Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/xFm16TZF0PbZvMM6HDPSvgjiKPQ.roa
File: xFm16TZF0PbZvMM6HDPSvgjiKPQ.roa (raw, json)
Hash identifier: cpi76jUVF87LkrU5m4b1PQZGclEBIJjPiBaD3LYFjNQ=
Subject key identifier: C4:59:B5:E9:36:45:D0:F6:D9:BC:C3:3A:1C:33:D2:BE:08:E2:28:F4
Certificate issuer: /CN=7e834881aa81a499afb9e2d821d65c6c921473ee
Certificate serial: 0188066A9906ED8D94590661DBF93DBF66EF
Authority key identifier: 7E:83:48:81:AA:81:A4:99:AF:B9:E2:D8:21:D6:5C:6C:92:14:73:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/foNIgaqBpJmvueLYIdZcbJIUc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/xFm16TZF0PbZvMM6HDPSvgjiKPQ.roa
Signing time: Wed 10 May 2023 16:07:09 +0000
ROA not before: Wed 10 May 2023 16:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209519
IP address blocks: 31.207.8.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:6a:99:06:ed:8d:94:59:06:61:db:f9:3d:bf:66:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e834881aa81a499afb9e2d821d65c6c921473ee
Validity
Not Before: May 10 16:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c459b5e93645d0f6d9bcc33a1c33d2be08e228f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:20:87:26:64:d5:e3:7f:14:c1:cd:31:bb:
6e:af:b1:6e:ad:cd:b7:ec:94:bb:3f:a6:b3:e4:cc:
e1:34:ae:b4:d2:28:c5:36:99:1b:a5:a5:a8:d3:cf:
f8:bc:cc:57:3b:bf:f4:96:88:66:60:99:9a:92:20:
81:69:3f:e3:ee:7f:4e:6d:0d:61:84:d4:05:e6:9d:
67:80:e7:41:b1:60:87:e8:57:20:f3:bd:01:8e:ac:
c6:2b:37:ca:4d:98:6a:8e:bd:57:03:70:92:dc:49:
23:10:c5:fe:86:ab:7c:b2:61:68:8d:35:90:56:55:
8e:c8:72:b4:61:a3:97:52:08:e4:f2:4b:06:0f:4f:
38:4b:d6:88:6a:68:87:3b:7d:13:44:35:51:ec:ac:
d1:73:16:c1:08:3a:95:a8:36:01:aa:70:28:7e:70:
c9:9a:86:eb:98:79:2a:2e:a9:ee:9e:4e:53:24:7b:
f7:22:9b:1c:45:cd:67:d2:ae:04:b3:e6:ef:fb:40:
63:90:df:5c:f9:53:66:bd:89:03:db:3f:7f:73:67:
1e:4c:1c:9d:81:0c:1b:24:40:f1:2c:d7:3a:e9:bd:
c8:e6:de:e1:ea:31:e7:1f:ca:1f:e9:41:43:31:18:
6f:be:17:7e:d9:09:e7:c7:51:ac:dd:7d:04:94:80:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:B5:E9:36:45:D0:F6:D9:BC:C3:3A:1C:33:D2:BE:08:E2:28:F4
X509v3 Authority Key Identifier:
keyid:7E:83:48:81:AA:81:A4:99:AF:B9:E2:D8:21:D6:5C:6C:92:14:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foNIgaqBpJmvueLYIdZcbJIUc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/xFm16TZF0PbZvMM6HDPSvgjiKPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.8.0/21
Signature Algorithm: sha256WithRSAEncryption
94:94:d9:32:52:0a:29:37:ae:05:e6:9f:b9:b5:12:c9:cc:4c:
da:b1:62:38:0a:0d:b5:02:d7:bd:a1:a5:8b:8f:88:e8:df:7c:
47:fd:54:fc:81:bf:9e:91:b3:08:43:74:b8:3e:71:d6:75:0a:
11:a5:99:c9:8e:4f:f5:03:4c:e3:ce:f2:2e:aa:be:66:eb:bd:
65:8c:7c:13:dc:3e:36:e6:48:c4:a2:6e:4e:80:0e:66:13:bf:
8d:10:76:6e:ce:a9:3e:3d:52:aa:8c:3c:de:91:fd:9b:b5:5a:
aa:82:72:f5:d4:f0:d6:0d:b7:2b:f0:17:98:bb:bc:b2:23:ce:
b7:35:26:b1:35:78:e7:86:84:13:dc:cf:71:b5:d8:04:d6:07:
d2:ad:e1:59:9f:3a:3c:3e:f4:6f:25:39:70:e6:d9:74:37:58:
9d:26:21:44:46:50:81:02:d0:61:cf:0e:b6:9a:1d:eb:9f:05:
4b:be:74:5b:40:ef:04:70:62:f2:e3:bb:55:59:3b:c7:89:8b:
9d:ad:72:6b:c7:c0:81:c6:fd:b7:72:1e:1d:50:8c:bf:f7:8d:
23:b4:5b:14:1d:72:c3:a5:65:17:07:4e:83:14:32:9a:f3:bd:
c9:e1:41:21:38:53:93:8d:1c:1c:76:c9:d5:34:cf:7f:b2:81:
fd:2c:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:10 2023 by rpki-client on console.sobornost.net