Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/1-tVK6EtKQu72PCwPnBbtNWg1S5s.roa
File: 1-tVK6EtKQu72PCwPnBbtNWg1S5s.roa (raw, json)
Hash identifier: E2lW4vEHgkJPAprH/BCwPhmUTUY/9QBmqPjSCZQbrsg=
Subject key identifier: FA:D5:4A:E8:4B:4A:42:EE:F6:3C:2C:0F:9C:16:ED:35:68:35:4B:9B
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 0185737A78AA5E8C76D87FBF279AA10DFA85
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/1-tVK6EtKQu72PCwPnBbtNWg1S5s.roa
Signing time: Mon 02 Jan 2023 17:14:44 +0000
ROA not before: Mon 02 Jan 2023 17:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211757
IP address blocks: 31.43.172.0/23 maxlen: 24
31.43.172.0/24 maxlen: 24
31.43.173.0/24 maxlen: 24
185.242.186.0/24 maxlen: 24
2a10:9840:1::/48 maxlen: 48
2a10:9840::/29 maxlen: 48
2a10:9840:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:78:aa:5e:8c:76:d8:7f:bf:27:9a:a1:0d:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Jan 2 17:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fad54ae84b4a42eef63c2c0f9c16ed3568354b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:01:fa:56:b3:58:f9:74:b1:d0:76:43:d3:a1:
5e:6f:bb:a0:e7:0d:cc:c3:4f:f2:72:da:58:ae:d1:
5d:7c:6e:7e:e0:a2:70:75:69:37:e6:e0:86:29:55:
89:c1:bc:c8:04:72:70:e5:33:44:ad:9f:a7:91:c0:
95:51:fa:12:fd:fa:68:ee:f2:80:3b:f5:9a:2c:68:
ba:e1:33:3b:6a:db:69:bb:eb:fa:c9:ea:52:fd:03:
c9:12:c4:8d:9e:3b:3c:9d:e5:25:62:4b:ca:4d:31:
97:89:1a:2c:89:e2:c5:a9:ff:e6:54:f2:12:bd:c1:
07:98:5d:2a:c1:eb:c2:f7:49:9c:13:ba:eb:c8:11:
15:42:17:40:b6:69:b7:7f:23:23:21:cd:81:f3:54:
64:72:40:b7:df:e3:d4:e9:82:a1:b8:b1:89:fc:c4:
93:c3:45:e6:e5:72:46:99:f9:fb:5c:ca:6b:07:f6:
cd:e1:88:4e:ed:b0:ae:64:19:62:c2:22:68:6e:cc:
cd:fb:b9:c1:82:db:e6:b2:0d:d8:85:b4:c6:b0:f2:
36:ed:2d:e7:cd:ea:f6:3e:15:64:1f:9f:b0:ff:d5:
12:90:18:57:09:01:ab:9e:87:32:a2:1a:d1:97:02:
e4:fd:cc:8e:9a:bd:3b:1f:a0:af:56:3c:c5:16:1f:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:4A:E8:4B:4A:42:EE:F6:3C:2C:0F:9C:16:ED:35:68:35:4B:9B
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/1-tVK6EtKQu72PCwPnBbtNWg1S5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.172.0/23
185.242.186.0/24
IPv6:
2a10:9840::/29
Signature Algorithm: sha256WithRSAEncryption
2f:cd:5d:7b:e4:e8:e6:6d:a1:20:68:9f:2b:9d:47:73:b4:9f:
61:61:f4:c0:78:d8:4e:15:21:c8:f6:03:f3:3e:20:32:e5:c7:
99:04:63:e2:38:5f:d9:50:ce:f3:c2:32:07:e2:8f:8c:c3:77:
24:7a:fd:81:03:bc:09:64:7f:ec:6c:8e:09:8d:74:d0:17:d6:
28:63:64:5a:21:80:8d:38:d8:f9:c7:97:9c:a0:0d:1a:38:df:
b7:2f:be:9c:d4:11:e2:f1:7c:7b:f5:6d:c1:9a:12:79:7e:28:
45:f1:d2:51:da:e0:4c:f0:a8:ee:cc:7b:ab:90:c0:98:cd:10:
fb:f0:19:09:51:8a:e7:28:c0:14:7f:a3:38:43:dd:76:ac:62:
be:d0:20:64:d9:d4:42:06:71:9d:0c:d7:97:a1:84:e8:2c:8e:
86:ad:e1:f9:af:43:a2:37:c3:a5:e6:b2:af:2c:b7:64:70:41:
c0:5f:6d:a7:09:ac:6e:37:29:59:24:96:36:04:6d:37:2b:83:
75:a6:42:b3:b3:24:6c:cb:28:66:03:56:e6:16:d8:0b:66:1b:
68:ac:58:21:d7:bd:98:a4:5a:c4:47:a6:50:b2:d4:b7:1a:1b:
c5:76:af:67:e7:8c:aa:b3:29:06:a6:53:7e:ce:72:9d:ee:a0:
2b:66:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:29 2024 by rpki-client on console.sobornost.net