Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/Mal6VL53xqsYfNPjLklHZdQu3Xw.roa
File: Mal6VL53xqsYfNPjLklHZdQu3Xw.roa (raw, json)
Hash identifier: hAejbvaWoa9Mu50rqZTVCr9k+/hBUO9jM8ljmu8FKMY=
Subject key identifier: 31:A9:7A:54:BE:77:C6:AB:18:7C:D3:E3:2E:49:47:65:D4:2E:DD:7C
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 018B4F16CCB3958128F52855CF3002B1C921
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/Mal6VL53xqsYfNPjLklHZdQu3Xw.roa
Signing time: Fri 20 Oct 2023 21:56:16 +0000
ROA not before: Fri 20 Oct 2023 21:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62462
IP address blocks: 185.35.40.0/22 maxlen: 24
31.216.182.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 14:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4f:16:cc:b3:95:81:28:f5:28:55:cf:30:02:b1:c9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Oct 20 21:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31a97a54be77c6ab187cd3e32e494765d42edd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:ba:43:58:33:c9:1a:76:0b:af:b1:79:d9:
de:db:cb:78:de:01:94:43:9f:ca:0f:61:be:c2:e0:
a7:8e:67:11:54:80:7d:ff:7f:aa:6d:85:1d:a8:ed:
b9:86:e3:32:98:75:82:99:13:1a:11:d7:9f:99:48:
da:7e:31:66:5f:5d:ea:0b:1c:66:41:48:ec:43:c2:
d7:2a:b0:cf:ab:cf:0c:5a:c9:ee:60:5d:77:54:c1:
5e:26:88:0a:f4:c2:c6:8c:2a:58:d7:10:73:77:46:
bc:58:12:0f:85:b7:d7:5e:65:1f:2c:41:a3:b2:2d:
93:1c:3f:e6:90:df:9e:01:33:31:a0:c6:42:64:ad:
28:27:bf:13:b1:45:b3:cf:3b:41:ad:a8:cc:0c:d5:
5a:24:e1:2a:97:e6:a4:30:09:ca:1a:4e:61:15:db:
75:f5:37:7d:6c:5c:c6:0c:e0:46:a8:35:05:ed:8a:
53:f2:5a:5f:52:ed:0c:17:2e:ad:6c:91:8f:d5:9d:
9a:27:62:3d:bc:59:18:9b:de:30:1f:35:ce:38:2a:
80:92:27:32:05:f7:64:81:d3:6d:38:20:e2:05:59:
69:35:5c:e3:4c:72:9a:57:2a:fa:ad:f7:3d:2e:36:
61:8b:8d:05:8f:0e:7f:52:15:90:8a:36:97:49:e6:
d0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A9:7A:54:BE:77:C6:AB:18:7C:D3:E3:2E:49:47:65:D4:2E:DD:7C
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/Mal6VL53xqsYfNPjLklHZdQu3Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.182.0/23
185.35.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:40:a2:8f:60:ec:12:fc:d4:b2:d8:71:e5:18:b9:8f:60:08:
98:16:33:2d:40:c0:1a:35:aa:d5:18:b3:7a:1e:ef:e2:bd:eb:
ba:3f:76:2b:29:f7:3d:c1:fe:a9:ab:02:6f:17:f5:21:9f:c7:
b1:80:8b:8d:67:b0:a7:26:bf:b0:a4:f8:36:60:52:06:f7:e1:
63:d9:3d:09:e4:b8:e4:bf:ac:99:5b:07:76:c7:be:1b:da:66:
3d:b0:67:9f:37:aa:2b:62:78:25:e9:95:ee:94:5f:86:b6:cc:
66:91:6a:dd:09:c6:10:b8:4a:6d:1c:e3:9e:21:87:5a:45:a0:
a7:05:74:a6:09:82:2a:1f:f2:c8:bb:85:d7:66:37:cc:da:6d:
85:48:6e:10:08:3b:91:e5:ad:bc:fc:44:97:dc:0a:30:dc:f5:
d9:4f:48:ef:11:5b:0a:a8:8d:57:62:fa:fb:dd:3f:e1:1d:fd:
12:33:2c:db:f1:0d:fb:62:44:a2:20:d9:99:15:ea:55:12:e7:
a2:19:3b:05:d3:2e:c7:0a:b4:5d:ad:9f:40:36:8f:5f:fe:57:
6e:95:34:cc:9f:17:0b:a6:4c:82:e6:98:38:2f:5c:ca:a6:d0:
ab:e4:10:57:f0:3a:68:5e:03:a0:56:77:40:33:e8:f4:27:ce:
81:ab:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org