Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nXg8uypcr9ViDPQ_B-29d8fS8L0.roa
File: nXg8uypcr9ViDPQ_B-29d8fS8L0.roa (raw, json)
Hash identifier: JoddU8un17/JsBrmt0eJ16IgxQFiqgy+N4jPiiKIGSw=
Subject key identifier: 9D:78:3C:BB:2A:5C:AF:D5:62:0C:F4:3F:07:ED:BD:77:C7:D2:F0:BD
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018D54E8329A1BDCA201CFC2B7489B0B5A67
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nXg8uypcr9ViDPQ_B-29d8fS8L0.roa
Signing time: Mon 29 Jan 2024 11:08:39 +0000
ROA not before: Mon 29 Jan 2024 11:08:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.0.0/20 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.17.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
37.220.80.0/22 maxlen: 22
46.19.64.0/22 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
81.200.158.0/24 maxlen: 24
94.198.216.0/22 maxlen: 24
141.98.234.0/24 maxlen: 24
185.166.196.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 14:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:e8:32:9a:1b:dc:a2:01:cf:c2:b7:48:9b:0b:5a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 29 11:08:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d783cbb2a5cafd5620cf43f07edbd77c7d2f0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:62:01:15:00:b0:d9:4f:b1:86:2f:c3:db:e3:
d8:b2:3f:71:b2:bb:b5:42:24:84:a7:a1:5f:8e:7e:
3d:eb:46:0e:a8:57:ec:9d:14:a3:aa:9e:11:13:9b:
9c:53:21:49:d9:2a:78:be:73:a7:45:67:1d:0f:8f:
d7:85:4f:18:d3:82:01:c9:cf:70:4b:62:47:db:46:
2d:f8:08:77:de:18:4f:73:68:58:3b:4c:c0:dc:0b:
69:41:5d:46:15:2a:01:03:4d:f6:e0:c1:1f:51:d1:
04:c3:b8:cd:ae:6b:90:4a:47:90:b8:5a:67:57:d9:
3b:ef:d4:2e:6e:cb:c0:83:b3:b9:a1:ef:28:8d:d8:
94:6a:69:e7:0d:a1:01:cd:2c:e9:80:43:de:96:be:
3f:87:77:82:1a:06:0c:7a:cb:14:9a:4b:08:bf:19:
dc:e5:06:65:b6:6a:8a:25:b8:d0:17:03:5a:76:ca:
8a:6e:d5:fc:6e:ea:dc:35:9c:ab:b7:b4:25:d0:89:
52:a8:21:5d:f4:c1:8e:1b:bb:24:c2:41:75:18:7d:
8e:97:66:de:20:59:a1:41:53:2c:c9:ba:59:d1:fe:
b2:81:aa:d3:17:82:27:b1:43:f6:85:ee:ee:4e:cf:
5b:2e:a1:76:64:c2:42:df:00:e0:0d:cb:22:94:7f:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:78:3C:BB:2A:5C:AF:D5:62:0C:F4:3F:07:ED:BD:77:C7:D2:F0:BD
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/nXg8uypcr9ViDPQ_B-29d8fS8L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
46.19.64.0/22
81.200.144.0-81.200.158.255
94.198.216.0/22
141.98.234.0/24
185.166.196.0/23
Signature Algorithm: sha256WithRSAEncryption
20:81:35:e7:fe:0e:38:74:99:9a:b3:bb:25:ea:a2:ba:bd:11:
61:20:88:f7:b5:11:3e:c0:69:35:17:9f:fc:93:c3:0e:ab:07:
4c:54:51:1e:f0:d4:c2:26:29:c5:bf:8a:f8:21:04:3d:14:20:
82:7f:a2:48:5b:0c:4a:a2:7e:20:70:e7:bf:ea:44:11:14:04:
c9:77:29:29:e7:4e:95:84:e5:90:50:f6:d4:31:5e:65:33:55:
10:e6:6e:44:c6:97:a5:45:c2:5a:09:e5:ca:0b:be:20:8c:59:
59:ac:b9:88:60:d0:96:1a:63:3c:22:84:c5:f8:da:cb:97:2c:
41:6e:af:26:36:5e:68:63:9b:f2:d3:09:ad:34:f0:2e:35:e3:
d7:76:e1:b8:d1:6c:6b:d0:b1:a4:83:6c:fa:6e:00:d2:8b:39:
71:63:42:08:2e:b8:bd:3a:43:89:24:a5:7d:8a:87:40:07:f5:
70:77:19:a2:ae:06:bb:d3:44:08:39:f0:2f:cd:d4:55:e4:5e:
74:20:f1:6d:49:1a:c0:7a:c1:f9:db:8b:14:76:b9:a3:67:66:
23:64:66:1a:27:9d:40:44:3e:db:17:b6:b2:2e:82:bf:9d:d8:
c1:4a:81:cf:d7:fd:f6:ac:91:cb:8b:33:c0:f1:01:b7:1a:aa:
27:97:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 17:38:55 2024 by rpki-client on console-fra.rpki-client.org