Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/uYMytW-zIKHbMsnsYiGLAHNjSMA.roa
File: uYMytW-zIKHbMsnsYiGLAHNjSMA.roa (raw, json)
Hash identifier: bFdRStceGiLPhkhVfqi1cNT429m/r6EWtUJEdnAtSzM=
Subject key identifier: B9:83:32:B5:6F:B3:20:A1:DB:32:C9:EC:62:21:8B:00:73:63:48:C0
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 01922305B1D89A5C562A8B15AEE71326F535
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/uYMytW-zIKHbMsnsYiGLAHNjSMA.roa
Signing time: Tue 24 Sep 2024 07:53:48 +0000
ROA not before: Tue 24 Sep 2024 07:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35539
IP address blocks: 31.134.192.0/21 maxlen: 21
46.160.192.0/18 maxlen: 18
46.160.192.0/19 maxlen: 19
46.160.192.0/20 maxlen: 20
46.160.208.0/20 maxlen: 20
46.160.224.0/19 maxlen: 19
46.160.224.0/20 maxlen: 20
46.160.240.0/20 maxlen: 20
93.95.160.0/21 maxlen: 21
93.95.160.0/22 maxlen: 22
93.95.164.0/22 maxlen: 22
93.123.128.0/17 maxlen: 17
93.123.128.0/18 maxlen: 18
93.123.128.0/19 maxlen: 19
93.123.160.0/19 maxlen: 19
93.123.192.0/18 maxlen: 18
93.123.192.0/19 maxlen: 19
93.123.224.0/19 maxlen: 19
95.131.208.0/21 maxlen: 21
95.131.208.0/22 maxlen: 22
95.131.212.0/22 maxlen: 22
217.194.240.0/20 maxlen: 20
217.194.240.0/21 maxlen: 21
217.194.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 24 Sep 2024 10:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:05:b1:d8:9a:5c:56:2a:8b:15:ae:e7:13:26:f5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Sep 24 07:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b98332b56fb320a1db32c9ec62218b00736348c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:a1:0f:3e:25:be:e9:91:3d:a0:4d:0d:bb:
bc:9b:15:16:6d:ea:4d:24:f4:7d:1c:42:46:80:cb:
da:e0:f5:37:46:7c:61:3a:0f:d2:a5:d5:aa:c1:49:
3f:c1:9e:18:14:38:f8:ec:af:c1:14:67:9c:75:0c:
86:aa:d0:f8:1b:3b:a9:5b:73:d0:19:b9:b1:bf:ea:
90:1e:f1:50:30:37:ae:45:ac:6d:4f:92:4f:c2:4b:
dd:7b:db:83:f5:42:ad:b6:a8:fe:fd:f5:45:d8:c8:
e1:40:31:18:69:77:dd:53:b6:b5:3c:08:f9:b8:e4:
5e:79:16:33:6d:43:40:a2:d9:06:bc:86:ef:29:67:
4e:84:db:50:76:a6:d6:1e:23:0b:b3:b8:a9:00:55:
12:56:30:95:bc:84:cb:50:6c:42:58:12:b9:d7:a2:
1b:b5:e2:bb:65:79:97:48:d8:91:20:da:5d:a4:68:
ff:eb:1f:54:04:3c:2c:d6:07:3a:0f:e9:23:5d:f6:
b7:9d:f1:a1:8a:61:20:68:fd:77:d7:98:cd:f2:18:
65:27:4f:23:44:ac:34:b9:e7:af:f7:ec:98:5a:84:
0c:01:99:84:df:0c:1b:87:be:eb:f7:6d:fc:d7:fb:
c5:89:53:93:13:e2:08:12:61:b1:1a:f8:09:42:9e:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:32:B5:6F:B3:20:A1:DB:32:C9:EC:62:21:8B:00:73:63:48:C0
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/uYMytW-zIKHbMsnsYiGLAHNjSMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.192.0/21
46.160.192.0/18
93.95.160.0/21
93.123.128.0/17
95.131.208.0/21
217.194.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:b1:04:3f:08:fe:4f:0e:90:99:68:d3:59:63:e5:76:a8:a8:
ca:ce:58:b6:78:8e:b1:b7:79:2d:5e:5d:f7:e2:a7:b3:a8:a7:
ad:bc:ab:91:b5:eb:ba:41:a1:b1:f6:dc:ac:49:c7:b4:70:5f:
5d:59:37:9e:e1:35:ed:ba:ac:c7:99:45:61:61:b2:6f:ab:c1:
97:53:6f:c8:16:d3:66:65:92:3e:82:f7:51:f3:85:1b:bd:8a:
73:28:f3:92:09:97:42:9f:62:19:b0:6f:5e:e1:e3:c3:a9:e3:
65:0e:d2:2c:d9:fe:b3:b4:f1:50:6e:27:92:f5:2d:67:a8:2e:
99:41:de:f0:a1:b8:cc:20:89:a4:0b:3e:cc:05:d8:29:fc:f6:
35:3b:e7:08:38:e0:01:0f:70:c5:b4:ed:c2:69:c3:0f:4f:bd:
38:69:2a:6c:1a:ab:5a:36:e2:ce:1d:e5:46:81:5d:15:88:25:
3a:73:ed:08:5e:70:bb:2b:ef:55:e7:e9:7c:59:37:fa:dd:cf:
5f:4d:7f:3a:d8:9b:b3:a3:f7:d5:d3:c7:2a:5d:b6:a2:b0:a9:
5c:d8:52:94:8f:9f:d1:5f:dd:e6:c2:ec:08:41:cf:b7:47:a7:
92:eb:7b:dd:36:e8:73:0e:aa:b3:31:ad:21:02:ed:a6:28:af:
1b:cc:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 12:40:08 2024 by rpki-client on console-fra.rpki-client.org