Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/XTjV1Xrt9kaB-4yNAonYaczfarg.roa
File: XTjV1Xrt9kaB-4yNAonYaczfarg.roa (raw, json)
Hash identifier: 5xWLNpz2xBe/C9VfVWRC/JLa59BynAIii/5DTsqZoxQ=
Subject key identifier: 5D:38:D5:D5:7A:ED:F6:46:81:FB:8C:8D:02:89:D8:69:CC:DF:6A:B8
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 01856CE63083E1340DC1CF2F9890DD96BD47
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/XTjV1Xrt9kaB-4yNAonYaczfarg.roa
Signing time: Sun 01 Jan 2023 10:35:03 +0000
ROA not before: Sun 01 Jan 2023 10:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47595
IP address blocks: 31.177.86.0/23 maxlen: 24
2a02:2090:a800::/48 maxlen: 48
2a02:2090:9800::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 May 2023 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:30:83:e1:34:0d:c1:cf:2f:98:90:dd:96:bd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 1 10:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d38d5d57aedf64681fb8c8d0289d869ccdf6ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:05:c5:8f:6b:9f:40:19:69:2c:ee:9f:a8:
5a:b9:ff:72:0f:fa:59:9f:56:f2:5c:d1:5e:4c:9f:
d6:bc:8f:f1:7c:11:23:97:c6:da:ba:65:62:cc:85:
76:7e:e2:8e:19:a3:13:f5:62:08:43:50:ff:ab:d6:
32:67:6a:f1:a8:0b:39:02:b4:5f:e7:d6:0f:39:a4:
2a:46:84:23:61:95:e0:25:c6:0f:26:e0:86:ca:96:
d2:ba:43:52:62:ee:c4:91:f0:bc:c2:e3:29:9b:c4:
ed:c8:08:01:01:d0:f1:cf:e6:46:67:45:96:f4:32:
bc:07:e0:79:92:21:a6:ea:bc:1e:af:c5:cc:3d:2f:
14:6e:22:8d:2a:ca:28:c1:03:81:34:5b:99:4e:75:
e9:fc:8d:58:eb:a8:7f:83:35:8c:70:a1:1c:dd:54:
56:5e:80:77:41:1a:d1:61:7c:ac:a8:ed:d5:50:8f:
9a:77:2e:ee:b4:2b:92:e0:aa:f4:b0:82:b6:27:81:
a2:bf:06:a0:5f:4c:2f:ae:63:89:23:ba:fc:2d:57:
3b:05:0d:01:d6:29:70:3c:aa:e6:a0:03:86:88:9f:
d6:a8:13:55:83:03:1b:ab:4e:36:ac:4b:0f:41:33:
8b:ea:73:06:45:0f:d6:ff:80:08:71:3e:a9:76:eb:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:D5:D5:7A:ED:F6:46:81:FB:8C:8D:02:89:D8:69:CC:DF:6A:B8
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/XTjV1Xrt9kaB-4yNAonYaczfarg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.86.0/23
IPv6:
2a02:2090:9800::/48
2a02:2090:a800::/48
Signature Algorithm: sha256WithRSAEncryption
85:23:d1:0d:bd:aa:09:61:5b:df:84:53:19:48:63:0f:98:94:
f3:74:7c:3a:39:86:c5:a4:5e:d8:6f:e2:71:33:31:c1:ce:6f:
2f:ca:c2:6d:34:94:9d:b4:77:1f:ad:fb:3f:73:b8:86:61:ac:
f1:2c:2b:db:b4:7d:4c:95:28:a8:cb:d7:52:10:ff:f9:b3:0a:
ad:cb:3b:8a:35:de:61:62:45:9e:60:ec:9f:82:61:09:13:39:
f5:34:3c:a3:9e:2c:28:47:af:d6:5b:e4:3a:dc:00:84:ee:eb:
5c:e9:78:2b:46:ef:13:69:fe:4d:71:1f:89:58:a8:9d:ff:11:
11:10:d4:fa:55:98:10:af:f3:0e:1d:04:47:55:04:cd:18:e7:
27:55:95:b8:57:98:98:da:12:f8:32:ae:1a:a3:ac:dc:94:37:
f6:45:94:4f:e3:45:7e:85:ae:ac:26:bb:71:70:0a:4b:b5:7c:
fa:99:d5:61:56:d4:a0:b6:02:4b:06:5d:1a:c8:08:97:aa:95:
50:08:c7:e3:9a:c5:d5:4b:d5:bb:4d:8c:72:33:ca:2f:08:fe:
6f:3d:1a:0f:32:06:f5:50:7f:07:7d:78:d5:84:76:2e:2b:8a:
50:40:ac:3a:43:fb:60:a5:a3:4b:c8:ea:f2:55:02:57:0d:56:
a0:42:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:13 2024 by rpki-client on console-ams.rpki-client.org