Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/e60XPOnli7w473ObJKbTs_oNc0g.roa
File: e60XPOnli7w473ObJKbTs_oNc0g.roa (raw, json)
Hash identifier: vsS1pbdiSmplCaXhXs6GBpMouvZBXCi+ZIjWlvdWt+o=
Subject key identifier: 7B:AD:17:3C:E9:E5:8B:BC:38:EF:73:9B:24:A6:D3:B3:FA:0D:73:48
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 018C64BB9D489704838FB4FDA20E216BAF46
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/e60XPOnli7w473ObJKbTs_oNc0g.roa
Signing time: Wed 13 Dec 2023 19:51:06 +0000
ROA not before: Wed 13 Dec 2023 19:51:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 31.171.129.0/24 maxlen: 24
31.171.130.0/24 maxlen: 24
91.230.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:bb:9d:48:97:04:83:8f:b4:fd:a2:0e:21:6b:af:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Dec 13 19:51:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bad173ce9e58bbc38ef739b24a6d3b3fa0d7348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:03:35:79:77:62:ce:0e:79:0b:81:e4:f6:
f6:b9:23:1b:f7:37:bb:9f:0a:9a:e7:54:dc:ea:6a:
c4:c3:cb:50:6e:a7:af:86:dc:29:a5:fc:f9:de:60:
4c:25:d4:f0:0f:05:7c:2c:de:2a:c9:2a:da:19:51:
98:eb:dc:d0:27:e8:23:55:af:cd:85:f2:75:fc:6e:
87:e0:21:6e:90:b7:39:81:2f:52:08:7f:43:00:7a:
1f:3b:05:72:a1:22:ee:ea:26:85:4d:f4:f1:bb:2c:
50:5f:f9:47:a2:92:7c:a6:52:07:4e:d2:31:74:74:
b1:77:f4:c1:66:72:6d:38:cf:4b:f5:18:0c:a8:05:
33:92:02:cb:cd:50:56:50:ed:19:fa:39:fd:c5:9c:
6f:6f:84:d3:57:e1:55:87:fc:7a:09:cb:7d:38:24:
61:cb:58:89:13:9e:11:9b:b3:1d:7e:3e:85:2b:98:
ef:a0:c6:32:f2:80:fe:78:fe:6e:02:1e:18:e5:74:
f4:e8:73:f3:7d:9e:cf:65:d5:6c:b7:57:00:de:6d:
a9:94:f2:ed:6e:f7:9a:dc:39:30:d5:70:38:b5:b8:
bf:38:21:e4:cf:3f:fa:ed:93:85:49:a7:fe:59:c5:
5e:d0:5b:5b:52:2e:43:a6:4e:ab:20:11:5b:f1:93:
40:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:17:3C:E9:E5:8B:BC:38:EF:73:9B:24:A6:D3:B3:FA:0D:73:48
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/e60XPOnli7w473ObJKbTs_oNc0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.129.0-31.171.130.255
91.230.225.0/24
Signature Algorithm: sha256WithRSAEncryption
05:53:40:00:40:15:0d:c9:ed:ac:03:c0:b4:52:88:80:2b:2a:
7e:76:8c:b4:b5:76:5a:e8:e5:80:ad:f0:9d:e1:79:b3:89:e6:
97:00:6e:1e:b0:87:46:57:c1:4c:5b:e7:0b:12:27:8d:d1:df:
87:50:49:de:cb:e0:e1:a8:a5:91:ce:82:a3:e6:10:4b:d7:6d:
67:d2:7d:f7:bf:4c:fd:fc:96:a6:99:11:54:0c:81:45:07:3a:
4c:ab:75:f8:db:c0:30:b9:51:81:4e:3d:5d:61:8a:1e:21:1c:
90:5a:37:bc:8a:9f:b0:78:80:a0:c6:09:24:9b:3d:2d:59:92:
80:70:85:25:c6:67:7a:ce:3c:55:9a:78:3b:20:6f:ef:9c:80:
0e:ae:dc:08:fc:35:ec:23:1e:8c:b8:a2:cf:78:df:dc:d2:ec:
9a:99:e3:d7:37:59:dc:32:9f:0a:7c:77:ef:4e:9e:a7:c1:b6:
2c:09:c0:6a:68:c8:00:9e:a2:3c:5f:35:86:23:8b:d3:85:2a:
95:88:cd:6e:2e:59:8a:eb:bc:e3:49:c7:13:7c:c3:c6:6b:5e:
bb:2c:46:bb:48:dc:10:d1:9d:6f:72:cd:06:74:3c:6b:3b:9f:
2c:c0:ae:f1:8f:be:74:15:ab:aa:fe:3c:a2:4e:cd:00:1d:b6:
69:78:a1:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:12 2024 by rpki-client on console-ams.rpki-client.org