Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4cczfWLxck8QXjAI0qJ_2arEhQE.roa
File: 4cczfWLxck8QXjAI0qJ_2arEhQE.roa (raw, json)
Hash identifier: wVd48hwQ7Gr/Jb2Xsao9aCtmvKwbsV4IHsKnkDbkhdA=
Subject key identifier: E1:C7:33:7D:62:F1:72:4F:10:5E:30:08:D2:A2:7F:D9:AA:C4:85:01
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191B7A3AE61C61BB8B77AF8A3AE756978C6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4cczfWLxck8QXjAI0qJ_2arEhQE.roa
Signing time: Tue 03 Sep 2024 11:27:23 +0000
ROA not before: Tue 03 Sep 2024 11:27:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 31.13.193.0/24 maxlen: 24
31.13.225.0/24 maxlen: 24
87.120.107.0/24 maxlen: 24
87.121.70.0/23 maxlen: 24
87.121.144.0/23 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.46.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.61.0/24 maxlen: 24
94.156.92.0/24 maxlen: 24
94.156.162.0/23 maxlen: 24
94.156.164.0/23 maxlen: 24
94.156.253.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 06:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:a3:ae:61:c6:1b:b8:b7:7a:f8:a3:ae:75:69:78:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 3 11:27:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1c7337d62f1724f105e3008d2a27fd9aac48501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:55:50:55:ef:7a:f2:8d:a8:02:0e:bf:57:
b2:14:6d:1d:58:a5:5e:bd:0e:ce:a3:ee:b6:5a:78:
3e:15:61:7a:ad:90:5d:48:8b:60:23:51:d0:a9:36:
7d:dc:78:78:34:07:7c:45:db:de:af:ad:b6:9c:a0:
28:8e:2f:17:d4:87:f6:cd:23:23:9c:1e:3f:21:0c:
7e:07:70:93:0a:34:32:e0:cd:cd:83:40:d9:62:41:
b1:3f:bc:8d:02:b0:6d:88:fd:9f:81:f0:be:46:74:
f1:3b:da:6d:cc:b9:4c:cc:8a:4f:3e:2b:43:0e:6e:
f3:c3:e1:96:42:a6:95:e7:f6:0e:af:db:a7:7a:93:
7f:23:60:3e:62:8d:0d:3e:4c:35:cc:1b:a8:45:fc:
e4:98:ae:1b:2f:2e:d7:83:da:9d:9b:f4:29:9e:8a:
a8:3e:4d:c2:ba:0e:f8:22:bc:0a:08:6b:b2:6c:4f:
3e:3e:17:79:e4:62:d0:56:9d:b3:10:ce:b0:6d:fe:
e8:2f:4c:70:3a:98:d9:78:59:97:2a:e7:79:8b:95:
0c:f4:37:5e:a8:e4:e8:38:30:86:ad:92:5a:81:00:
23:79:ab:04:a8:cf:5b:a9:7f:ea:8d:12:50:83:8e:
9a:f2:32:81:5c:a0:68:46:75:b9:1f:ce:9d:fc:d8:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:33:7D:62:F1:72:4F:10:5E:30:08:D2:A2:7F:D9:AA:C4:85:01
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4cczfWLxck8QXjAI0qJ_2arEhQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.193.0/24
31.13.225.0/24
87.120.107.0/24
87.121.70.0/23
87.121.144.0/23
93.123.45.0-93.123.46.255
94.156.11.0/24
94.156.61.0/24
94.156.92.0/24
94.156.162.0-94.156.165.255
94.156.253.0/24
141.98.1.0/24
Signature Algorithm: sha256WithRSAEncryption
12:af:e1:3a:88:27:57:55:3b:a3:a3:c0:76:7f:d5:54:f1:bd:
d7:26:50:cc:b8:cb:3e:92:bd:bb:ba:ab:9b:d9:a8:e8:04:56:
0a:c8:36:e7:82:44:49:0b:c5:be:d1:e8:45:cc:74:6c:88:1d:
a7:a8:fe:1b:22:37:ec:3d:87:c1:bc:f2:06:f6:dc:6a:06:0b:
1d:b8:76:e3:0f:1c:e9:47:ef:ae:cc:a0:fa:a9:0c:0d:30:54:
da:7e:df:f1:2f:8d:ae:60:ab:2e:d3:a8:8d:d9:5e:c6:14:13:
47:e5:ae:6c:9d:8f:cd:ad:d4:31:3b:60:7f:44:b2:64:25:ba:
05:39:e3:5a:1a:5f:59:1a:c7:e7:4b:30:1f:ad:3c:d6:ba:77:
22:3d:9d:95:30:89:9a:d2:98:71:7d:fa:7d:04:a7:bd:82:ae:
03:e2:27:35:e6:50:d5:32:dd:76:83:45:56:23:2a:1d:3c:4b:
b8:de:73:c4:91:fc:97:7f:9a:b8:8d:3c:12:b7:df:f5:81:4d:
31:57:37:79:6c:a1:e8:b9:1a:15:90:01:c1:08:2c:a3:b3:46:
0b:6a:f4:ae:a3:ee:b1:63:30:4d:9b:53:87:b8:b1:01:3f:75:
c7:1a:82:d5:fe:2b:46:8f:47:ce:41:eb:a7:98:40:63:24:db:
93:ce:15:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:06 2024 by rpki-client on console-ams.rpki-client.org