Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/00vAcsC9u10fymvLOevUR4eEqEY.roa
File: 00vAcsC9u10fymvLOevUR4eEqEY.roa (raw, json)
Hash identifier: 11Yq+cSQy+/y36u1s37h1/WNO6sAHA9D6u9J03KB+ZM=
Subject key identifier: D3:4B:C0:72:C0:BD:BB:5D:1F:CA:6B:CB:39:EB:D4:47:87:84:A8:46
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 018CC8018FD9016ED432D420C686B7FF5F90
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/00vAcsC9u10fymvLOevUR4eEqEY.roa
Signing time: Tue 02 Jan 2024 02:29:54 +0000
ROA not before: Tue 02 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56616
IP address blocks: 185.116.22.0/23 maxlen: 23
185.116.20.0/23 maxlen: 23
185.116.20.0/22 maxlen: 22
31.7.88.0/22 maxlen: 22
31.7.88.0/23 maxlen: 23
31.7.90.0/23 maxlen: 23
2a0a:d340::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 22 Apr 2024 14:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8f:d9:01:6e:d4:32:d4:20:c6:86:b7:ff:5f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Jan 2 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d34bc072c0bdbb5d1fca6bcb39ebd4478784a846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:d8:40:85:dd:3f:2f:6b:69:5e:fb:3e:24:
da:bd:cb:03:1b:2a:70:58:36:f0:88:70:3f:99:b2:
b4:8d:bf:4b:da:83:3d:30:8d:74:67:49:53:91:13:
90:12:1e:5e:8c:81:1c:df:9a:69:ba:ac:30:c7:bf:
d6:1f:b4:92:3c:8f:64:a4:54:ca:23:2f:ab:b9:b9:
c8:8d:7f:b7:7d:2d:5b:78:16:93:7f:a1:db:46:2c:
b8:b2:d3:61:0b:a5:04:17:b8:90:47:22:37:1c:a1:
a5:c5:80:c1:32:ec:db:66:bf:64:c5:ac:78:34:20:
58:bb:31:69:2a:d6:90:7c:98:1b:21:72:9b:76:c7:
29:d2:c9:ae:c9:c0:2a:19:cb:11:9c:1d:8e:3e:66:
8b:c3:ab:8b:11:c0:63:eb:f4:39:8b:fc:88:af:16:
7e:40:75:3a:00:3c:22:97:c7:f9:cf:c0:5c:e1:5d:
5f:cd:e2:15:d0:82:4c:5d:02:28:2e:73:27:7f:a5:
4c:7e:92:b7:d2:82:c5:bb:1f:d1:78:31:a4:e5:6a:
c7:08:6f:02:25:33:92:d4:0d:5b:56:a4:4b:d5:69:
a9:f4:f1:03:b5:01:b3:40:44:b6:9b:be:f4:13:c2:
f5:56:b9:8d:71:9c:02:c9:76:1a:11:35:af:4d:aa:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:C0:72:C0:BD:BB:5D:1F:CA:6B:CB:39:EB:D4:47:87:84:A8:46
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/00vAcsC9u10fymvLOevUR4eEqEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.88.0/22
185.116.20.0/22
IPv6:
2a0a:d340::/29
Signature Algorithm: sha256WithRSAEncryption
26:b8:88:2f:a8:8e:a7:85:95:1b:54:f5:07:b5:a7:29:d5:3f:
ce:ef:c7:4a:71:29:d6:f9:f7:f6:d1:87:47:d8:9c:5f:c6:c4:
c6:55:dd:98:90:f2:3e:8d:07:4c:a2:93:79:3e:19:8a:d2:63:
72:38:a4:54:10:d8:68:51:d4:ab:35:fb:3d:a6:20:73:d8:e9:
04:c1:3c:19:91:75:ff:28:07:5e:ba:ae:91:d5:c0:10:f7:33:
2c:3b:bb:58:b9:57:55:39:fb:c8:42:02:e1:15:ca:b2:d7:19:
16:65:38:d7:1f:84:50:c4:67:43:f1:47:fd:1f:46:01:95:b4:
ac:3c:52:81:ac:b3:de:9c:a2:78:f8:d3:d2:59:88:41:1a:1d:
a6:11:a7:99:10:5a:c3:b1:ea:df:7a:28:46:88:e0:a9:24:1a:
cf:8d:49:ee:91:ad:35:2a:93:8b:f6:44:38:e4:9e:70:71:6f:
84:9d:58:6e:b9:0d:a1:3b:ce:d2:f9:ba:8f:39:91:50:0a:82:
0e:b6:c8:dc:fc:52:aa:1e:50:47:d5:5a:2a:ed:1f:91:8c:2a:
be:97:46:2a:e9:60:1e:c9:91:aa:cc:6b:63:01:98:23:94:e6:
99:dd:94:8a:e5:3d:51:2f:37:81:c9:38:07:a6:83:e4:49:65:
88:81:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:11 2024 by rpki-client on console-fra.rpki-client.org