Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/uZsEuTCEo8_JE3ytaKaM9gdFHOc.roa
File: uZsEuTCEo8_JE3ytaKaM9gdFHOc.roa (raw, json)
Hash identifier: 7dvcVNKQG2mhFPZ/3/vKIlq3y2aY1XK0oE433ZdNt0E=
Subject key identifier: B9:9B:04:B9:30:84:A3:CF:C9:13:7C:AD:68:A6:8C:F6:07:45:1C:E7
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 01856CB83CC3E45E2EF191E7B391033A11E0
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/uZsEuTCEo8_JE3ytaKaM9gdFHOc.roa
Signing time: Sun 01 Jan 2023 09:44:51 +0000
ROA not before: Sun 01 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49100
IP address blocks: 31.130.190.0/24 maxlen: 24
31.130.191.0/24 maxlen: 24
31.130.188.0/24 maxlen: 24
31.130.189.0/24 maxlen: 24
31.130.187.0/24 maxlen: 24
31.130.176.0/22 maxlen: 22
31.130.176.0/24 maxlen: 24
31.130.177.0/24 maxlen: 24
31.130.178.0/24 maxlen: 24
31.130.179.0/24 maxlen: 24
31.130.184.0/24 maxlen: 24
31.130.184.0/21 maxlen: 21
31.130.185.0/24 maxlen: 24
31.130.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 07:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:3c:c3:e4:5e:2e:f1:91:e7:b3:91:03:3a:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Jan 1 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b99b04b93084a3cfc9137cad68a68cf607451ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:5f:40:e3:19:d7:2d:c1:eb:92:cb:26:b5:
f0:af:90:ea:71:10:48:25:a4:55:55:1c:59:06:0a:
4a:c6:65:a8:1f:ed:f5:8e:d6:be:b3:e9:2a:b5:55:
05:ef:b7:2b:f3:86:ca:83:31:ad:2e:69:1d:21:ff:
f6:b9:f5:7f:51:ee:8b:e1:b6:9e:b5:75:d6:2a:c3:
55:ef:5e:1b:26:74:8c:8e:8f:a8:49:bd:99:c3:73:
54:04:eb:a3:5c:53:df:8f:9a:87:2b:6b:32:3a:7a:
c3:af:d2:d9:66:ac:3e:a2:5a:8e:74:39:b3:61:ef:
dd:34:cd:12:1d:a9:0d:27:97:31:2b:37:bd:bc:f7:
60:2c:89:71:a8:3d:99:be:92:e0:ba:02:de:6f:65:
36:ac:19:54:54:c3:3b:bc:c0:55:3f:27:e7:6c:b2:
47:ba:4d:8d:9c:6a:bb:ec:93:7c:82:e6:37:74:b9:
eb:6b:99:93:d8:60:1f:ed:21:47:37:82:b8:c9:20:
09:1c:f1:eb:78:ea:c5:ee:73:48:85:4d:69:79:ba:
ae:13:43:b9:fd:e2:84:f9:0c:6f:0c:c8:d5:a7:c0:
2b:67:c0:9a:cb:7b:c5:ee:0b:aa:c6:43:f8:bd:30:
64:e9:ea:80:4d:63:b3:d3:53:85:6c:6b:22:99:5c:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9B:04:B9:30:84:A3:CF:C9:13:7C:AD:68:A6:8C:F6:07:45:1C:E7
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/uZsEuTCEo8_JE3ytaKaM9gdFHOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.176.0/22
31.130.184.0/21
Signature Algorithm: sha256WithRSAEncryption
62:3a:c9:95:dc:78:28:d2:d1:49:5b:aa:90:6e:ac:0e:8c:f1:
a4:7f:02:71:e2:cd:f9:89:72:88:f2:2a:cb:50:30:ee:47:36:
72:56:3d:e5:87:64:8a:03:a4:44:ca:e2:37:36:a0:b0:67:dc:
12:a6:45:5d:3e:ec:f3:47:95:69:5e:78:6d:96:02:f9:0e:f9:
10:ad:e2:cf:08:ab:9b:87:a9:f9:3a:b9:9b:b8:0f:2c:5d:16:
62:2a:30:bb:9e:ea:01:11:8b:fd:6e:df:e2:8a:08:e6:ba:e9:
2d:77:6b:7d:01:b0:e8:8f:23:14:66:c4:d1:29:33:55:67:4d:
63:a0:f9:4e:fa:88:03:cb:c4:6f:1c:60:ef:69:13:f8:88:70:
bd:8a:38:91:49:d1:d0:6d:c2:56:2e:7b:7a:30:66:1d:cb:3c:
fe:6b:ea:1e:4c:af:e7:af:11:6b:3e:1f:da:90:43:16:f8:15:
6c:bd:0a:21:c9:d1:35:19:ec:d8:b3:23:86:4b:94:04:ae:d4:
85:f4:1f:22:f7:50:90:64:40:9c:61:69:4b:1a:a9:05:13:8e:
c9:79:84:9d:0c:c5:c6:8e:2f:84:6a:af:01:c5:7e:c4:94:22:
8c:58:3c:8a:65:19:c4:f4:24:27:90:83:2a:e4:8a:9a:36:40:
8d:05:f4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org