Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/ndKgVhHo_aChrQ3XS_rb-V_0jbQ.roa
File: ndKgVhHo_aChrQ3XS_rb-V_0jbQ.roa (raw, json)
Hash identifier: BSmlSNAPAltC5eDlGZ4xlpzsCjMBGOf9Ku+eEEiPFnc=
Subject key identifier: 9D:D2:A0:56:11:E8:FD:A0:A1:AD:0D:D7:4B:FA:DB:F9:5F:F4:8D:B4
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 018B89E78FCD1E85FC93309A57903A150BDE
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/ndKgVhHo_aChrQ3XS_rb-V_0jbQ.roa
Signing time: Wed 01 Nov 2023 08:02:16 +0000
ROA not before: Wed 01 Nov 2023 08:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209420
IP address blocks: 192.145.17.0/24 maxlen: 24
192.145.16.0/23 maxlen: 23
192.145.16.0/24 maxlen: 24
192.145.18.0/24 maxlen: 24
152.89.133.0/24 maxlen: 24
31.207.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Nov 2023 07:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:e7:8f:cd:1e:85:fc:93:30:9a:57:90:3a:15:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Nov 1 08:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd2a05611e8fda0a1ad0dd74bfadbf95ff48db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f3:db:68:7b:11:28:aa:45:4f:db:e9:f8:a2:
5c:29:0f:e0:a8:aa:d9:cf:32:f5:e4:5e:43:00:d8:
d0:7c:d0:d7:9b:5f:3a:23:ce:2d:51:05:c9:5a:2e:
93:9b:d0:99:f1:6d:d9:68:81:c6:89:57:d4:6d:53:
b5:c7:33:57:ef:92:4e:ee:c3:28:45:e2:5e:4a:56:
11:94:c4:a2:eb:0c:de:52:47:41:1d:ad:ae:a2:1f:
bf:6c:47:54:13:3b:84:7f:cb:73:8a:26:52:ee:29:
e3:2f:a6:0e:00:34:0a:2c:c3:ff:7f:0c:01:04:95:
c1:d7:04:30:8b:be:0e:eb:7e:1c:b1:22:22:11:79:
b4:c8:5b:40:51:95:80:5c:24:fe:b2:fe:0c:d1:51:
8c:94:8f:f8:8d:6d:0d:b4:a5:cd:1c:5d:5b:7c:b9:
58:98:dd:bb:fa:3b:a1:6b:0f:b1:f0:fc:df:43:2d:
04:57:ee:5d:29:91:fe:22:c2:d7:91:79:b4:b1:aa:
23:c8:c4:8b:e2:8e:6b:88:17:92:8b:8d:5b:c6:a8:
b2:89:77:02:ac:20:a8:4a:4e:e9:03:9e:52:a9:43:
55:d4:9c:a3:c9:28:30:62:1d:50:92:57:90:06:bb:
50:62:c4:05:87:bc:86:d8:f7:0a:20:bf:8e:9e:0c:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:A0:56:11:E8:FD:A0:A1:AD:0D:D7:4B:FA:DB:F9:5F:F4:8D:B4
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/ndKgVhHo_aChrQ3XS_rb-V_0jbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.68.0/24
152.89.133.0/24
192.145.16.0-192.145.18.255
Signature Algorithm: sha256WithRSAEncryption
22:79:f1:22:1d:d2:17:8d:f3:ff:49:b6:1b:6f:09:48:d0:95:
ce:41:e2:ad:41:0b:36:72:05:0d:02:17:c5:75:d7:9d:4b:88:
d7:a2:f2:e4:26:73:0d:c4:39:43:99:8b:3b:42:73:d4:c6:a1:
95:2f:10:0f:66:35:77:67:4f:f1:da:47:71:d1:da:7f:27:7b:
ff:65:64:b0:b5:a7:90:87:db:8a:84:0f:85:0d:4c:58:81:59:
94:b1:52:96:2e:34:3e:6f:1d:a0:ec:d5:d3:ba:59:e1:f8:41:
f5:06:52:34:71:82:20:54:81:e3:67:9e:44:c1:e3:40:92:b1:
73:0f:ba:26:ff:54:c5:c0:14:e2:6e:ad:fd:89:43:b3:3d:41:
be:2c:6b:9b:57:3d:61:6b:5c:4e:fd:77:5b:25:a3:1c:55:3c:
f8:c2:d1:53:08:15:14:00:32:ae:b1:6c:82:45:d5:c7:63:f0:
78:84:1a:81:4d:d9:45:0c:12:54:bf:86:cc:33:0c:50:ff:d1:
b0:31:ce:9e:78:14:75:1a:38:cf:c9:af:71:7c:46:1a:07:66:
59:cf:c9:fb:87:6c:ae:c2:10:a8:af:f1:a5:c3:bf:eb:ce:4c:
22:97:0a:9d:71:d4:f6:ab:20:db:0d:fc:e3:31:c8:f0:ef:f2:
36:86:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:14 2024 by rpki-client on console-fra.rpki-client.org