Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/03vCeYbNeDSECskRssxp6VHOQag.roa
File: 03vCeYbNeDSECskRssxp6VHOQag.roa (raw, json)
Hash identifier: qIUYbmlvtU+a5gpAWX6OuXNIWuVGm70Cdb+sfQUKlAY=
Subject key identifier: D3:7B:C2:79:86:CD:78:34:84:0A:C9:11:B2:CC:69:E9:51:CE:41:A8
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 018CC26D4D23D1C28A6438E031CCD3BD4753
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/03vCeYbNeDSECskRssxp6VHOQag.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211933
IP address blocks: 31.10.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 09:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4d:23:d1:c2:8a:64:38:e0:31:cc:d3:bd:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d37bc27986cd7834840ac911b2cc69e951ce41a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:a7:c9:12:99:48:28:6e:5c:d1:92:db:59:
95:c4:20:29:ed:4e:7e:0b:57:27:1c:68:11:ba:bf:
1a:16:bd:9e:0c:4f:ed:57:ad:eb:0e:39:44:cd:40:
60:ad:f9:7f:23:d5:f9:40:7b:c3:84:e3:2b:81:8c:
77:9f:09:23:1f:2c:84:a9:4e:f8:62:7a:38:8e:69:
9f:19:60:ca:40:77:4f:22:2e:c0:e2:b6:a5:6c:de:
a8:75:f3:71:7d:03:6e:9e:92:b3:a7:d5:70:d9:82:
e1:2c:45:23:71:91:07:f2:bb:9f:9a:9f:45:db:a7:
1f:22:87:22:fd:5b:74:a1:c1:af:05:9e:ef:03:58:
47:c9:f0:7a:b4:7f:7f:14:d9:a4:15:bd:3f:f6:76:
ad:f4:1b:5b:04:4a:4b:19:29:52:d8:f5:39:db:ad:
da:1c:8c:bf:2b:f9:71:25:6f:3b:a7:49:ac:c4:7c:
ce:37:36:f7:64:42:a1:cd:5f:8b:ec:f5:e3:be:67:
af:37:6b:4e:7b:4a:0e:4f:f1:ac:ce:0c:ae:3d:01:
91:5f:9b:49:6f:a5:dc:2d:d9:fc:6a:5a:73:4e:b3:
5a:24:6b:db:bd:37:a6:98:56:69:9f:5f:8f:41:2c:
ef:8f:03:38:46:4e:0e:fe:2b:43:56:e7:3b:e4:9f:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7B:C2:79:86:CD:78:34:84:0A:C9:11:B2:CC:69:E9:51:CE:41:A8
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/03vCeYbNeDSECskRssxp6VHOQag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.6.0/24
Signature Algorithm: sha256WithRSAEncryption
34:40:98:8f:6b:55:b3:d5:e8:b5:e8:64:1c:35:33:78:55:97:
17:81:12:85:b0:86:32:8c:e0:86:d1:8a:2d:31:82:3d:30:59:
e4:0d:13:40:84:8a:46:f8:f1:9f:ab:d3:ea:9c:2c:f0:df:69:
d4:d7:96:76:5f:29:da:a4:ff:d1:9d:6d:13:1c:ac:e8:71:72:
9e:2f:71:d7:c0:df:e8:42:b2:c8:3a:cc:15:99:6b:a8:cd:4e:
95:0b:1c:e2:8f:1f:5b:7b:c5:86:e2:59:f9:d5:dc:42:5c:13:
d2:97:2b:b4:f1:c2:c1:5f:b0:4a:77:e7:dd:e1:1b:43:53:51:
21:50:c6:2c:3a:d5:8c:9d:38:65:7a:e9:23:7d:f1:f9:ee:18:
ca:3c:4c:47:f6:39:e9:cd:67:01:b6:50:53:c2:80:4c:f0:60:
be:ee:c9:ad:80:14:bc:f9:c6:0f:ce:75:da:8a:63:50:c0:30:
37:71:ee:df:4b:41:7a:84:3f:ac:ce:cf:1e:27:8d:82:57:e8:
ff:2a:b9:f3:3e:6e:60:40:ca:c6:6c:a7:97:a8:25:64:b6:28:
8a:0d:b1:cf:cb:94:5f:6a:1b:fc:d1:8c:b3:9b:e9:84:88:5d:
82:d0:51:36:52:58:f9:18:c5:2b:c2:ae:1a:35:32:a9:52:7f:
dd:04:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 13:26:50 2024 by rpki-client on console.sobornost.net