Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/cQ-ocFwmdeK-TQROFPcNxxBM9oA.roa
File: cQ-ocFwmdeK-TQROFPcNxxBM9oA.roa (raw, json)
Hash identifier: cRVO/ks0lovdfp8rd0DfJrEeBc/rb7NX77ZgiEUNIo0=
Subject key identifier: 71:0F:A8:70:5C:26:75:E2:BE:4D:04:4E:14:F7:0D:C7:10:4C:F6:80
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 0190BB04D4E2B803189BE7B33C08E9670EFE
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/cQ-ocFwmdeK-TQROFPcNxxBM9oA.roa
Signing time: Tue 16 Jul 2024 10:09:34 +0000
ROA not before: Tue 16 Jul 2024 10:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207456
IP address blocks: 31.171.132.0/22 maxlen: 24
45.154.4.0/22 maxlen: 24
109.235.53.0/24 maxlen: 24
109.235.54.0/23 maxlen: 24
185.153.188.0/22 maxlen: 24
185.196.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 08:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:04:d4:e2:b8:03:18:9b:e7:b3:3c:08:e9:67:0e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Jul 16 10:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=710fa8705c2675e2be4d044e14f70dc7104cf680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:fe:d6:fd:df:11:75:74:30:26:d7:03:f6:
ae:95:2e:f7:8f:30:a9:a8:8f:71:9d:22:ee:ec:d2:
31:09:42:ee:0c:8e:66:a4:44:04:51:55:65:30:05:
0f:f8:9c:42:ac:84:4e:dc:fb:a4:75:47:c8:1e:0b:
16:21:56:4d:a1:65:b5:f9:6f:d5:a6:32:3e:02:b7:
5e:6b:05:40:ff:f6:b7:ce:c8:53:3b:28:06:e7:bd:
3c:e7:9b:e0:4a:4e:83:fa:b0:28:13:50:f2:f5:5c:
a4:2d:37:3a:ef:f7:7c:f5:86:19:52:06:5c:c2:44:
f5:1b:0d:78:cd:e9:bf:8c:0b:8a:4b:a3:22:7f:25:
6e:64:5c:27:11:d2:91:44:c4:1b:78:2c:6d:12:35:
45:e0:22:e1:2d:3e:3d:6c:79:bb:1c:e4:58:78:c9:
a3:55:ed:f4:85:86:82:e0:1b:09:57:17:b8:3d:bb:
f9:7f:47:7e:c8:b5:68:3f:02:0c:d7:69:e5:0b:a9:
1a:ef:d8:f5:a8:05:40:6a:22:c8:6f:99:87:57:18:
83:c9:f5:05:8a:17:40:9d:53:97:56:c9:ee:7b:97:
7f:6a:da:34:81:09:fc:be:f6:37:a2:67:b9:c8:2c:
49:ac:01:eb:9a:a8:f7:37:9a:28:1c:f7:44:72:d1:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:A8:70:5C:26:75:E2:BE:4D:04:4E:14:F7:0D:C7:10:4C:F6:80
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/cQ-ocFwmdeK-TQROFPcNxxBM9oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.132.0/22
45.154.4.0/22
109.235.53.0-109.235.55.255
185.153.188.0/22
185.196.92.0/22
Signature Algorithm: sha256WithRSAEncryption
35:57:bf:e7:45:77:5d:08:07:78:f4:ce:0c:fe:1a:9c:90:62:
9b:b9:6f:f1:24:11:80:a0:0f:a8:e9:94:5a:2e:e7:be:a9:68:
f9:49:95:6f:00:0f:f1:28:2a:36:c5:72:d0:2a:4d:62:93:53:
c0:2e:9c:f8:62:2c:d6:11:96:e7:68:75:3d:c6:48:ae:7b:4b:
7d:40:81:d0:1f:29:d3:ff:13:a8:d9:bf:e0:71:f9:7d:f4:64:
af:28:ea:ca:d5:e5:38:ca:64:a4:4d:c7:cb:14:fa:fb:c9:8f:
d5:b5:0c:db:1e:0b:e9:29:b0:84:00:5c:4e:d8:28:1e:dc:b0:
a4:16:74:37:5a:65:cd:7a:d1:28:7d:db:17:2a:0e:6b:b8:a0:
67:dd:97:17:1c:01:19:1f:e1:f7:f7:d6:2d:08:57:bd:b3:c2:
b6:79:93:5a:f4:4f:1d:b1:ca:c0:27:7a:89:c1:89:78:6a:50:
69:08:db:a5:8a:b9:2d:06:8f:e7:c7:47:93:4e:b0:74:3e:aa:
02:b0:47:42:f2:22:c1:87:82:ca:12:1d:3a:e6:a5:49:6c:8d:
b8:af:53:61:a6:81:5c:a1:63:97:d2:7f:1f:71:08:0a:d3:ae:
9e:68:dc:57:e2:0d:9f:9f:c2:22:00:12:27:2d:e3:9b:a2:5e:
5c:13:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 10:29:21 2024 by rpki-client on console-fra.rpki-client.org