Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3NYtnz0SJKjnCMFg1FGeZeB6Mz0.roa
File: 3NYtnz0SJKjnCMFg1FGeZeB6Mz0.roa (raw, json)
Hash identifier: Ey35mxPJbV0jUHKmOb4dz3HyLQufjKpdT3dnHrmMfp0=
Subject key identifier: DC:D6:2D:9F:3D:12:24:A8:E7:08:C1:60:D4:51:9E:65:E0:7A:33:3D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192C4799D4E1C758ECC726ED03B31F38AE5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3NYtnz0SJKjnCMFg1FGeZeB6Mz0.roa
Signing time: Fri 25 Oct 2024 16:19:17 +0000
ROA not before: Fri 25 Oct 2024 16:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 31.13.247.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
45.95.3.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.113.36.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
212.87.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:79:9d:4e:1c:75:8e:cc:72:6e:d0:3b:31:f3:8a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 25 16:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcd62d9f3d1224a8e708c160d4519e65e07a333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:a3:4d:dd:80:05:0d:62:ed:b6:ba:41:4a:
76:2b:0e:5b:ed:7b:9e:cc:3d:9e:04:c4:9b:9e:6f:
b9:ed:9b:01:db:f2:63:e0:ba:0a:2e:77:f9:50:d6:
92:8b:f8:19:e7:8b:89:ba:7c:ab:ef:f5:74:eb:5a:
61:50:60:80:59:39:ec:1a:6d:1a:cc:82:df:4e:09:
86:03:16:f9:f2:11:3a:ef:73:d9:dc:0c:d4:ed:47:
a3:ea:7a:0a:30:85:37:8c:7f:48:5a:9c:52:30:a5:
bf:65:b1:3a:e1:aa:9c:85:59:81:73:36:97:69:38:
35:46:d8:e0:10:cc:fb:44:2a:c4:3c:0d:a1:e1:47:
36:53:51:17:64:77:2a:74:4d:ff:69:db:08:d8:02:
7c:86:10:23:cf:36:20:4c:48:4f:40:19:ae:c8:ef:
65:12:76:26:9f:b2:03:84:81:27:a4:52:e5:fa:23:
32:f3:af:25:82:7d:b7:ed:04:9a:12:f4:be:47:66:
f0:5e:74:54:de:5d:06:e4:31:25:52:ab:38:60:6f:
2b:7a:18:3a:c4:13:2d:a1:f0:f6:61:5d:3f:0a:d5:
ba:94:55:8f:e2:65:9c:37:2d:19:cc:75:45:4a:9f:
85:41:3d:96:ae:d7:7e:19:31:80:ad:7d:9b:46:07:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:2D:9F:3D:12:24:A8:E7:08:C1:60:D4:51:9E:65:E0:7A:33:3D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3NYtnz0SJKjnCMFg1FGeZeB6Mz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.247.0/24
45.95.0.0/22
87.120.36.0/24
87.121.217.0/24
94.125.100.0/23
109.206.242.0/24
185.218.137.0/24
194.113.36.0/24
194.113.39.0/24
212.87.221.0/24
Signature Algorithm: sha256WithRSAEncryption
07:79:26:d9:4b:0a:2a:fb:ad:05:83:54:75:5a:06:88:c6:4b:
3c:80:93:3e:f0:d0:68:e4:0e:4c:9c:b2:19:8c:8f:9d:c7:21:
13:77:33:07:41:a7:f6:5f:39:14:20:2c:01:9b:aa:9f:cb:20:
c5:a0:41:8e:c3:49:5b:ad:c8:38:15:4e:cb:83:38:fe:e9:ac:
1a:61:fd:14:c9:fa:5a:c0:c7:9b:d6:93:41:dc:3c:d6:b0:dc:
45:ba:c9:9f:f6:81:5e:42:50:a9:cb:6e:49:c3:76:9c:bd:1e:
21:a9:a0:6d:3f:ec:d7:06:ea:28:25:c9:45:f4:72:d9:1e:be:
12:d5:ef:51:8f:c5:e6:f1:98:89:e6:60:99:0c:f0:ea:b6:f0:
f7:7f:d6:4f:b1:94:f7:5c:c3:e9:29:36:4d:f5:bc:69:b3:1c:
dc:b4:a4:45:a1:ac:56:01:63:ad:6d:43:c9:2b:b3:6c:99:87:
73:04:7e:de:7b:93:db:1d:fa:2b:0f:11:a5:e8:20:b6:77:5a:
69:e4:f0:cb:f7:c7:e1:a3:9d:81:3f:83:04:eb:71:d1:3e:84:
c2:45:19:84:2f:e3:2e:85:fa:a2:6a:c9:90:d7:25:e6:10:e9:
01:d9:42:8f:54:2b:41:04:88:54:11:62:82:b4:46:ee:6f:7e:
92:94:96:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 16:41:12 2024 by rpki-client on console-ams.rpki-client.org