Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/kAzudtHY1tilc68PKNSNGMBxbVk.roa
File: kAzudtHY1tilc68PKNSNGMBxbVk.roa (raw, json)
Hash identifier: iEdLJ0uPRWKONGijiGdL/q6dbVn8d2G7jYzgybq6Eq0=
Subject key identifier: 90:0C:EE:76:D1:D8:D6:D8:A5:73:AF:0F:28:D4:8D:18:C0:71:6D:59
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 018B89725EDD139B3D92F485C1D883A1A60E
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/kAzudtHY1tilc68PKNSNGMBxbVk.roa
Signing time: Wed 01 Nov 2023 05:54:15 +0000
ROA not before: Wed 01 Nov 2023 05:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62462
IP address blocks: 185.35.40.0/22 maxlen: 24
31.216.176.0/22 maxlen: 24
31.216.180.0/22 maxlen: 24
188.95.184.0/22 maxlen: 24
188.95.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:72:5e:dd:13:9b:3d:92:f4:85:c1:d8:83:a1:a6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Nov 1 05:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=900cee76d1d8d6d8a573af0f28d48d18c0716d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:b1:6e:ef:63:8e:ca:e7:4e:d2:a9:6c:3e:
63:c1:b8:1a:24:08:6a:bc:7c:51:5b:76:f4:2a:47:
ee:67:72:94:f8:f2:f9:c3:c6:35:be:98:b3:73:7e:
60:25:ff:5b:5e:ea:d0:e8:97:99:cf:81:87:71:c4:
cf:c1:b5:0c:0d:58:cd:61:32:ce:42:c9:34:1d:00:
d3:91:58:01:c7:0e:a8:5a:d5:28:5d:bc:a6:03:29:
06:ce:ae:96:6f:a6:7a:8e:52:79:ff:b3:1d:69:bd:
e4:59:9b:e4:c4:84:aa:9f:07:8a:46:2a:fa:01:79:
3b:ab:5d:aa:1d:11:67:40:c0:f9:2d:94:84:d3:57:
35:1b:a5:c8:5b:5c:36:7b:a3:58:b9:19:b9:4e:b5:
14:59:89:78:56:b3:3f:1c:2c:b6:74:b8:61:2a:03:
3d:8d:67:cb:7f:0f:24:6a:f0:7a:4b:68:55:46:9f:
16:1d:46:d5:49:03:7c:9d:91:10:4a:a5:7e:b9:41:
d8:2d:f7:b3:ad:c3:07:f2:6a:07:73:92:d6:73:ff:
4b:87:4c:3a:6b:ab:93:e3:db:9d:2c:dd:6b:d8:c0:
95:0d:26:88:30:cd:cf:5a:b3:ac:5a:45:b9:34:16:
0d:75:0d:cf:f8:3b:84:31:6f:02:74:13:d1:bc:8c:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:EE:76:D1:D8:D6:D8:A5:73:AF:0F:28:D4:8D:18:C0:71:6D:59
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/kAzudtHY1tilc68PKNSNGMBxbVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.176.0/21
185.35.40.0/22
188.95.184.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:24:06:e9:df:e8:80:63:cc:62:a4:8f:37:1c:68:03:49:57:
6c:84:73:6d:38:60:02:24:b5:89:11:19:a8:e9:b0:d8:36:f8:
bb:cf:ce:ab:f5:3b:47:5b:07:9b:96:bf:e7:0a:97:61:e3:1c:
55:e0:0e:21:d0:ef:da:8f:30:1a:7a:a5:70:78:33:14:ac:36:
3b:07:93:ae:de:fa:09:28:8d:0e:a7:48:b7:39:1f:61:f5:d3:
c4:0a:bc:f9:51:90:d3:50:ce:da:df:b4:b1:fc:df:d1:e5:f2:
a8:5d:b0:b1:a5:90:78:50:bf:b6:54:03:d9:8c:9c:f4:d5:85:
b1:8b:15:5d:28:b5:51:05:24:2f:5d:1e:f8:b8:89:65:cc:1a:
79:15:84:2c:10:7f:ab:e1:b4:a7:d3:fe:ca:0a:1d:a8:0a:52:
ee:c3:82:06:c4:43:a9:fb:e3:31:8b:53:9d:c9:5e:f4:d7:24:
89:72:f3:98:16:bf:fa:55:85:f6:a1:8f:d4:63:66:0d:15:a3:
5d:c2:8c:11:4f:47:65:4d:97:aa:4d:89:cb:8d:a9:6d:ef:0e:
55:db:cf:85:2e:40:cf:81:9b:0b:d1:75:96:0d:61:67:38:bb:
f1:7d:48:69:b6:4f:78:36:c9:5c:d1:bd:82:7c:1e:6b:bb:45:
55:35:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org