Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EoV1X4Saa63MxR3tApYDBOYCUdA.roa
File: EoV1X4Saa63MxR3tApYDBOYCUdA.roa (raw, json)
Hash identifier: d0ypulsgshLm3NngDExOHCTiF71vzCKTqBgA3fKh5XA=
Subject key identifier: 12:85:75:5F:84:9A:6B:AD:CC:C5:1D:ED:02:96:03:04:E6:02:51:D0
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01857139CA712C9C79DAB5B1D75A50BA7EDD
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EoV1X4Saa63MxR3tApYDBOYCUdA.roa
Signing time: Mon 02 Jan 2023 06:44:50 +0000
ROA not before: Mon 02 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ca:71:2c:9c:79:da:b5:b1:d7:5a:50:ba:7e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 2 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1285755f849a6badccc51ded02960304e60251d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:c1:d2:2e:20:00:12:0f:8e:71:98:27:30:
aa:34:f1:9e:72:8f:6f:a0:78:96:b5:6d:76:9c:e6:
f0:cf:7a:0d:30:c5:15:55:24:64:d1:25:c3:9c:a9:
11:54:1b:f6:2c:56:e2:ce:10:08:f9:d7:6a:3b:c5:
94:fa:5d:4b:ec:33:7e:ba:92:b3:fa:6d:e9:47:3f:
c4:67:9d:90:d3:6f:ea:58:84:5b:d6:0c:28:3e:fb:
36:4f:b0:47:c3:99:b9:ce:b6:f2:40:29:25:08:26:
44:d9:04:0d:40:48:f2:1a:0a:f4:35:40:3b:f8:bb:
02:ce:c3:e4:34:62:62:0b:55:4c:54:85:5c:7e:8c:
f1:da:64:d3:08:16:29:99:38:6f:05:e6:1f:fb:6e:
78:af:22:7b:ff:c2:99:10:e8:3f:f4:1f:85:c7:50:
22:48:e3:0d:e5:ce:6b:e2:83:d8:f8:ca:b2:5f:f3:
49:b8:2e:4b:eb:05:5a:73:6b:a9:e2:02:d5:a4:a0:
c5:fc:2b:df:db:d9:08:f6:c9:24:01:9f:fe:e7:b4:
8d:98:83:fc:db:4f:5c:ff:fd:9e:93:c5:9d:c9:bb:
b0:7d:e5:db:bb:9e:7a:66:99:05:7d:a9:7d:b8:d3:
9a:d6:d7:9d:d2:d8:7b:c5:8d:1f:d0:a2:84:1b:58:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:85:75:5F:84:9A:6B:AD:CC:C5:1D:ED:02:96:03:04:E6:02:51:D0
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EoV1X4Saa63MxR3tApYDBOYCUdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e8:7e:0f:50:4c:7e:fe:52:58:cc:78:21:24:59:f4:f0:62:
1c:20:02:82:83:50:b8:6e:5d:24:01:7d:95:ed:30:0a:57:4e:
11:ba:85:71:63:fb:d2:fa:2f:e2:36:9c:bd:d4:e4:00:15:58:
15:2e:8d:e5:d7:e8:1a:95:df:51:eb:5f:91:3e:b8:35:ba:3d:
22:12:53:30:62:fb:86:80:8e:6e:48:7e:3e:3c:dd:f6:f3:09:
de:bf:fc:ed:59:8e:1d:55:4b:99:46:eb:42:91:35:61:7a:26:
b5:eb:e8:59:ca:a5:a8:28:19:a4:1d:e4:91:77:a6:21:f8:ad:
6b:64:0f:9a:37:ac:3a:a2:e6:0e:3f:6b:71:d0:85:02:cd:53:
17:75:b8:01:eb:7b:ad:e9:ab:c8:0d:0d:e4:a7:0b:1c:b2:4d:
de:6c:21:ea:9b:d7:61:fb:4e:fd:87:2e:36:b3:c1:c4:7a:4c:
aa:f5:7e:47:cb:34:d5:b7:86:cc:98:0a:96:f4:83:4a:d1:aa:
68:2f:63:be:03:52:ab:7a:3d:ec:2d:48:d3:aa:31:0d:39:1a:
52:78:f4:b6:77:66:66:33:4c:7f:b9:7c:94:67:ba:c2:f9:54:
2b:62:e6:cd:82:1a:95:b4:c4:22:2c:7c:f4:68:51:e5:cd:f8:
b2:e2:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-ams.rpki-client.org