Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/mwowrqGPtspiTS0KKfhToZPZ3pQ.roa
File: mwowrqGPtspiTS0KKfhToZPZ3pQ.roa (raw, json)
Hash identifier: ElvRL8pBWEBZW5O5M557NBi43JxcBQNniogiSjRaNGc=
Subject key identifier: 9B:0A:30:AE:A1:8F:B6:CA:62:4D:2D:0A:29:F8:53:A1:93:D9:DE:94
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019006BC2EF2141FB1555B9D37C043026118
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/mwowrqGPtspiTS0KKfhToZPZ3pQ.roa
Signing time: Tue 11 Jun 2024 09:58:34 +0000
ROA not before: Tue 11 Jun 2024 09:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56547
IP address blocks: 31.24.232.0/24 maxlen: 24
31.24.233.0/24 maxlen: 24
31.24.234.0/24 maxlen: 24
31.24.235.0/24 maxlen: 24
31.24.236.0/24 maxlen: 24
31.24.237.0/24 maxlen: 24
31.24.238.0/24 maxlen: 24
31.24.239.0/24 maxlen: 24
185.69.108.0/22 maxlen: 22
185.69.108.0/24 maxlen: 24
185.69.109.0/24 maxlen: 24
185.69.110.0/24 maxlen: 24
185.69.111.0/24 maxlen: 24
185.76.248.0/22 maxlen: 22
185.76.248.0/24 maxlen: 24
185.76.249.0/24 maxlen: 24
185.76.250.0/24 maxlen: 24
185.76.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 09:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:bc:2e:f2:14:1f:b1:55:5b:9d:37:c0:43:02:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Jun 11 09:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b0a30aea18fb6ca624d2d0a29f853a193d9de94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:2e:b7:62:a6:35:73:a7:44:2c:99:e1:8d:
5c:4f:c8:aa:38:23:5e:9f:f9:d3:9b:1a:45:64:d7:
12:85:05:a3:47:d4:a3:9f:c0:a7:b5:b6:8a:25:75:
53:6d:e1:95:46:1f:a6:61:ee:a4:57:d7:4d:6e:95:
2c:61:59:5f:fe:0a:1b:ab:b7:a7:7b:3e:8e:1b:36:
67:31:12:9b:19:65:9c:bd:da:ed:13:da:9b:0d:f0:
dc:a2:93:c1:31:ed:e0:24:1f:f5:6b:4d:54:7f:18:
c6:06:be:c3:29:ec:45:1a:09:48:a8:18:4d:07:36:
c4:f5:0a:da:7c:66:d2:94:8c:fe:91:ff:c5:bb:10:
75:c0:8a:e8:74:04:b2:93:a0:a9:04:db:5b:2a:e7:
ed:74:93:e9:b7:ca:08:84:00:14:aa:ac:ec:c4:5d:
23:49:15:cc:8c:72:5e:18:c0:54:8c:26:26:2a:fd:
cc:1f:d0:de:62:3b:34:da:65:cd:97:3c:70:1c:ef:
32:ac:79:f3:89:d6:7b:5e:ef:42:a0:81:ff:dd:29:
b6:f2:c7:72:f8:fc:59:3b:42:76:13:c7:83:06:73:
8d:42:84:7d:ae:c7:06:22:93:c2:32:61:f9:dd:6d:
c6:e2:b7:a7:cf:90:a4:8a:13:8a:20:3a:58:b3:a7:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:30:AE:A1:8F:B6:CA:62:4D:2D:0A:29:F8:53:A1:93:D9:DE:94
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/mwowrqGPtspiTS0KKfhToZPZ3pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.232.0/21
185.69.108.0/22
185.76.248.0/22
Signature Algorithm: sha256WithRSAEncryption
19:02:ef:db:b2:03:02:80:f2:82:30:45:00:37:cc:46:87:29:
7b:7b:10:48:f3:21:08:68:be:4e:3c:ce:e4:94:8e:0e:4b:6b:
43:31:b5:dd:07:c6:93:a4:48:64:48:a3:7e:9d:c8:af:c0:a5:
70:80:77:ac:81:15:e0:0c:cb:66:93:c9:2d:7b:03:24:cf:03:
7e:d5:3d:2a:1c:29:13:eb:74:cd:0b:0b:12:05:0c:06:2d:5d:
bd:22:45:9b:a0:1a:26:0b:df:22:f3:6f:47:f3:30:7f:dc:bb:
16:9c:85:5b:78:d6:86:45:83:e8:05:ed:28:da:a6:14:fe:c3:
81:d9:b6:87:be:b5:b5:b3:ce:8c:21:82:39:3e:c0:2f:c5:44:
7a:b5:db:a7:66:47:b9:4c:40:00:ab:c2:85:83:c1:c2:f0:35:
df:94:e2:c5:17:22:0c:1a:b9:f6:0f:d2:27:df:45:81:2c:16:
6d:ee:d9:4b:f6:b8:77:d5:a1:e4:33:45:7b:4d:a9:51:ea:13:
9a:bb:f2:d8:aa:3b:5a:70:15:bb:c5:43:66:53:8a:d7:4e:2c:
07:ac:ee:85:55:71:d1:5b:5d:0c:9b:7b:c2:80:8a:ba:a6:c1:
52:21:69:d7:db:17:ca:55:c4:8f:70:ec:6c:95:a7:be:7f:c3:
19:db:2b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 13:31:49 2024 by rpki-client on console-fra.rpki-client.org