Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/lTbxREU3TcBZNvni72db6AZBz6M.roa
File: lTbxREU3TcBZNvni72db6AZBz6M.roa (raw, json)
Hash identifier: RjR/RZMw5icz1WM+RLo/NYfy9QuoPCdW3+FarmHLSoE=
Subject key identifier: 95:36:F1:44:45:37:4D:C0:59:36:F9:E2:EF:67:5B:E8:06:41:CF:A3
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01856E266836066E44A45748F651C379DBB9
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/lTbxREU3TcBZNvni72db6AZBz6M.roa
Signing time: Sun 01 Jan 2023 16:24:48 +0000
ROA not before: Sun 01 Jan 2023 16:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202279
IP address blocks: 31.133.48.0/21 maxlen: 21
31.133.48.0/22 maxlen: 22
31.133.55.0/24 maxlen: 24
31.133.53.0/24 maxlen: 24
31.133.52.0/24 maxlen: 24
31.133.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 07:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:68:36:06:6e:44:a4:57:48:f6:51:c3:79:db:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 16:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9536f14445374dc05936f9e2ef675be80641cfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:71:f9:e1:0e:df:b2:47:75:e8:04:c1:e2:
83:a3:ce:42:41:1d:87:ec:4c:74:8c:92:49:8d:a2:
c2:04:21:e2:6c:5b:24:1f:d1:d3:71:db:9c:3a:a1:
f8:93:43:bb:7d:21:3b:64:ce:98:2d:9c:cc:4a:85:
34:9f:eb:7a:24:37:c7:59:cf:52:a3:c4:43:9e:e1:
2d:3d:8a:4a:21:35:64:c1:9c:cf:69:20:fe:e8:e4:
03:4b:68:59:f5:71:c0:60:c4:10:bd:9a:97:4c:c6:
b5:dd:b1:a0:e9:ed:c3:97:c2:da:d2:29:81:16:d7:
01:f6:e3:13:82:bd:47:2d:1d:68:87:eb:b1:0f:f8:
43:ff:f8:c1:fe:ea:c1:82:2d:e1:ef:26:b7:0a:cd:
a2:cf:3a:ec:5f:19:d8:50:c3:a9:b8:94:74:be:75:
d0:3a:26:4f:23:94:5e:4b:e1:37:41:83:60:f7:9a:
f9:17:17:01:d9:15:f2:3b:a0:00:27:c1:44:9d:9c:
65:ba:aa:ca:d5:ef:c0:50:3c:41:86:44:98:58:a3:
9a:11:7b:1f:00:31:e8:98:2c:fe:46:e0:c7:02:88:
2b:02:58:a9:a3:20:51:ab:52:c2:fe:4e:78:67:1c:
9f:49:0d:83:bc:1b:db:c7:0c:5c:7d:1a:45:b0:2b:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:36:F1:44:45:37:4D:C0:59:36:F9:E2:EF:67:5B:E8:06:41:CF:A3
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/lTbxREU3TcBZNvni72db6AZBz6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.48.0/21
Signature Algorithm: sha256WithRSAEncryption
70:db:5a:60:3d:5d:14:dc:49:38:83:93:f6:32:39:2e:a9:35:
26:a4:e5:37:ef:59:8f:59:9b:32:a8:62:0d:a6:9e:f2:bc:78:
95:e4:ad:1e:a0:a0:8f:b2:2d:ff:3e:d7:c2:9a:e3:88:fe:98:
3b:fd:54:f5:9c:d6:b7:8b:af:ec:f5:aa:1f:14:df:c0:bf:4c:
5f:b3:a8:6a:1b:0a:00:f7:db:88:2a:41:87:5f:00:0e:fc:f1:
16:cf:4c:e7:0b:19:11:17:7d:ac:da:61:fd:c9:9c:92:4d:14:
52:50:5c:bb:1a:5e:75:aa:ee:57:21:55:61:e2:d6:ef:35:22:
b7:df:31:61:cc:33:5e:64:95:f9:13:94:6a:36:28:f2:4a:e8:
22:91:d6:66:bc:29:04:63:64:28:fc:21:64:ba:0c:49:cc:90:
55:f5:97:5b:52:b4:6a:a4:a4:1e:bd:f5:eb:90:92:1e:f4:a7:
c8:d5:b1:34:3f:4f:2b:b1:35:ff:eb:f7:d8:ad:a8:26:da:9e:
81:fd:3d:81:ea:e2:fd:ef:64:78:e2:cd:53:b2:02:34:be:0c:
a2:38:88:1b:a0:86:0a:07:6e:8b:3a:d2:03:99:a0:96:f5:fb:
65:36:72:03:bc:30:d5:c2:bf:93:7a:3c:fd:c8:be:46:1c:d2:
18:a0:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org