Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bogZGf5Sswivn-SKJCDIO7eQSao.roa
File: bogZGf5Sswivn-SKJCDIO7eQSao.roa (raw, json)
Hash identifier: orM8UNmTwjonIAbEhe/2obT4PfzvOONnpHRZ1pljnyQ=
Subject key identifier: 6E:88:19:19:FE:52:B3:08:AF:9F:E4:8A:24:20:C8:3B:B7:90:49:AA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01918E19D47AEDCD7D3A4BB667AB35831BBB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bogZGf5Sswivn-SKJCDIO7eQSao.roa
Signing time: Mon 26 Aug 2024 09:52:23 +0000
ROA not before: Mon 26 Aug 2024 09:52:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 31.13.193.0/24 maxlen: 24
31.13.225.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
87.120.107.0/24 maxlen: 24
87.121.70.0/23 maxlen: 24
87.121.144.0/23 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.46.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.61.0/24 maxlen: 24
94.156.92.0/24 maxlen: 24
94.156.162.0/23 maxlen: 24
94.156.164.0/23 maxlen: 24
94.156.253.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 11:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:19:d4:7a:ed:cd:7d:3a:4b:b6:67:ab:35:83:1b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 26 09:52:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e881919fe52b308af9fe48a2420c83bb79049aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:01:cf:b7:36:11:f3:20:7c:e8:55:6f:19:
15:77:78:43:3b:39:c5:69:fa:68:17:56:3e:38:c6:
7b:50:e3:c6:d0:54:78:13:ac:5e:7b:46:2e:61:97:
bb:b4:90:52:df:9a:c3:b3:e7:88:80:10:75:79:1f:
17:f0:d6:c7:1b:ff:0f:36:5f:82:2b:99:9a:b0:b2:
f6:b9:cb:e6:dd:d5:81:38:cf:1f:72:fd:c5:97:29:
47:03:10:1d:41:a7:e4:e1:67:65:b5:6d:3c:d1:83:
e9:2a:b9:9e:33:a7:f5:f8:64:18:de:18:9a:91:54:
df:ae:55:e1:f7:1d:3e:b8:9b:28:82:94:bd:62:73:
27:82:df:9c:d5:43:fc:93:6e:5a:b9:b3:d3:6a:13:
bc:c8:61:58:d0:37:19:72:81:48:d3:6a:a3:87:0f:
9c:f1:a1:20:b7:a9:2f:aa:97:11:0a:57:8f:40:3d:
c3:7a:1b:a7:17:0e:b4:39:64:e6:21:94:62:1c:a3:
b3:ab:48:a6:6d:52:82:06:aa:1a:2d:3f:c6:f4:cb:
80:cc:13:c7:28:6f:6a:ce:2b:8c:4f:36:0c:e8:21:
76:5c:12:53:10:37:b4:f5:ac:d5:c9:f0:8e:da:9e:
1d:0b:cc:80:54:2e:29:b5:3d:35:35:03:29:49:91:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:88:19:19:FE:52:B3:08:AF:9F:E4:8A:24:20:C8:3B:B7:90:49:AA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bogZGf5Sswivn-SKJCDIO7eQSao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.193.0/24
31.13.225.0/24
45.144.154.0/24
87.120.107.0/24
87.121.70.0/23
87.121.144.0/23
93.123.45.0-93.123.46.255
94.156.11.0/24
94.156.61.0/24
94.156.92.0/24
94.156.162.0-94.156.165.255
94.156.253.0/24
141.98.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:78:31:5c:9a:1e:8d:22:77:0a:44:3f:eb:c9:00:a5:da:36:
23:39:96:5f:a3:af:de:1e:a0:64:bc:67:5c:2a:0f:35:71:d6:
14:3b:4b:74:2f:d5:c3:69:c3:31:f6:42:2a:a9:34:1e:f9:b4:
d3:ba:4d:6b:44:e0:53:7c:48:b8:45:a1:88:14:4d:82:45:12:
0e:28:0f:23:02:10:21:fb:8b:e3:16:c1:98:41:da:61:9d:80:
93:75:3b:8b:ed:26:ab:5e:fa:34:42:5c:a3:15:4b:bb:6e:bf:
55:94:44:9e:c9:fd:ed:76:50:9c:9d:ad:5f:a1:45:35:46:a7:
93:94:be:9a:1f:f4:cc:ff:25:90:aa:05:ef:04:e2:80:90:bb:
e9:d0:07:37:26:21:9a:25:df:6f:64:dc:93:03:86:32:2d:e2:
a9:8c:da:e4:88:60:4e:8b:a2:c8:91:45:75:53:07:5b:6a:68:
d8:78:3e:5b:c2:7d:90:2a:a0:7a:24:d4:ab:26:86:6c:fb:cd:
38:c7:84:40:76:f5:99:6d:3f:de:95:28:11:06:26:85:59:8c:
55:7a:33:91:5d:35:6b:af:0e:d9:7e:aa:4d:68:d5:c6:b9:82:
5d:25:e2:59:32:fb:e5:86:86:56:f4:26:9f:57:7a:b7:52:34:
2e:0b:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:12 2024 by rpki-client on console-fra.rpki-client.org