Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_H5y2h65HekORzZZRHHmT3_YuH4.roa
File: _H5y2h65HekORzZZRHHmT3_YuH4.roa (raw, json)
Hash identifier: IMVxGqlsT70crrkMxaWhXpao+kpSKhZ/vyNuQb1dcnA=
Subject key identifier: FC:7E:72:DA:1E:B9:1D:E9:0E:47:36:59:44:71:E6:4F:7F:D8:B8:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01929F1D19BDBE5A365ADD06BFD04EDBD072
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_H5y2h65HekORzZZRHHmT3_YuH4.roa
Signing time: Fri 18 Oct 2024 10:12:17 +0000
ROA not before: Fri 18 Oct 2024 10:12:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 10:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9f:1d:19:bd:be:5a:36:5a:dd:06:bf:d0:4e:db:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 18 10:12:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc7e72da1eb91de90e4736594471e64f7fd8b87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:15:06:53:f9:57:0b:0b:11:bf:87:af:87:
2c:3a:79:bb:68:63:b4:c5:55:c6:c3:1f:3e:51:34:
70:93:f1:51:9c:61:e3:bc:39:dd:e7:b6:a7:5b:56:
ce:34:16:fe:1d:5c:54:64:32:9d:18:b3:94:2b:c4:
aa:7e:4f:b6:a9:a9:c8:16:14:9c:7b:eb:9f:2b:ad:
93:65:f5:8e:b5:10:8f:eb:00:49:0d:91:6e:a6:ee:
b5:dd:5c:9c:aa:13:71:5e:b3:46:15:8d:a7:5a:36:
70:cb:8d:26:1a:83:1d:e0:49:34:10:53:ad:e0:b4:
66:de:c1:1f:18:33:61:f6:48:be:36:0c:a0:4d:40:
44:69:ee:c5:44:06:4a:b3:3b:db:93:d3:b7:e2:7a:
44:c7:6f:84:c2:ef:8c:ea:62:c4:72:30:b5:ba:17:
e2:44:f8:0d:b6:9c:9e:a9:85:0f:6c:a0:27:ec:1a:
ef:1e:03:53:41:88:ec:aa:ac:f2:3f:16:9a:87:39:
c1:88:53:8b:a5:80:7e:bb:ed:61:cd:c8:76:b9:9b:
cc:ee:46:05:6f:61:46:36:2c:eb:57:a5:ea:cb:61:
fa:7d:5e:1c:35:7b:0c:b7:b1:d3:a8:90:09:da:69:
8d:f5:97:cb:4b:06:8d:89:f7:c6:74:01:6e:73:60:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7E:72:DA:1E:B9:1D:E9:0E:47:36:59:44:71:E6:4F:7F:D8:B8:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_H5y2h65HekORzZZRHHmT3_YuH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
87.120.165.0/24
171.22.31.0/24
185.246.223.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
21:41:b2:cd:08:1f:69:58:6a:d1:81:06:9b:8c:f3:d6:17:ea:
b5:ec:08:14:45:d0:7c:2f:29:8d:8b:91:8f:13:7f:0a:bc:8c:
3f:f4:89:15:a1:e3:68:c7:83:d7:40:85:89:30:cc:ad:de:30:
9f:85:99:ba:10:f1:88:1c:6e:7f:ab:72:c6:f6:a9:a2:aa:47:
d1:24:5a:ec:0a:6b:24:ed:71:5a:13:63:67:57:9a:26:fa:03:
42:dc:fe:89:eb:43:e3:d6:d8:d5:2d:36:af:0c:0b:87:93:62:
6a:3c:d7:3f:3d:a7:5b:f4:2f:83:9c:96:d3:91:50:28:8d:b8:
8a:d5:dd:85:d4:f0:96:4d:f5:ec:6a:84:44:ff:c1:f7:5f:b7:
32:fe:00:50:2e:72:a1:1a:c9:8c:82:c1:b1:b8:0f:4e:96:54:
f1:75:1e:aa:11:24:a7:41:d6:8e:ff:aa:33:a9:fb:e5:6e:d9:
5b:54:82:3c:18:87:14:42:45:d2:80:20:51:27:07:5d:43:81:
17:61:b3:25:e6:16:4c:3e:34:b3:f4:1e:72:7c:81:20:56:45:
d3:b1:6c:8d:8b:f7:6b:dd:ff:e6:a8:45:c8:b6:1b:e4:8e:9b:
c2:f6:7c:70:14:06:e1:52:58:27:9f:d7:6c:ca:22:12:2a:50:
cb:91:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 14:05:12 2024 by rpki-client on console-fra.rpki-client.org