Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/vX0auhrcgHyHNqdeOTLqlaGSw_o.roa
File: vX0auhrcgHyHNqdeOTLqlaGSw_o.roa (raw, json)
Hash identifier: 1tEHgBty6djmjW8wXfeXUaG4d58APRzoxbJIRn+8r14=
Subject key identifier: BD:7D:1A:BA:1A:DC:80:7C:87:36:A7:5E:39:32:EA:95:A1:92:C3:FA
Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial: 018571CC23D47FB339927052497FA55C368E
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/vX0auhrcgHyHNqdeOTLqlaGSw_o.roa
Signing time: Mon 02 Jan 2023 09:24:42 +0000
ROA not before: Mon 02 Jan 2023 09:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56515
IP address blocks: 185.24.164.0/22 maxlen: 24
176.110.144.0/20 maxlen: 24
31.128.0.0/19 maxlen: 24
2a04:2b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:23:d4:7f:b3:39:92:70:52:49:7f:a5:5c:36:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Validity
Not Before: Jan 2 09:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd7d1aba1adc807c8736a75e3932ea95a192c3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:00:51:2d:c8:3c:f7:0a:21:0d:10:69:a7:
ec:25:1c:be:c7:85:bf:50:78:8e:f0:72:56:4d:ea:
6f:bf:90:6a:b9:97:a9:26:99:b2:3f:73:10:86:14:
55:4e:cf:f3:af:28:1c:ce:92:3a:7a:e3:93:99:c3:
39:fe:86:4c:5d:22:53:72:79:14:b3:b4:16:31:e6:
8c:89:86:22:14:72:63:62:c4:df:75:c4:07:21:0b:
92:a4:37:15:ad:c9:59:bf:2b:5c:98:74:65:89:54:
1e:ad:e8:16:27:20:68:00:6a:ab:a1:f6:e4:c4:2c:
0b:56:0e:c0:bf:2c:6d:fe:ef:d0:27:fe:99:a6:03:
0b:d0:d9:47:76:9b:ce:85:26:c8:29:bc:c5:36:45:
f7:29:83:d1:12:e8:da:03:c8:f3:99:97:a0:a0:35:
51:f8:74:60:75:aa:d5:3d:ea:a5:5d:87:f0:3c:a5:
f8:b5:c4:ec:64:bb:42:9c:fe:0d:6b:e2:9e:f6:1e:
88:a2:36:a2:d2:b3:3a:eb:39:23:36:7b:d6:b9:32:
9f:01:2d:b2:aa:73:98:9e:5d:9c:b6:58:d6:0b:3b:
24:9e:48:46:fc:da:15:8d:ff:93:e0:26:42:4f:11:
50:f7:ad:5f:84:05:51:79:88:88:db:6c:34:c3:9d:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:1A:BA:1A:DC:80:7C:87:36:A7:5E:39:32:EA:95:A1:92:C3:FA
X509v3 Authority Key Identifier:
keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/vX0auhrcgHyHNqdeOTLqlaGSw_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.0.0/19
176.110.144.0/20
185.24.164.0/22
IPv6:
2a04:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:6f:8b:0a:35:39:56:fd:a0:dd:55:24:b1:2c:34:1d:d8:92:
05:22:37:d8:04:53:a4:8d:38:d5:ec:df:6b:0e:c3:fc:38:43:
4a:17:68:5a:f8:67:91:91:2e:a8:ec:76:4c:0d:ea:8f:46:2a:
af:81:0f:da:81:0b:fd:5a:84:eb:b0:e9:c8:7b:be:87:fa:1b:
b4:30:82:48:a3:80:4a:3b:1d:fd:d2:96:25:a5:5c:a3:22:b7:
8f:41:af:46:d3:2e:6e:dd:24:3b:81:e8:15:a8:f6:c4:93:a5:
1b:5e:92:5f:0c:8a:e0:6c:2b:f3:d8:1d:ed:aa:9e:93:22:35:
bb:bb:fc:84:2c:76:a4:f8:fb:20:21:a9:91:3c:04:50:02:4f:
46:2a:5c:3d:3e:78:f5:da:2a:6a:78:0c:4a:22:96:f5:2b:63:
9b:03:2e:36:f8:4f:2f:7b:0c:04:bc:08:39:92:5e:b7:31:35:
cc:6f:e4:de:09:00:7a:0f:50:56:03:c8:02:81:11:04:23:95:
df:3e:ec:a3:b0:0e:9e:83:ce:2e:a0:34:68:3e:9e:c2:bf:32:
79:a7:33:9d:6c:28:d2:72:1d:b4:9c:d7:1b:7e:3c:8c:76:4e:
c5:c6:26:c8:b2:90:61:93:a0:55:e7:70:02:fb:30:26:4c:28:
25:54:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:32 2024 by rpki-client on console-ams.rpki-client.org