Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/axGduMamHwvDQqJoenSpil22qV8.roa
File: axGduMamHwvDQqJoenSpil22qV8.roa (raw, json)
Hash identifier: 04MSAD/3lVfbwjVaYnnEcJcFreqyJ8m2aDiHjSsh4IY=
Subject key identifier: 6B:11:9D:B8:C6:A6:1F:0B:C3:42:A2:68:7A:74:A9:8A:5D:B6:A9:5F
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01925E578DE1A41D0BD6A32663FD42697256
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/axGduMamHwvDQqJoenSpil22qV8.roa
Signing time: Sat 05 Oct 2024 20:20:49 +0000
ROA not before: Sat 05 Oct 2024 20:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19844
IP address blocks: 31.40.193.0/24 maxlen: 24
45.141.13.0/24 maxlen: 24
83.136.48.0/24 maxlen: 24
93.177.108.0/24 maxlen: 24
93.177.111.0/24 maxlen: 24
185.240.86.0/24 maxlen: 24
194.62.164.0/24 maxlen: 24
194.62.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 16:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5e:57:8d:e1:a4:1d:0b:d6:a3:26:63:fd:42:69:72:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 5 20:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b119db8c6a61f0bc342a2687a74a98a5db6a95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:22:f5:44:ff:a7:b1:31:40:90:4f:b2:a8:
2a:79:82:18:57:ba:03:44:f9:2d:94:f5:3a:84:32:
4d:c7:8e:d3:74:43:23:59:c0:88:bb:5e:ad:ab:5c:
0c:f4:75:22:15:50:ea:e1:98:11:41:5e:e2:a8:7a:
f8:25:6c:be:1e:81:c0:43:bd:9c:59:47:6b:7b:20:
48:a5:60:ce:2c:41:41:b5:93:24:19:b3:97:3a:71:
7c:14:eb:d7:8f:05:49:bd:79:a0:d3:cd:68:2d:68:
b4:e2:44:12:42:46:15:aa:db:ea:a9:5f:ac:d1:d0:
a5:61:68:43:57:f3:8d:9d:f3:5f:1a:fb:c5:e3:9d:
78:fc:44:a5:41:39:56:7b:bc:3f:97:94:e7:88:62:
9d:27:fa:c9:d4:5a:67:ae:c8:e4:1d:f4:a8:82:7d:
22:31:d0:09:87:46:67:83:84:90:b9:5a:6d:4e:6f:
7f:2f:74:4e:2b:f9:9e:0e:f7:24:bb:0e:21:dc:81:
c8:91:a4:31:96:9d:28:4d:57:2a:6d:65:7d:61:45:
05:65:72:91:2e:e0:e3:58:b0:05:fb:23:66:2b:53:
c0:60:8c:19:1f:2a:5b:47:f3:d0:47:d9:ca:c8:36:
eb:9a:a9:53:8e:40:bf:54:fe:70:5c:6e:0d:f3:f3:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:9D:B8:C6:A6:1F:0B:C3:42:A2:68:7A:74:A9:8A:5D:B6:A9:5F
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/axGduMamHwvDQqJoenSpil22qV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.193.0/24
45.141.13.0/24
83.136.48.0/24
93.177.108.0/24
93.177.111.0/24
185.240.86.0/24
194.62.164.0/24
194.62.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1e:e7:02:84:47:42:14:02:83:fc:b6:95:d9:94:32:71:bb:
15:32:5a:60:a0:dd:ef:c4:d7:2c:6d:f9:90:0d:44:52:ed:12:
16:ca:b7:21:24:58:32:3e:e3:9a:99:05:2f:98:8d:57:29:b9:
65:3a:57:71:1d:c8:c4:f9:3f:ff:d8:90:8f:25:28:c3:bc:78:
64:32:77:bc:4c:3c:78:ae:c5:30:05:ea:d3:f1:ca:43:3b:32:
f5:05:98:07:ad:f2:51:f7:1a:e4:91:a5:d2:d1:da:a8:f6:7d:
33:70:02:cb:26:8b:44:b6:e6:af:b0:c3:b2:bd:d2:fc:21:4e:
9d:e6:45:aa:aa:bb:ec:a7:42:7c:02:d5:dd:4c:e9:aa:c3:b2:
ee:a7:d2:b2:73:92:84:37:33:25:3b:27:16:23:c7:ea:bd:56:
6a:48:bd:4a:af:18:a9:ba:13:7c:24:20:8d:28:c8:6b:69:74:
a8:d4:91:6e:4b:82:fe:ca:96:ad:5a:e3:84:5c:22:b8:81:51:
70:13:be:b8:b4:a8:17:b2:56:37:f3:36:6b:16:6f:48:02:eb:
c3:03:d4:49:0b:61:c4:1e:f3:90:24:a2:1e:5e:f8:5d:63:af:
fb:67:33:8f:b3:f2:fd:26:30:c4:b8:14:d1:79:f2:4e:54:ca:
9d:b7:85:37
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZJeV43hpB0L1qMmY/1CaXJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjQxMDA1MjAyMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjExOWRiOGM2YTYxZjBiYzM0MmEyNjg3YTc0YTk4YTVkYjZhOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKEi9UT/p7ExQJBPsqgqeYIYV7oD
RPktlPU6hDJNx47TdEMjWcCIu16tq1wM9HUiFVDq4ZgRQV7iqHr4JWy+HoHAQ72c
WUdreyBIpWDOLEFBtZMkGbOXOnF8FOvXjwVJvXmg081oLWi04kQSQkYVqtvqqV+s
0dClYWhDV/ONnfNfGvvF4514/ESlQTlWe7w/l5TniGKdJ/rJ1FpnrsjkHfSogn0i
MdAJh0Zng4SQuVptTm9/L3ROK/meDvckuw4h3IHIkaQxlp0oTVcqbWV9YUUFZXKR
LuDjWLAF+yNmK1PAYIwZHypbR/PQR9nKyDbrmqlTjkC/VP5wXG4N8/OZnwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFGsRnbjGph8Lw0KiaHp0qYpdtqlfMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvYXhHZHVNYW1Id3ZEUXFKb2VuU3BpbDIycVY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAHyjBAwQA
LY0NAwQAU4gwAwQAXbFsAwQAXbFvAwQAufBWAwQAwj6kAwQAwj6nMA0GCSqGSIb3
DQEBCwUAA4IBAQB8HucChEdCFAKD/LaV2ZQycbsVMlpgoN3vxNcsbfmQDURS7RIW
yrchJFgyPuOamQUvmI1XKbllOldxHcjE+T//2JCPJSjDvHhkMne8TDx4rsUwBerT
8cpDOzL1BZgHrfJR9xrkkaXS0dqo9n0zcALLJotEtuavsMOyvdL8IU6d5kWqqrvs
p0J8AtXdTOmqw7Lup9Kyc5KENzMlOycWI8fqvVZqSL1KrxipuhN8JCCNKMhraXSo
1JFuS4L+ypatWuOEXCK4gVFwE764tKgXslY38zZrFm9IAuvDA9RJC2HEHvOQJKIe
XvhdY6/7ZzOPs/L9JjDEuBTRefJOVMqdt4U3
-----END CERTIFICATE-----
Generated at Fri Oct 18 17:45:13 2024 by rpki-client on console-fra.rpki-client.org