Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/nECdrVeD6-Owz6xM2TJPKzSaGcE.roa
File: nECdrVeD6-Owz6xM2TJPKzSaGcE.roa (raw, json)
Hash identifier: ZawxQPYjAeImBtLx1FO8gmMYE7PH0sCrqaI69vu2CS8=
Subject key identifier: 9C:40:9D:AD:57:83:EB:E3:B0:CF:AC:4C:D9:32:4F:2B:34:9A:19:C1
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 0185719E753A845AA1F6B1A70498F51054A9
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/nECdrVeD6-Owz6xM2TJPKzSaGcE.roa
Signing time: Mon 02 Jan 2023 08:34:48 +0000
ROA not before: Mon 02 Jan 2023 08:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59595
IP address blocks: 31.135.184.0/22 maxlen: 22
31.135.191.0/24 maxlen: 24
31.135.188.0/23 maxlen: 23
31.135.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:75:3a:84:5a:a1:f6:b1:a7:04:98:f5:10:54:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Jan 2 08:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c409dad5783ebe3b0cfac4cd9324f2b349a19c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:67:41:0f:cc:99:54:c4:f7:82:d5:23:1b:
77:58:34:38:0b:12:cb:a5:f4:a7:45:3a:c6:4b:db:
3a:58:6d:6f:f2:a0:2a:4e:ed:0f:9b:97:75:96:86:
28:46:07:e2:34:62:97:4f:b1:55:cc:9d:aa:61:2c:
78:3c:fe:a1:c9:60:91:c3:1d:93:1f:00:b4:a0:36:
c3:1f:9d:04:39:e8:c0:d4:92:68:b5:ce:6c:be:64:
2f:2d:61:46:08:b2:66:1d:d5:38:74:f0:1c:fd:1c:
c6:9f:db:b3:ac:cf:03:38:13:cb:42:91:28:85:fe:
2b:65:46:e9:40:d5:2d:25:f7:71:30:18:d3:0a:e5:
33:ec:ea:ce:d4:93:28:e9:a4:7b:bb:11:65:8b:61:
83:3e:b0:64:84:f9:bd:55:cf:1d:7f:03:25:8d:eb:
a4:b7:94:15:85:22:fa:1b:bc:92:78:a1:be:b2:9f:
91:e8:bc:50:1d:95:2e:62:23:6e:da:2f:13:b1:ec:
08:0d:d6:ca:bd:8f:80:37:8d:24:d3:db:79:ce:ee:
32:06:f6:2f:97:02:01:f3:94:f0:be:69:c3:fe:0f:
75:30:84:29:48:5b:be:d1:2f:59:09:ac:e2:4b:87:
e9:79:df:8c:25:92:68:04:e1:e2:90:6f:b2:a0:4b:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:9D:AD:57:83:EB:E3:B0:CF:AC:4C:D9:32:4F:2B:34:9A:19:C1
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/nECdrVeD6-Owz6xM2TJPKzSaGcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.184.0/21
Signature Algorithm: sha256WithRSAEncryption
52:30:c0:2e:00:4d:5f:7b:a1:ff:b3:9f:8b:1d:6c:ec:99:07:
76:a1:8c:cf:db:10:8e:5c:73:1f:c8:28:d1:08:11:15:85:7e:
1d:47:5b:02:f3:17:8e:67:bf:7c:b8:ef:c1:12:86:11:90:d5:
83:3c:b3:be:d3:17:50:dc:2f:93:43:09:a5:75:80:3f:0f:a5:
cc:01:40:e4:eb:d9:89:82:ca:c2:9b:0b:91:4b:ec:27:a3:b9:
b9:cf:bc:cd:9a:51:48:ba:8c:59:ff:32:79:02:b9:2d:67:0f:
4a:8d:24:b6:61:8b:e1:69:c7:1c:fa:6a:8a:ff:a6:7c:b3:6f:
12:1d:d3:fd:bc:c1:c3:0e:26:b1:aa:f5:d2:6f:be:40:42:2d:
bb:b1:3c:d5:be:28:69:49:a9:2d:1f:ef:18:de:e8:43:c1:fa:
e9:6e:e0:03:1c:78:7b:14:d6:23:44:33:5e:11:b7:33:ca:b6:
a3:de:83:11:d0:76:13:b8:74:17:83:47:ec:da:0b:a5:8a:ac:
0b:82:e4:41:ca:8a:35:b5:72:c7:1a:70:44:b3:1a:3d:6b:70:
33:86:e9:68:8d:a2:b9:9e:11:92:cd:3c:f3:28:9e:be:44:95:
6c:12:bc:d0:6c:4e:b9:56:7b:0b:ef:ad:8c:9b:23:82:06:85:
30:5d:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:45 2024 by rpki-client on console.sobornost.net