Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/59qEZ8tWZX79hkdHwljVMmQDYH0.roa
File: 59qEZ8tWZX79hkdHwljVMmQDYH0.roa (raw, json)
Hash identifier: skrElHZeNiKuKLasLnwT2pn5syojUw0OOZW9FT5/I8c=
Subject key identifier: E7:DA:84:67:CB:56:65:7E:FD:86:47:47:C2:58:D5:32:64:03:60:7D
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0185D04CE221E5FD2E7342DB23308F5C9F54
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/59qEZ8tWZX79hkdHwljVMmQDYH0.roa
Signing time: Fri 20 Jan 2023 17:49:37 +0000
ROA not before: Fri 20 Jan 2023 17:49:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205655
IP address blocks: 31.135.0.0/24 maxlen: 24
31.135.6.0/24 maxlen: 24
91.245.90.0/24 maxlen: 24
176.103.120.0/24 maxlen: 24
64.43.65.0/24 maxlen: 24
64.43.74.0/23 maxlen: 23
91.246.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 18:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:4c:e2:21:e5:fd:2e:73:42:db:23:30:8f:5c:9f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 20 17:49:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7da8467cb56657efd864747c258d5326403607d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:60:6a:40:53:09:b1:5f:15:38:33:98:e4:
ad:73:50:e9:dc:b1:77:eb:d0:5f:98:34:50:1f:8d:
f9:52:3b:fa:37:f6:7e:a9:d0:2b:9c:57:6e:2c:1f:
c0:75:af:93:55:18:70:aa:91:3b:d7:9b:9b:4c:4f:
7e:fc:6f:a7:a5:c7:08:c8:d6:0a:50:10:3c:a2:93:
60:11:c3:9e:23:fc:72:b7:c0:d8:67:d7:0f:96:06:
56:aa:e9:05:a5:57:36:8b:0f:1f:8e:cd:50:22:e9:
a6:f8:90:e6:5e:42:84:ad:d9:29:1d:e8:1c:36:ed:
cb:b0:be:8d:04:36:62:23:20:d1:35:02:29:6a:4b:
d0:e3:95:bf:0a:7a:00:a3:fc:92:3d:17:78:7a:e4:
7a:af:90:98:84:81:08:d7:5d:54:6e:8a:fc:5f:86:
27:c9:e7:9b:44:39:1f:7b:ff:9d:ed:a3:ce:40:95:
dc:98:f2:2f:52:c3:95:fb:d3:1e:19:83:89:40:79:
53:bc:07:dc:f0:1c:88:0f:be:2e:15:21:87:18:0e:
c7:b4:2d:f0:0f:d6:e0:ed:c8:4e:a3:80:93:e6:2d:
d1:79:09:9b:1c:c4:ed:36:9c:39:14:f4:04:8f:ed:
85:a8:a0:6d:5e:e5:cd:1d:54:96:05:9e:bb:c8:a9:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DA:84:67:CB:56:65:7E:FD:86:47:47:C2:58:D5:32:64:03:60:7D
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/59qEZ8tWZX79hkdHwljVMmQDYH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.0.0/24
31.135.6.0/24
64.43.65.0/24
64.43.74.0/23
91.245.90.0/24
91.246.200.0/24
176.103.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ad:80:87:56:ce:a8:43:29:8a:8a:f3:38:1c:89:0d:48:c3:
15:f5:98:85:2a:8a:32:67:1c:11:fb:98:36:64:e0:3f:ad:71:
28:26:00:a2:65:e8:1b:c8:3a:f9:cc:37:bb:58:67:8a:51:77:
1d:ee:da:34:e1:bf:c1:97:b7:2c:90:a1:9d:b5:ab:d0:29:04:
c2:58:98:5d:c4:bb:d0:5c:62:56:1c:26:a1:21:ad:9e:2a:2a:
17:49:92:c1:63:99:1f:88:5a:f5:a8:d9:83:c5:66:7d:d0:c7:
be:2d:3f:73:07:bc:fa:54:37:8b:ee:12:aa:96:af:29:d6:d8:
8c:02:89:f1:ed:17:7c:f1:e4:2f:1b:53:52:2c:be:c6:0f:9f:
83:cd:20:35:f2:1c:16:3c:ca:24:24:68:a1:7e:1a:82:34:49:
fb:d9:82:a7:99:68:f9:79:52:05:a8:45:ee:a4:c3:d1:6e:4d:
38:88:87:bb:73:76:f4:80:06:7f:6b:bc:43:77:1d:42:98:38:
a9:29:2a:d2:99:1a:b3:2d:ed:9d:ed:56:69:d7:fb:08:da:f9:
e0:e0:ad:c3:c2:67:e9:ca:c6:e0:6b:59:d8:17:a9:55:90:02:
65:25:4e:32:67:b4:cf:ec:0d:71:2f:b8:eb:49:1a:57:49:06:
93:84:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org