Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/sdLtWDMsI1Ih9y8p0O-82ETgqcc.roa
File: sdLtWDMsI1Ih9y8p0O-82ETgqcc.roa (raw, json)
Hash identifier: JUaX4gipgCUzyTZcrVAis6GDqEyl5diPXhtmFQQUc7o=
Subject key identifier: B1:D2:ED:58:33:2C:23:52:21:F7:2F:29:D0:EF:BC:D8:44:E0:A9:C7
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FBCDA58A8F21807270F55AEA6566C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/sdLtWDMsI1Ih9y8p0O-82ETgqcc.roa
Signing time: Tue 02 Jan 2024 04:30:15 +0000
ROA not before: Tue 02 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6282
IP address blocks: 176.96.52.0/22 maxlen: 22
77.36.120.0/22 maxlen: 22
178.159.144.0/23 maxlen: 23
176.113.184.0/22 maxlen: 22
176.113.188.0/22 maxlen: 22
81.161.2.0/23 maxlen: 23
81.161.0.0/23 maxlen: 23
77.36.24.0/22 maxlen: 22
176.116.36.0/22 maxlen: 22
176.116.32.0/22 maxlen: 22
91.246.176.0/22 maxlen: 22
91.246.180.0/22 maxlen: 22
64.43.100.0/22 maxlen: 22
64.43.104.0/22 maxlen: 22
176.111.162.0/23 maxlen: 23
176.111.160.0/23 maxlen: 23
64.43.108.0/22 maxlen: 22
93.120.16.0/22 maxlen: 22
64.43.116.0/22 maxlen: 22
93.120.20.0/22 maxlen: 22
31.131.8.0/23 maxlen: 23
31.131.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 03 Apr 2024 13:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:bc:da:58:a8:f2:18:07:27:0f:55:ae:a6:56:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1d2ed58332c235221f72f29d0efbcd844e0a9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:c4:09:f5:82:f7:1b:13:e4:a1:30:a7:fa:
29:bb:98:76:8f:9e:b5:d2:9d:c6:65:aa:cc:1e:02:
02:40:8a:8f:a8:a6:98:e1:b9:3e:90:ac:78:e7:e9:
30:d9:04:06:71:90:33:63:b0:4c:6d:0f:26:9f:e9:
32:95:95:5b:99:41:8f:4d:d9:0e:74:16:03:a0:06:
4d:d0:98:9f:dd:b7:cc:15:ff:aa:6e:55:ae:fa:3e:
d2:66:63:0e:0e:3b:04:d1:5e:16:64:41:93:97:a4:
35:d4:f8:af:12:82:dd:27:1a:0d:04:cb:b9:dd:b1:
91:c8:aa:08:ce:65:cd:13:e1:73:65:f0:7f:72:c2:
98:62:5f:b6:97:82:a1:ce:8e:be:62:86:17:7a:ef:
73:5d:99:09:7c:d5:b4:8f:01:cf:43:11:a6:b6:79:
cd:e9:03:53:7d:2b:61:7f:a3:4a:57:a8:6a:18:fe:
36:fd:e4:68:39:4b:30:f4:94:54:c3:0d:f1:f0:58:
7c:f9:f6:47:3e:91:a0:de:35:32:73:7c:50:5f:c0:
aa:e3:b3:03:be:32:00:3b:3e:a9:33:2e:d7:61:ed:
07:56:25:06:04:c3:11:57:49:fa:ae:57:6c:ab:62:
35:bf:eb:05:a6:a2:57:60:01:80:de:7a:56:c3:d8:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D2:ED:58:33:2C:23:52:21:F7:2F:29:D0:EF:BC:D8:44:E0:A9:C7
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/sdLtWDMsI1Ih9y8p0O-82ETgqcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.8.0/22
64.43.100.0-64.43.111.255
64.43.116.0/22
77.36.24.0/22
77.36.120.0/22
81.161.0.0/22
91.246.176.0/21
93.120.16.0/21
176.96.52.0/22
176.111.160.0/22
176.113.184.0/21
176.116.32.0/21
178.159.144.0/23
Signature Algorithm: sha256WithRSAEncryption
48:1b:88:0f:d2:a4:30:26:dc:f4:97:3e:a7:a0:9c:56:48:92:
13:c5:83:c4:01:8a:f9:fd:bb:92:24:80:14:b9:27:1c:58:58:
38:18:ae:41:0c:59:89:a2:fe:a2:b9:f9:bc:42:d5:2f:78:fe:
e1:69:35:36:72:b3:38:d1:27:1d:18:70:49:82:3a:be:58:8c:
02:05:e1:3d:f2:51:c7:ea:1c:a2:75:31:3e:40:56:72:e3:41:
ae:b4:b2:d9:58:72:3a:bc:17:3c:66:6a:64:cd:36:f0:c7:eb:
fe:cb:9b:8e:9f:17:27:2b:5d:57:13:2b:53:6f:36:39:7f:51:
3e:32:db:0d:11:40:ff:1d:e3:2d:c6:2b:c5:b8:68:4f:8b:de:
6f:d2:bb:e6:68:de:2f:e2:c3:f4:ad:d0:69:05:2a:13:f1:45:
f7:54:db:c1:09:04:d8:8c:ee:7e:4d:9f:46:7a:2c:34:d3:bb:
cc:bf:c5:cc:d3:31:8c:3f:a3:86:46:d7:57:c6:e8:89:16:7d:
57:16:9a:24:cd:cf:a0:58:c5:1c:46:32:3d:7b:67:da:b8:01:
84:24:7b:7a:5d:ed:c2:b1:16:09:7f:8b:39:cf:bd:d1:29:e8:
43:d2:ce:44:96:60:42:91:3f:d9:07:de:d2:4e:1d:cf:4e:a2:
9a:2c:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org