0/22 maxlen: 22
31.130.8.0/22 maxlen: 22
31.130.16.0/20 maxlen: 20
178.212.80.0/21 maxlen: 21
93.157.163.0/24 maxlen: 24
93.157.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:55:df:f1:9b:42:09:7d:73:12:44:9e:8b:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jan 1 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faec318cb27a06c3cfcf2a4c7acd359bfa65c8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:65:89:7c:04:41:c6:ff:4b:c7:ad:29:d2:
86:69:f0:45:74:a4:d7:28:48:e0:4b:a3:5a:df:d4:
d3:91:df:17:96:ed:7c:2d:ae:03:cd:83:33:2b:43:
92:b5:e3:c0:a4:3d:9c:5f:bb:e2:b0:fb:09:f2:45:
1c:fe:51:fa:93:c5:b8:68:e8:7e:91:ca:58:9a:93:
9f:81:2a:75:df:38:36:ac:af:7f:d1:e6:4d:2b:78:
f6:69:35:2b:62:90:ce:d4:27:88:19:fd:9b:2e:41:
87:58:f6:55:76:2f:15:e4:fb:57:8b:66:12:f8:71:
bb:2d:46:99:5e:5e:21:18:a6:a8:b1:93:cd:7f:09:
59:d5:20:79:8d:03:0b:3d:ae:37:20:14:67:bb:97:
bd:08:16:6b:b2:6a:7c:a5:b4:03:7a:fa:b4:a2:43:
1d:96:af:ca:21:16:18:34:55:8c:1a:dc:c7:44:93:
20:30:4e:bf:74:a3:50:7b:2b:3f:15:c4:9b:15:65:
bf:0e:7a:42:f5:23:43:48:32:de:3f:95:25:2f:a9:
0c:0d:82:68:3c:86:54:28:a1:35:a9:3b:b6:a5:cd:
50:9a:06:6a:63:06:79:c7:75:70:ae:a7:e4:e7:5c:
e1:34:04:6a:b2:d6:1e:8f:fc:f0:5c:86:ef:2e:fa:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EC:31:8C:B2:7A:06:C3:CF:CF:2A:4C:7A:CD:35:9B:FA:65:C8:BB
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/1-uwxjLJ6BsPPzypMes01m_plyLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.0.0/19
62.122.88.0/21
93.157.160.0/21
178.212.80.0/21
Signature Algorithm: sha256WithRSAEncryption
37:b0:ac:6a:0b:4f:0a:8f:ba:d3:65:ff:0f:fa:aa:de:73:dd:
9f:6f:2d:33:08:7b:e2:64:9f:66:3e:04:c1:3f:65:1b:0b:ce:
94:0f:06:4f:aa:47:83:c6:8b:ec:92:7e:e5:22:6c:55:26:37:
fc:99:32:fa:6a:b8:7e:5b:8e:c2:83:f9:7b:fc:e6:98:1c:c3:
fe:b8:f7:38:2e:2d:2e:3f:2c:25:86:aa:ae:4c:aa:ff:e0:34:
36:d6:8c:4a:c1:8e:aa:49:cd:cd:7f:f6:03:92:5c:7f:07:94:
a1:0e:8a:0b:9e:11:0c:4e:e5:23:71:e1:be:48:6c:93:b3:26:
50:34:18:4d:65:a2:c8:3b:a4:3e:65:9c:62:73:a7:a1:ef:f9:
7f:d2:c2:de:d2:d9:00:a0:61:5d:23:df:11:71:7c:6c:8b:d9:
fe:d5:86:eb:f1:a5:aa:23:13:74:4f:f4:d9:1b:8d:d7:6a:15:
2b:42:d4:49:ed:07:e1:c0:86:c6:07:74:85:bf:be:e2:a6:21:
6e:e6:c8:e4:1e:c0:cc:ab:01:5d:bb:98:ce:bc:79:05:10:a1:
c7:64:f6:b0:d7:8e:29:e8:4d:62:d2:d8:6a:f6:e8:ba:5e:98:
2b:a4:31:76:87:78:7d:e2:c1:e6:f4:09:36:e8:5c:9b:32:02:
6b:92:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:37 2023 by rpki-client on console-ams.rpki-client.org