Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/KYrG7UbROLpM5zSLr9fzoTDMKiI.roa
File: KYrG7UbROLpM5zSLr9fzoTDMKiI.roa (raw, json)
Hash identifier: LJq8K5fr2pZkUDZwkAMqCw9w6dx2m6AG+VrnFqleuDg=
Subject key identifier: 29:8A:C6:ED:46:D1:38:BA:4C:E7:34:8B:AF:D7:F3:A1:30:CC:2A:22
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 01856CB816864232DB44C4D8F1A5FAB5F61D
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/KYrG7UbROLpM5zSLr9fzoTDMKiI.roa
Signing time: Sun 01 Jan 2023 09:44:41 +0000
ROA not before: Sun 01 Jan 2023 09:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210879
IP address blocks: 31.216.61.0/24 maxlen: 24
2a11:4980::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:16:86:42:32:db:44:c4:d8:f1:a5:fa:b5:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Jan 1 09:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=298ac6ed46d138ba4ce7348bafd7f3a130cc2a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:22:2a:00:c1:b2:00:53:50:d7:cc:33:d5:
eb:f2:f0:00:ca:08:05:45:fe:9e:c9:27:80:84:9b:
7c:17:99:8b:39:37:b7:5b:d7:78:40:d3:bd:5e:df:
ac:54:6e:f9:78:ba:c4:19:e1:01:00:91:08:0f:ea:
57:af:78:36:12:37:4c:35:a3:73:1b:02:37:cd:cd:
88:92:ed:e0:db:a6:e8:2e:3c:71:5e:ce:c1:9d:38:
55:47:a9:46:b9:83:88:46:ce:4f:d5:f0:97:91:25:
2a:76:c2:ba:37:2f:26:a9:1a:34:f0:dd:59:1a:99:
57:2f:fd:10:88:b5:cd:24:9b:63:86:d8:96:03:89:
c2:f8:53:c6:e9:6a:03:89:1b:31:4c:af:3b:a7:0e:
84:32:e7:0f:05:ad:17:91:a3:08:cc:d0:d6:30:be:
33:27:9e:01:3d:73:b0:33:1b:78:bc:8e:31:22:b9:
2a:35:28:70:45:3c:5a:09:9a:09:b3:fe:bc:58:3e:
a2:8f:89:7a:a5:d3:fe:5e:0f:86:b4:7b:c1:03:57:
1c:76:95:a4:73:a4:b3:8b:88:15:54:43:16:d7:c1:
05:bd:ab:af:b3:23:46:d1:56:2c:eb:e8:b3:6e:ec:
70:f4:87:f0:8b:21:10:9d:c4:58:84:1e:52:87:32:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:C6:ED:46:D1:38:BA:4C:E7:34:8B:AF:D7:F3:A1:30:CC:2A:22
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/KYrG7UbROLpM5zSLr9fzoTDMKiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.61.0/24
IPv6:
2a11:4980::/29
Signature Algorithm: sha256WithRSAEncryption
41:bc:fe:33:7f:1d:17:0c:58:76:88:98:99:33:a7:5f:f2:61:
71:77:e9:80:3a:3e:a1:e8:5e:79:26:d4:f5:32:2c:37:ec:b5:
30:ae:e5:03:5b:a9:ad:5b:31:99:64:aa:b3:59:21:c3:3d:61:
c7:22:a1:47:39:5f:91:8d:58:db:ef:ec:7b:af:d9:03:22:b9:
3d:18:8d:32:44:7d:5c:84:e0:ab:e3:76:21:1f:58:f5:de:d3:
4e:88:24:14:a3:f3:39:f4:ed:e4:3d:c4:c9:46:ab:6c:6b:91:
9a:47:66:4a:79:15:2b:76:16:16:e0:5d:fe:53:5f:54:d2:cc:
f7:50:05:81:a5:8d:5f:9a:9b:d2:4e:10:96:af:7d:81:d6:52:
b3:16:f5:ee:ba:18:64:9a:6c:30:73:97:d0:7b:83:5d:93:eb:
61:2a:73:2c:81:50:01:86:89:b2:6a:96:17:1a:35:e2:1b:99:
92:c9:91:d5:17:6a:10:15:dc:73:aa:bb:5e:e4:bd:75:4a:19:
b5:d1:e4:05:bf:8f:3f:f7:02:f3:f5:f7:fb:64:90:a3:aa:4d:
ab:4a:07:fa:c6:2c:17:a9:31:53:65:e2:0a:3d:6e:ce:a8:49:
b9:52:cf:e3:ee:75:3a:d3:f7:61:15:66:34:1f:16:07:96:2a:
65:30:17:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:33 2024 by rpki-client on console.sobornost.net