Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/P_N4N5i-w_vtdTxx0bveQE9CXL4.roa
File: P_N4N5i-w_vtdTxx0bveQE9CXL4.roa (raw, json)
Hash identifier: o9PNkTvqT6+fBPV7WNAnyz4r80SGDA9qosLOc4XiLQQ=
Subject key identifier: 3F:F3:78:37:98:BE:C3:FB:ED:75:3C:71:D1:BB:DE:40:4F:42:5C:BE
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 018B93F9AF8A0D6000A9FAF12981D7E4A851
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/P_N4N5i-w_vtdTxx0bveQE9CXL4.roa
Signing time: Fri 03 Nov 2023 06:58:16 +0000
ROA not before: Fri 03 Nov 2023 06:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 31.210.23.0/24 maxlen: 24
194.59.216.0/22 maxlen: 24
162.12.204.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:f9:af:8a:0d:60:00:a9:fa:f1:29:81:d7:e4:a8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Nov 3 06:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ff3783798bec3fbed753c71d1bbde404f425cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:e6:60:31:9c:ec:90:ef:e1:8f:84:3f:d7:
45:02:49:bc:0e:0e:2c:56:13:05:37:94:c6:7e:22:
96:66:62:c1:f0:c2:04:b6:ae:6e:6c:b1:26:b6:bb:
9d:ce:de:d7:bb:d8:cb:20:7d:f2:2d:4c:c1:35:72:
24:48:d8:3a:a2:6b:38:4e:9b:f6:9c:6e:41:f2:a8:
66:87:dd:6e:14:33:fc:a2:63:cb:57:8d:f6:c1:b1:
3f:e8:09:8f:51:35:c1:af:84:6e:05:87:f2:0a:07:
e5:a9:33:67:e2:08:cb:07:e4:ca:bf:af:7b:c3:73:
a4:f1:7b:dc:e5:06:7c:94:c9:d9:18:cc:bb:24:54:
de:ea:2b:1e:3c:4e:27:45:a4:6a:e4:10:c7:13:d8:
97:08:5e:72:60:77:65:67:9c:85:f3:9d:0f:f1:b2:
b2:f8:21:f7:74:3d:a2:2a:cb:ef:ff:df:71:8b:b9:
47:b3:b9:c2:25:8a:d3:17:ad:64:07:a1:f5:4b:f9:
bd:5f:e6:c4:1b:8f:75:24:3f:30:35:8e:10:1e:bc:
d8:0a:ac:76:72:b5:59:3e:37:6b:e9:b6:65:68:8a:
6f:5a:2d:df:14:9e:bd:9b:e1:92:5c:e4:65:16:f9:
cb:54:f5:59:0c:90:36:4b:8c:de:89:a7:2e:6f:31:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:78:37:98:BE:C3:FB:ED:75:3C:71:D1:BB:DE:40:4F:42:5C:BE
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/P_N4N5i-w_vtdTxx0bveQE9CXL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.23.0/24
162.12.204.0/23
194.59.216.0/22
Signature Algorithm: sha256WithRSAEncryption
37:86:d8:38:39:ae:d4:d1:bb:13:ab:44:43:2f:43:2f:16:b8:
00:b2:ae:34:2a:5d:72:50:b3:60:7b:98:ed:e2:4d:1b:f9:6f:
cc:00:cf:6c:cb:90:7f:8b:05:b3:6a:76:92:e1:a6:22:52:7e:
4f:d7:95:a9:9a:59:83:87:b1:07:ba:9d:7c:52:f0:a9:9c:6d:
97:27:d3:fd:e7:ba:b5:34:8a:58:5e:99:69:8c:c4:6d:24:cc:
90:b2:be:e9:c2:a7:a4:7c:09:fd:75:cb:d6:c9:13:2a:48:c8:
8b:61:5f:6b:84:8d:c7:7c:e9:44:c2:6e:1d:3d:55:d7:a3:41:
95:8d:aa:92:c6:c0:b2:26:f9:c1:07:49:2f:31:2f:1f:3f:9c:
be:53:54:1c:b3:2a:05:fb:80:01:f5:6f:5e:3d:d2:94:3b:bc:
3b:2a:27:da:63:23:6c:38:99:0e:b8:e2:3a:a5:a3:1e:1c:78:
ca:e4:ca:03:e1:d6:dc:3c:52:df:d5:9e:2f:20:bc:cf:d4:a1:
35:44:78:75:1c:7c:23:29:38:df:90:9d:4b:79:a4:fc:7e:da:
72:9a:de:f6:ff:a1:18:ee:0c:23:c4:b4:d1:24:c9:43:e4:d3:
28:44:b3:c7:f1:10:73:12:cd:11:bd:1e:8c:22:e9:c9:b9:80:
33:39:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:36 2024 by rpki-client on console-fra.rpki-client.org