Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/JLo6Za-EvFs-szLhkOfdnaWM_dE.roa
File: JLo6Za-EvFs-szLhkOfdnaWM_dE.roa (raw, json)
Hash identifier: 2TCwat8IhiMyc5GSPUvqtoyg7b5bPGgSujlzA/8eV5Q=
Subject key identifier: 24:BA:3A:65:AF:84:BC:5B:3E:B3:32:E1:90:E7:DD:9D:A5:8C:FD:D1
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 0186EB75706D601D29852BF4B5A570FF8D08
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/JLo6Za-EvFs-szLhkOfdnaWM_dE.roa
Signing time: Thu 16 Mar 2023 17:26:27 +0000
ROA not before: Thu 16 Mar 2023 17:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 31.12.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:75:70:6d:60:1d:29:85:2b:f4:b5:a5:70:ff:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Mar 16 17:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24ba3a65af84bc5b3eb332e190e7dd9da58cfdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:50:54:84:8e:4d:6f:fc:8b:45:2c:70:5f:
35:ce:5c:ec:fa:78:e0:ac:50:82:21:0f:9c:14:a1:
93:4b:e0:61:7c:9e:fc:e8:f8:1b:0d:ba:bf:26:7c:
d2:a4:f2:28:98:c8:f1:21:37:70:7a:14:6d:4c:c8:
67:78:97:32:ef:08:18:8a:23:ea:75:6f:75:b6:fe:
01:5d:e4:d4:18:2d:79:42:d4:8d:c4:cc:82:1d:2d:
5a:ed:3c:1f:e4:f7:26:16:4d:8e:8b:b7:af:4e:2b:
a6:34:a0:93:68:99:f3:cf:31:ce:42:bc:71:de:0b:
15:c6:e6:be:e2:5e:2f:c3:93:67:7c:04:cf:fb:ee:
aa:c2:58:12:75:e3:fb:15:45:f3:5d:2b:e1:d1:75:
74:5d:eb:ca:a5:ae:2c:3c:2e:ff:1c:10:38:bb:5b:
1b:f8:02:e5:aa:0a:38:de:cf:69:e2:da:9f:f9:c0:
90:a4:5a:2a:c4:26:85:90:91:4a:cb:b6:ba:00:73:
5d:58:b4:3a:98:66:23:63:79:8b:c5:02:2b:62:f3:
14:88:5b:a4:ac:88:fb:fa:4f:3b:32:c8:5e:c2:3e:
3f:50:02:7e:28:35:43:67:1b:50:7a:a2:84:24:3c:
0a:ad:10:93:03:bb:87:82:88:f4:a5:43:ea:0d:8b:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BA:3A:65:AF:84:BC:5B:3E:B3:32:E1:90:E7:DD:9D:A5:8C:FD:D1
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/JLo6Za-EvFs-szLhkOfdnaWM_dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.73.0/24
Signature Algorithm: sha256WithRSAEncryption
59:42:94:3c:6b:b2:7c:17:d4:82:a5:4d:29:b8:5f:b8:45:fd:
ce:d0:74:c2:f6:3d:0b:a7:df:54:60:b9:17:b2:af:c7:eb:6c:
91:e7:e7:31:69:61:e1:e7:ee:2c:f1:e3:8a:5d:52:51:f2:8f:
6d:ad:5e:04:5c:14:7a:a9:2e:30:a0:27:bc:ab:06:ab:29:30:
bf:2d:e5:7d:c6:54:97:32:be:12:7b:d5:a0:a4:9b:a4:fa:80:
0c:b0:30:c2:54:42:41:b5:26:3b:2f:3c:3c:e3:35:80:87:98:
5f:10:18:28:79:05:0b:51:6e:0f:ce:0e:94:8e:d7:ca:b8:68:
94:20:0a:90:11:76:e0:90:7b:ff:76:8c:12:d1:70:48:7e:56:
cd:8f:1d:d1:4b:f4:3c:5a:dd:2c:82:01:e2:0e:e6:11:9e:c3:
8e:19:1c:20:20:71:43:70:ba:80:cf:5a:8f:5e:9b:a4:c4:6f:
78:1d:c3:b8:0f:83:f8:9e:52:25:66:3b:cc:d8:56:03:09:9a:
98:41:31:93:49:ad:e1:d5:8f:ad:2e:60:f7:dd:f3:8a:59:c8:
a9:bd:19:c2:bf:36:c4:5d:1c:72:a7:b2:dc:7e:e0:1e:1a:46:
e3:6f:b7:2e:1e:47:e4:7c:0e:09:6f:46:33:f6:f1:4a:73:ae:
bd:75:f0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:52 2024 by rpki-client on console.sobornost.net