Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/Vlrf1m9Yr_uUslcrWDvp6lS990g.roa
File: Vlrf1m9Yr_uUslcrWDvp6lS990g.roa (raw, json)
Hash identifier: XTiTo3o6LoeakNBlPcNYWR/V+5PlfimyGnxd1ZOugJ0=
Subject key identifier: 56:5A:DF:D6:6F:58:AF:FB:94:B2:57:2B:58:3B:E9:EA:54:BD:F7:48
Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial: 0186E65F8EEB21D406362C7129747BF567EF
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/Vlrf1m9Yr_uUslcrWDvp6lS990g.roa
Signing time: Wed 15 Mar 2023 17:44:27 +0000
ROA not before: Wed 15 Mar 2023 17:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 217.31.9.0/24 maxlen: 24
217.31.10.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:5f:8e:eb:21:d4:06:36:2c:71:29:74:7b:f5:67:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Validity
Not Before: Mar 15 17:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=565adfd66f58affb94b2572b583be9ea54bdf748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:9b:26:c2:a1:c9:57:05:06:fb:28:c9:21:
14:61:eb:1b:a8:6c:3b:0f:b3:fa:66:b8:52:d6:9e:
68:e6:40:b9:86:d0:b2:ca:3b:0b:0b:ae:52:be:4f:
66:69:6d:36:b1:47:7a:c4:7a:8e:b2:2f:be:60:eb:
80:3d:80:90:2b:99:2b:cd:7b:05:33:48:7f:11:88:
c6:72:9b:a7:0c:33:98:a1:bf:34:80:23:9f:2a:1e:
e7:22:95:96:39:d4:8a:dc:70:3f:c5:d1:a9:92:e0:
02:34:e6:f2:59:39:a0:66:fe:ac:b4:2d:71:de:2e:
62:b4:12:25:f8:c3:68:92:9b:df:13:e8:86:45:b7:
c9:6b:5f:ee:13:9e:76:11:d7:8f:fe:2a:38:10:30:
a5:be:a8:bc:98:ef:24:f9:21:de:c7:3a:86:86:e7:
e4:84:ee:5d:b6:a1:67:57:61:0b:d5:e4:50:46:4f:
e4:53:0f:b4:ad:ed:e7:8d:6d:92:f9:8b:b3:98:95:
25:a0:44:e8:08:64:1b:6d:8d:ad:9a:16:b8:2d:32:
10:42:da:f2:fa:c9:b6:c9:b3:e2:e3:06:10:7e:c1:
6b:14:7c:e7:6d:8e:4a:23:5d:7c:65:67:33:3e:9c:
c4:ac:57:4c:75:fb:ca:3b:82:2e:1d:54:65:00:21:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:DF:D6:6F:58:AF:FB:94:B2:57:2B:58:3B:E9:EA:54:BD:F7:48
X509v3 Authority Key Identifier:
keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/Vlrf1m9Yr_uUslcrWDvp6lS990g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.31.9.0-217.31.11.255
Signature Algorithm: sha256WithRSAEncryption
64:1c:8c:7a:29:eb:e0:29:40:37:3a:dc:c6:1e:a4:d2:cf:a7:
38:53:a7:cb:a2:89:a5:0b:1f:c1:06:fc:31:f2:fa:ab:60:2d:
9e:49:14:e8:2e:a1:a3:fc:67:40:6c:3b:ac:ba:a0:5d:51:ba:
ed:1d:bf:c2:e1:d6:29:62:b1:b1:eb:a6:eb:f4:49:88:78:ff:
49:bc:62:42:f8:16:a4:e6:e5:d2:c4:8c:66:79:ed:7f:fc:76:
ea:ae:78:fe:6d:76:3b:89:8b:27:f8:d6:95:ba:20:67:79:ec:
2c:76:b7:b2:c3:44:31:dd:e7:a0:18:f2:01:89:d5:71:e6:5d:
99:90:b4:8e:fb:f5:e6:4d:86:1e:43:e5:1b:5f:7c:03:55:7e:
e5:4f:99:eb:50:59:32:8c:27:c3:cf:43:83:32:0a:0e:e4:0d:
fc:ca:e0:e3:42:e1:75:d0:d0:12:40:d8:13:db:a3:f4:74:97:
8f:0c:81:60:32:0d:f8:57:57:ec:4a:5f:e6:ad:4b:26:00:51:
ff:9e:91:8e:b5:56:61:30:38:37:8f:c6:a3:06:7b:58:42:db:
43:83:37:62:b1:5b:f4:5e:69:36:c3:bd:80:9d:fc:2b:04:fd:
f2:b8:df:f4:09:da:e2:bf:ea:b0:48:7c:c9:85:ff:8b:60:f0:
51:26:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:55 2024 by rpki-client on console.sobornost.net