Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/Dolq_Vi_HiCJMnJyCcVq4bpurok.roa
File: Dolq_Vi_HiCJMnJyCcVq4bpurok.roa (raw, json)
Hash identifier: rbPqDVwfDvz/ALbxMl2anX/atGuPxf74jrDoiKsigmQ=
Subject key identifier: 0E:89:6A:FD:58:BF:1E:20:89:32:72:72:09:C5:6A:E1:BA:6E:AE:89
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 018E0B006D2290BEC2D3C9EDFB6B7384F488
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/Dolq_Vi_HiCJMnJyCcVq4bpurok.roa
Signing time: Mon 04 Mar 2024 19:46:01 +0000
ROA not before: Mon 04 Mar 2024 19:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197637
IP address blocks: 31.25.152.0/21 maxlen: 21
37.99.200.0/21 maxlen: 21
37.123.120.0/21 maxlen: 21
153.92.32.0/21 maxlen: 21
185.62.88.0/22 maxlen: 22
185.68.76.0/22 maxlen: 22
2a04:6ec0::/29 maxlen: 29
2a04:6ec0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 11 Mar 2024 15:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0b:00:6d:22:90:be:c2:d3:c9:ed:fb:6b:73:84:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Mar 4 19:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e896afd58bf1e208932727209c56ae1ba6eae89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:46:81:75:27:b2:f6:99:36:80:5a:a0:39:
62:81:bb:10:a0:46:ac:5c:80:e1:1d:26:62:fa:ef:
5d:6e:0c:7a:60:98:23:f2:d2:70:d8:b1:e4:e1:8c:
16:9f:2c:fc:60:c2:cf:b6:76:e3:85:d2:f9:f6:50:
14:74:76:c5:60:96:16:cb:79:e0:4f:80:f4:93:17:
c2:f6:50:f5:7c:48:67:83:15:51:cd:12:a1:16:96:
fb:dd:8b:a9:3d:28:e9:5f:7f:a3:97:fd:42:f7:a3:
02:58:db:21:17:fc:de:dc:04:b9:76:f8:06:0e:e3:
64:8b:e0:4f:04:ce:0d:0d:46:7d:f5:7d:3a:39:10:
06:47:00:b5:ec:52:9d:63:d3:34:ce:b5:00:ff:f0:
6b:32:ae:d8:09:cd:a4:6b:c6:8a:fd:f2:7d:6c:f2:
e5:c7:90:9d:e1:77:27:d8:c1:a1:29:fe:ea:9b:6d:
ab:26:4a:16:5e:ca:6d:88:56:a6:8b:62:84:bd:f3:
5e:2a:45:7d:a2:ab:97:1c:60:e2:d8:71:42:cf:6a:
e5:8f:3a:81:11:20:85:55:ae:1b:03:b1:04:39:67:
a4:71:5d:b5:b1:93:33:6b:89:c2:7a:ed:09:49:8d:
13:53:d5:aa:9f:eb:93:3a:b4:c5:86:b1:13:fa:6c:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:6A:FD:58:BF:1E:20:89:32:72:72:09:C5:6A:E1:BA:6E:AE:89
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/Dolq_Vi_HiCJMnJyCcVq4bpurok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.152.0/21
37.99.200.0/21
37.123.120.0/21
153.92.32.0/21
185.62.88.0/22
185.68.76.0/22
IPv6:
2a04:6ec0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:79:25:89:23:22:14:41:b6:21:b8:46:d2:6d:1d:a4:6d:db:
4a:d6:b6:81:a2:bb:0d:6d:2d:61:b6:b7:c2:de:84:96:9e:96:
9d:e1:8c:cc:14:05:8f:5a:b9:a8:36:41:28:fb:c2:64:a9:7f:
9c:37:7f:ef:0e:fc:b9:86:77:6f:0c:b0:80:f7:06:40:c8:8c:
1b:38:11:11:68:c9:b8:0b:ba:47:6b:62:ee:70:86:3e:a4:2e:
48:28:2e:c8:68:9b:e5:5c:69:b0:cb:de:78:0b:b3:5b:66:36:
69:62:45:e8:0e:16:10:bf:fb:9b:7b:c9:ff:f9:71:8a:9a:60:
5e:79:53:6b:cc:8a:fe:5c:ab:91:27:1f:5e:6a:7e:1f:bd:25:
a2:35:75:c8:9f:27:be:25:48:43:fe:88:13:d9:84:29:72:2f:
01:a0:64:b8:06:23:9c:01:fe:31:9d:cf:aa:23:6c:95:e4:12:
70:0b:83:90:cf:0f:93:08:d7:99:f5:66:48:cd:42:d7:e7:47:
9b:70:8e:14:3c:fe:64:63:f6:a8:56:b7:1a:9a:9c:ca:23:55:
98:ce:84:86:83:d9:32:09:c5:a7:8b:92:37:73:c8:6e:b5:cf:
ed:e4:7e:12:29:c7:e2:1c:10:06:55:cc:ec:b7:99:8f:ba:ae:
55:1f:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:20 2024 by rpki-client on console-ams.rpki-client.org