Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/WVKK2w5r4D-S-6qPTmhiToSmF6I.roa
File: WVKK2w5r4D-S-6qPTmhiToSmF6I.roa (raw, json)
Hash identifier: pRLpLcQbHFJh1Ljuxp2hMOJO463O4K5aW4yvgPnmQnE=
Subject key identifier: 59:52:8A:DB:0E:6B:E0:3F:92:FB:AA:8F:4E:68:62:4E:84:A6:17:A2
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 01891FA2BD5889BEDD929D8AEA8C3A5F646B
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/WVKK2w5r4D-S-6qPTmhiToSmF6I.roa
Signing time: Tue 04 Jul 2023 06:41:46 +0000
ROA not before: Tue 04 Jul 2023 06:41:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198392
IP address blocks: 31.217.225.0/24 maxlen: 24
31.217.224.0/24 maxlen: 24
31.217.224.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:a2:bd:58:89:be:dd:92:9d:8a:ea:8c:3a:5f:64:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Jul 4 06:41:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59528adb0e6be03f92fbaa8f4e68624e84a617a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:c4:c9:76:67:c7:44:ae:b8:28:d6:53:0e:
dc:9e:70:cf:9a:ba:dc:cd:eb:2c:24:3d:5a:57:65:
8c:a5:66:a1:67:05:d6:3d:39:f9:72:93:94:66:10:
46:58:f9:0b:38:1b:7d:92:27:f2:1d:c9:c3:41:dc:
11:f8:3a:10:f9:3b:1f:bc:0a:a3:52:fe:7f:c3:33:
ab:be:b8:48:28:48:68:73:30:30:0d:87:10:c8:ff:
88:37:75:92:4a:0e:98:55:18:29:1a:bd:0d:01:ba:
75:a9:03:0e:1f:81:69:fd:6d:fc:b9:c5:83:0d:e1:
a2:f3:4f:93:3d:fe:5c:34:7d:2e:31:33:68:40:2f:
94:90:00:f6:21:a1:94:62:77:bf:1a:ce:73:99:a4:
71:10:f5:4a:14:6b:e2:99:25:53:02:3c:08:0d:d5:
dd:f3:0e:6d:00:ce:33:d7:a2:56:96:62:71:a2:81:
66:b4:88:14:3a:c8:ef:91:1d:17:62:71:1d:65:42:
a9:20:43:65:55:86:b3:7a:10:c7:1d:ce:29:4e:4d:
c8:8c:93:de:13:ac:13:d8:b2:14:bc:e5:02:da:7b:
4e:6c:d3:57:48:ef:36:ff:55:e8:e1:e2:c2:02:9e:
33:cf:3f:1f:1e:1a:46:87:de:13:3b:0b:2d:b5:f4:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:52:8A:DB:0E:6B:E0:3F:92:FB:AA:8F:4E:68:62:4E:84:A6:17:A2
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/WVKK2w5r4D-S-6qPTmhiToSmF6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.224.0/23
Signature Algorithm: sha256WithRSAEncryption
88:e2:9b:c6:af:3e:43:c7:8a:0a:44:e6:b3:2b:d7:89:69:59:
da:80:f0:a1:8e:13:39:9e:28:e2:76:fe:83:ec:57:70:f2:f1:
21:c0:91:2e:4d:9c:11:05:7f:b0:d3:2c:b2:35:72:cf:ea:7c:
55:89:2c:f4:67:55:fe:04:0f:32:f7:7b:26:20:1e:b6:76:fa:
d3:64:7b:04:a1:1c:80:8e:ce:0e:4a:21:9d:ce:f6:fd:15:b0:
ce:16:e1:5f:24:bb:c4:e3:bb:92:3f:e1:c6:df:3b:07:3f:1b:
9e:5b:b1:a1:91:a2:fb:a5:e2:3b:52:bf:fc:e9:d1:86:4f:56:
1b:5f:a6:82:6c:22:f6:03:6d:5e:b6:6e:1a:8b:07:d8:7f:c8:
35:4f:d3:85:bb:e3:51:6c:a9:03:dc:b2:66:7b:bc:16:a9:b2:
61:e5:8f:f2:ff:df:eb:5d:43:72:d0:90:13:68:f6:bd:07:37:
7b:f6:4b:84:ec:66:ba:a9:96:54:d4:54:d1:21:59:0e:7d:5a:
d7:95:0d:94:fe:0f:8c:10:a8:45:74:06:e6:dd:f8:06:20:55:
04:aa:21:20:8b:4a:5c:68:c7:cd:7c:92:e0:89:4f:7e:8d:e2:
c0:7e:90:a6:df:f6:a4:f4:8f:60:29:ba:86:21:42:31:eb:44:
85:f1:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:35 2023 by rpki-client on console.sobornost.net