Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eQDAb4O1LcWIX7aos07x3ErmQPc.roa
File: eQDAb4O1LcWIX7aos07x3ErmQPc.roa (raw, json)
Hash identifier: PGP4XBx6XeqSUCKiee1OVJgxb1T89W28eGhjriQB2xU=
Subject key identifier: 79:00:C0:6F:83:B5:2D:C5:88:5F:B6:A8:B3:4E:F1:DC:4A:E6:40:F7
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCB0BB4DA6E534EC2D6E761B0FF2CA
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eQDAb4O1LcWIX7aos07x3ErmQPc.roa
Signing time: Sun 01 Jan 2023 05:45:03 +0000
ROA not before: Sun 01 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205655
IP address blocks: 31.135.0.0/24 maxlen: 24
31.135.6.0/24 maxlen: 24
91.245.90.0/24 maxlen: 24
176.103.120.0/24 maxlen: 24
64.43.65.0/24 maxlen: 24
64.43.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 20 Jan 2023 17:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b0:bb:4d:a6:e5:34:ec:2d:6e:76:1b:0f:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7900c06f83b52dc5885fb6a8b34ef1dc4ae640f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:31:0f:cc:0e:18:81:09:6e:c4:e2:af:4c:00:
9c:67:f6:bd:48:7f:18:00:ed:ff:12:53:a9:19:51:
f0:24:17:e0:0f:3b:9f:e2:cd:c0:3e:9a:ea:cf:94:
a8:e9:92:be:4b:de:be:40:06:5f:15:cd:91:ce:89:
32:6b:1a:71:cd:db:a7:66:2d:fd:d8:d9:62:07:08:
37:b2:25:14:f4:26:ab:7c:8e:98:c9:62:84:db:c0:
44:d0:af:fc:a8:61:ec:73:a3:a8:47:b4:3d:4b:3c:
8a:d7:02:18:4a:cc:b8:6a:3e:5c:48:16:11:0e:c1:
e5:2a:77:8e:aa:33:de:fc:6a:82:68:a8:1c:0a:d6:
f9:5d:7a:dd:2c:03:e9:d5:72:c0:70:10:4f:e2:74:
77:53:2b:f4:a7:45:68:bb:8e:fb:2e:28:70:18:f4:
8e:8f:6b:93:9e:af:fc:c3:49:26:1d:e5:ba:91:c1:
d8:a5:a9:9b:c1:63:c2:c7:bd:ed:a8:3e:e7:fe:cc:
88:60:55:0c:c9:4c:df:73:69:79:ef:56:2e:be:1d:
51:11:cc:e5:19:63:df:1d:3e:66:53:f9:c9:5c:b2:
12:dd:85:34:0a:d7:07:14:00:9e:fa:9f:a7:32:12:
5b:ad:24:d3:74:29:cd:c1:45:19:17:8f:6a:5a:7d:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:C0:6F:83:B5:2D:C5:88:5F:B6:A8:B3:4E:F1:DC:4A:E6:40:F7
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/eQDAb4O1LcWIX7aos07x3ErmQPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.0.0/24
31.135.6.0/24
64.43.65.0/24
64.43.74.0/23
91.245.90.0/24
176.103.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5e:88:8b:52:2a:f0:1d:ba:6c:ed:04:b2:d7:21:0f:41:90:
b6:8c:58:68:74:59:b6:69:b6:d4:ae:b1:24:00:56:38:43:1b:
bd:4a:77:b5:e8:85:20:7e:dd:0a:2f:75:11:77:12:e0:08:08:
71:21:7b:03:a0:02:5b:9d:c4:a6:27:ec:de:5b:92:54:8a:e6:
8b:fe:d4:06:15:e4:e7:1b:52:b5:48:da:78:73:0d:cc:db:71:
5f:d9:22:bb:1f:47:b5:29:e4:ab:b1:d7:9b:b0:f3:1d:c5:cf:
1a:dd:c1:b3:89:55:8e:e2:74:94:56:ae:bf:a4:99:c0:1b:47:
d5:61:83:e1:65:04:a1:1e:dd:e0:65:73:80:3d:33:44:3a:a8:
97:dc:d1:64:91:2f:2e:86:fd:6c:da:62:29:96:5a:46:40:1f:
5e:3e:42:38:62:d4:5a:4f:77:37:f7:35:2e:6c:9f:e0:59:dd:
19:73:83:2f:68:6a:65:ea:dc:b7:57:ad:17:19:40:21:2a:be:
e4:98:a4:31:e8:47:54:ed:3f:fa:c5:29:f7:ed:e7:ee:4e:31:
f1:f8:fb:26:b9:a5:cf:5a:35:e2:44:43:e0:46:d9:73:bf:4f:
ab:3d:33:ea:aa:3f:93:28:ff:f1:89:e9:80:a0:16:3f:67:37:
91:fc:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org