Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/9jeu6xTCKM1F1zr2kJwX_PozD3c.roa
File: 9jeu6xTCKM1F1zr2kJwX_PozD3c.roa (raw, json)
Hash identifier: PbAjis4vbSyPvPVqmVw8OPPgconsPTAwICQHtI/y6jc=
Subject key identifier: F6:37:AE:EB:14:C2:28:CD:45:D7:3A:F6:90:9C:17:FC:FA:33:0F:77
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018E428A53B5DEF8182972347BB4EBE4D011
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/9jeu6xTCKM1F1zr2kJwX_PozD3c.roa
Signing time: Fri 15 Mar 2024 14:35:45 +0000
ROA not before: Fri 15 Mar 2024 14:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 31.192.246.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
185.5.37.0/24 maxlen: 24
185.5.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 07:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:8a:53:b5:de:f8:18:29:72:34:7b:b4:eb:e4:d0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 15 14:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f637aeeb14c228cd45d73af6909c17fcfa330f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:fc:07:fb:6b:11:ea:b7:bd:bb:53:ac:0b:
fe:60:09:d3:9b:c8:0b:c7:8d:eb:d0:1e:e9:be:6b:
f6:b6:f5:bc:76:71:a8:5f:c6:ed:99:6a:d2:a8:9e:
53:19:50:f0:81:56:00:1c:09:5b:b7:be:53:89:56:
e2:06:b0:02:70:ec:c6:ae:2d:96:44:0a:f7:d1:3c:
4b:31:fe:ba:f9:5f:53:37:60:e3:75:bd:53:ad:22:
6c:0f:97:7e:de:30:c3:47:de:7c:7a:80:5e:5a:b9:
12:ab:28:73:c5:08:5b:47:ba:bb:7c:f6:c1:75:7e:
3e:ef:79:26:49:70:21:2d:40:b6:d6:b2:71:cb:91:
7f:18:ae:f2:48:d2:ea:57:a1:2a:1b:35:7f:94:3f:
ec:da:da:5e:72:7d:35:c0:fa:9b:eb:b5:02:a7:1a:
6b:ef:ca:70:af:d9:35:1d:46:85:24:01:79:02:a2:
21:96:bd:74:71:cc:21:29:4b:0d:3d:20:36:35:52:
c0:a5:78:af:4a:52:d3:b6:b6:99:7d:17:e8:00:3c:
6c:1d:15:a9:43:49:a8:9f:fc:9b:12:f4:da:71:10:
86:61:84:45:5f:c7:dd:08:bc:0b:3c:bf:d7:1e:39:
9e:03:30:0d:fe:24:f6:11:58:10:92:e5:94:f8:16:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:AE:EB:14:C2:28:CD:45:D7:3A:F6:90:9C:17:FC:FA:33:0F:77
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/9jeu6xTCKM1F1zr2kJwX_PozD3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.246.0/24
45.12.217.0-45.12.219.255
185.5.37.0/24
185.5.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7c:4e:9a:48:9c:73:15:e6:61:9a:2e:18:34:7a:ed:44:55:
c3:ef:d7:78:1b:2f:3d:06:88:b0:79:ee:6f:69:fb:f3:41:9f:
05:2d:2a:c9:26:ee:e2:cc:c5:c5:8d:ac:30:de:cd:88:95:31:
85:d8:3b:ba:96:56:13:d7:f2:5b:11:8f:9d:ab:d5:7e:4b:3d:
15:8f:c5:14:1f:82:b6:88:07:c3:4d:7c:c4:84:de:30:92:b5:
31:4b:e9:aa:82:25:3f:20:b7:b1:c1:05:91:17:96:a8:8d:e3:
a7:9b:34:02:cb:d4:64:cd:6f:00:7b:02:78:41:ab:d6:bd:7a:
75:02:bc:3a:99:3d:16:bf:20:62:dc:c1:ff:af:93:44:46:bd:
c8:0e:c6:ca:b3:34:11:1b:34:95:25:7d:28:71:c5:87:f6:06:
c9:9a:54:55:ed:f9:b7:ab:45:c6:0e:08:45:fc:95:59:89:86:
a2:2f:67:db:89:12:65:d1:a1:70:4e:ed:ea:69:4b:aa:fc:8e:
80:7b:c2:ae:f2:9f:2c:ec:b2:12:fd:3b:ff:fb:b2:c6:cb:8a:
eb:18:6c:9e:00:5e:49:94:e0:2b:b2:48:f8:c0:48:8c:78:06:
1a:24:e5:8d:4a:81:c2:3c:44:8a:e4:63:b8:af:b8:f5:0a:b0:
16:10:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 12:08:40 2024 by rpki-client on console-fra.rpki-client.org