Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QuuEv1H0IAdVH_9_qANfPpiPkrg.roa
File: QuuEv1H0IAdVH_9_qANfPpiPkrg.roa (raw, json)
Hash identifier: VgUtd1XcVV68gl6TokKaXG9NWQx36JAOfYnUglleCoY=
Subject key identifier: 42:EB:84:BF:51:F4:20:07:55:1F:FF:7F:A8:03:5F:3E:98:8F:92:B8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D6C6506EBD2BB30F982827F35FE23A003
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QuuEv1H0IAdVH_9_qANfPpiPkrg.roa
Signing time: Sat 03 Feb 2024 00:36:16 +0000
ROA not before: Sat 03 Feb 2024 00:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.13.211.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.146.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.100.0/24 maxlen: 24
93.123.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 02:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6c:65:06:eb:d2:bb:30:f9:82:82:7f:35:fe:23:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 3 00:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42eb84bf51f42007551fff7fa8035f3e988f92b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:5a:0e:be:b6:85:3e:98:5b:38:e0:4a:d1:
7f:3b:3a:a6:f0:5e:92:81:70:55:25:67:b7:65:7c:
bd:ff:59:0a:c0:23:7c:63:e8:0b:ef:e1:25:5a:82:
ce:62:99:01:2e:2d:6f:02:79:f5:cc:20:17:69:4c:
3c:4d:95:84:e3:e8:9a:14:a1:0e:88:30:6a:9a:05:
c9:46:8c:02:f7:8a:58:b7:3b:2e:33:1e:37:6b:d2:
1d:46:95:9d:35:8f:a7:bc:b9:53:76:46:9e:94:cd:
0e:ef:a9:62:b4:72:60:29:9e:af:f0:4e:27:c0:41:
d1:01:af:b0:ee:7b:76:e5:58:25:b8:1b:8b:cf:c7:
03:9f:1a:0f:5b:a5:c0:b4:a8:e9:93:fa:5a:ce:a9:
74:70:cc:04:84:22:5e:a6:1f:2c:bd:65:4f:0b:64:
b0:99:5e:68:9a:8e:0e:c1:15:ee:14:6b:74:bc:f5:
48:e6:69:61:1f:b4:f7:eb:d0:2b:4e:27:9a:5b:10:
ec:db:cf:ad:c2:cd:8e:04:52:25:3e:fb:b6:fe:6c:
c7:9c:75:23:51:04:f1:4a:72:bc:49:b5:76:d8:d1:
b2:f4:d0:3c:2e:66:06:d4:ff:09:f0:13:20:38:bb:
4f:4d:2b:15:3e:66:ee:9c:48:70:3c:8f:67:a4:39:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:84:BF:51:F4:20:07:55:1F:FF:7F:A8:03:5F:3E:98:8F:92:B8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QuuEv1H0IAdVH_9_qANfPpiPkrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.8.94.0/24
87.120.68.0/23
87.121.146.0/23
91.92.26.0/24
93.123.74.0/23
93.123.100.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:16:56:ab:54:ad:f5:20:0b:28:95:1f:d5:41:1f:a2:c5:13:
32:d4:2d:a8:c3:6b:a5:fd:93:4b:18:76:28:44:63:9f:62:82:
7f:9b:bf:6a:d4:85:92:b4:f0:d8:67:0c:28:28:2c:4d:95:43:
2b:33:24:37:37:b6:45:5d:bd:46:bf:83:cd:b2:4c:2f:80:e3:
31:b4:16:ed:f7:f0:f8:39:7d:cb:dd:7d:e4:a1:3e:52:6a:b8:
4b:e4:93:12:f5:7b:94:43:8b:48:37:5e:a0:d7:47:79:72:2f:
da:43:ad:ba:fb:58:ef:29:2a:9e:e5:42:21:68:d0:bb:2d:fc:
eb:02:f4:d9:c8:ed:c9:bf:1e:04:25:35:1d:9b:dd:d7:7b:d4:
a3:ec:79:25:cb:0e:3d:c7:b2:37:e4:71:56:cb:06:e7:ff:51:
f6:0c:94:8d:f6:bb:8e:ed:1a:57:86:e8:52:54:48:b7:a4:43:
6c:ed:84:9b:ca:b4:53:05:30:d8:73:9f:0c:2c:88:c5:32:de:
3c:95:89:0e:40:37:35:dc:f1:09:81:fb:cd:26:25:53:4e:32:
46:d3:44:2b:35:ca:b5:ac:38:42:1a:60:3d:7d:03:f2:a9:4c:
49:3f:9f:cd:b7:42:bd:26:78:cb:0d:c2:77:70:e5:a3:86:f2:
f7:3d:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 03:45:46 2024 by rpki-client on console-ams.rpki-client.org