Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/fCR1XG5HdXsUZ1WBDsMYrbLCmbI.roa
File: fCR1XG5HdXsUZ1WBDsMYrbLCmbI.roa (raw, json)
Hash identifier: rWreyhQEWPDn4dt3U+siDhjJJmd5jhFKHzFg6RaWkjQ=
Subject key identifier: 7C:24:75:5C:6E:47:75:7B:14:67:55:81:0E:C3:18:AD:B2:C2:99:B2
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 018570706CD21802764F63BAD6413A048C9F
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/fCR1XG5HdXsUZ1WBDsMYrbLCmbI.roa
Signing time: Mon 02 Jan 2023 03:04:54 +0000
ROA not before: Mon 02 Jan 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34259
IP address blocks: 31.133.115.0/24 maxlen: 24
31.133.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:6c:d2:18:02:76:4f:63:ba:d6:41:3a:04:8c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Jan 2 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c24755c6e47757b146755810ec318adb2c299b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:42:8b:17:de:d0:ef:15:97:e2:2d:2b:35:
8e:eb:50:f5:04:34:27:bf:c5:5f:d5:ad:ec:5d:3d:
4b:00:d4:c4:d1:fb:02:64:35:c8:5c:bc:a3:d9:e0:
b0:d4:70:4b:d6:4e:ed:c6:b5:0e:fd:b8:31:50:b0:
a2:ff:60:7c:4b:d8:e4:86:c0:b9:e5:c9:5c:05:52:
94:0e:9b:eb:91:a3:f3:5d:8a:f3:71:28:45:d0:91:
72:8a:7a:b4:7d:41:b3:f7:68:5b:57:0d:76:81:12:
42:e8:71:32:b2:91:dd:11:41:84:71:5d:79:ab:a2:
28:94:05:83:c1:59:05:c8:8e:ec:0a:05:3b:cd:8c:
72:df:a1:69:95:07:a1:55:ee:ec:9c:78:75:d9:7f:
67:5f:10:67:c4:95:12:a6:d1:91:97:8d:2d:da:5c:
59:c5:05:bb:3b:99:42:b9:5c:48:0f:e1:95:7f:93:
2c:54:1c:0e:27:d7:b3:2b:b7:f6:8e:ca:39:ee:7c:
ea:8f:b8:ee:d9:4e:69:48:94:8e:91:fc:9d:a6:14:
d4:16:43:13:a9:29:7b:c8:18:75:3e:d5:be:70:7a:
d7:df:cd:05:77:57:a1:9b:a2:38:eb:7e:4d:0c:22:
88:7a:1c:c3:fb:f6:98:bb:65:9d:78:35:b8:ff:9f:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:24:75:5C:6E:47:75:7B:14:67:55:81:0E:C3:18:AD:B2:C2:99:B2
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/fCR1XG5HdXsUZ1WBDsMYrbLCmbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.115.0/24
31.133.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:40:e8:f3:e5:e7:b8:d0:b1:27:3d:d3:5b:d1:d4:bc:71:98:
c7:45:5e:bc:c0:95:03:d4:ee:c9:df:c0:ef:ca:6b:34:ff:86:
e5:b3:b0:ce:01:a8:4e:57:d2:0a:07:a4:73:0c:db:c7:58:56:
fc:15:c7:ff:75:2d:75:a5:0d:7f:52:69:29:28:d1:86:05:6d:
1e:db:3f:d8:e1:e8:75:64:19:be:d2:88:23:77:1a:8b:6c:a8:
32:91:b9:3a:f3:d3:f7:17:76:8e:33:56:4e:03:3c:f4:45:32:
2f:25:d2:a1:80:53:5f:4e:8a:5b:ea:04:af:6a:6e:e8:2d:48:
6e:53:07:07:a2:29:6e:8c:df:60:d7:db:3d:44:51:d9:25:2e:
e8:84:91:b7:1f:9a:c7:a7:de:f2:ae:67:8f:b3:30:d0:93:d3:
b3:7f:c8:42:11:b0:f2:94:86:df:89:38:5c:14:ec:fa:31:81:
ab:2a:a3:aa:33:9f:f2:7b:43:ff:65:93:ff:02:8d:da:be:0e:
a8:72:ce:fb:6a:dd:f4:dc:c8:34:8f:de:58:1d:3e:16:68:46:
53:ba:a3:23:22:0e:6e:e9:6b:b6:ec:10:e5:a0:b5:9a:d2:e6:
ba:6b:1f:8e:26:30:08:d0:27:0a:85:83:40:06:75:d2:b1:2a:
42:d6:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-ams.rpki-client.org