Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/I0j9xKUvUDa7CufjLouCJOsxoOc.roa
File: I0j9xKUvUDa7CufjLouCJOsxoOc.roa (raw, json)
Hash identifier: lpQvIG5G/KUd+tghAw+Ujk9Zpe6zKQgieuOLor/7c2A=
Subject key identifier: 23:48:FD:C4:A5:2F:50:36:BB:0A:E7:E3:2E:8B:82:24:EB:31:A0:E7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7B5F82106DAD2EA2C06CED12B797
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/I0j9xKUvUDa7CufjLouCJOsxoOc.roa
Signing time: Tue 02 Jan 2024 06:32:18 +0000
ROA not before: Tue 02 Jan 2024 06:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 212.68.36.0/24 maxlen: 24
212.68.38.0/24 maxlen: 24
77.92.144.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.49.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 19:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7b:5f:82:10:6d:ad:2e:a2:c0:6c:ed:12:b7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2348fdc4a52f5036bb0ae7e32e8b8224eb31a0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:84:58:86:a0:8a:97:5b:7e:64:eb:b0:14:99:
58:03:b3:a1:34:d5:18:21:25:f2:22:a9:55:75:be:
ca:e9:56:97:81:cc:83:6d:e4:66:2d:cf:84:27:e7:
30:02:4e:a5:74:28:31:a4:4b:14:b8:12:db:85:c4:
2e:42:9d:92:f5:02:e1:80:fa:08:88:dd:7f:89:11:
bf:54:94:9b:b7:56:d3:65:ce:04:2d:f4:60:0c:dc:
01:8a:f6:57:21:db:77:eb:b9:b6:30:84:4e:ab:00:
a5:c1:47:b9:f9:a7:6d:2d:8a:30:65:1f:ff:05:43:
6d:c5:d7:36:ae:4b:44:dc:e4:3c:e0:06:0a:a4:78:
20:e5:94:ab:97:eb:41:2e:06:01:09:91:a4:c6:85:
23:6e:7b:cb:c6:19:0a:47:d6:18:b2:31:d3:6a:80:
e3:8f:97:ec:0a:76:de:c1:28:a2:ff:30:06:17:c1:
15:a7:aa:69:7a:d2:7d:5d:e3:b8:fd:97:8b:65:82:
78:42:ca:35:a6:59:eb:9f:ae:65:2d:6c:d8:1f:88:
fc:da:96:89:90:ae:26:ca:88:a8:77:7e:3a:6b:84:
8c:85:89:09:e8:dc:b7:ba:7a:c9:3a:3d:6b:de:85:
08:07:0b:d9:3c:4a:49:a1:75:c0:53:4e:48:24:37:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:FD:C4:A5:2F:50:36:BB:0A:E7:E3:2E:8B:82:24:EB:31:A0:E7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/I0j9xKUvUDa7CufjLouCJOsxoOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.49.0-31.210.51.255
31.210.53.0/24
77.92.144.0/24
188.132.170.0/24
212.68.36.0/24
212.68.38.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f2:33:6a:7a:42:0e:e6:e8:87:0b:44:a1:a2:84:b3:d5:e3:
09:93:68:4a:63:e9:1f:d1:2c:97:aa:d5:02:aa:34:ba:91:7b:
8b:71:8c:54:fa:6f:1d:e9:96:ba:ec:6a:e2:c1:0b:22:c2:5e:
8c:92:1c:6c:02:3e:d6:4d:6f:7e:7d:98:d8:3a:88:b6:98:39:
3d:a4:7d:4e:f3:86:3e:13:0f:45:70:d1:59:40:56:63:a2:a6:
89:fa:ed:67:6c:3d:cc:13:0a:92:ed:0b:e9:64:81:e1:26:67:
c1:42:20:78:dd:cf:26:42:33:d5:81:c6:b2:2d:b9:26:be:ce:
a7:64:ee:ed:6d:0e:a8:3d:4f:f4:77:2f:83:d4:a6:39:5e:86:
c4:31:65:89:f6:26:7e:8d:a3:9a:04:04:bd:67:1e:d8:68:96:
5f:d0:e6:a4:2a:77:6c:87:04:dc:fc:ff:1a:84:a9:18:e8:d1:
a5:ba:90:90:0a:81:03:5c:fe:42:33:75:88:be:8a:6b:ba:ad:
c4:6b:f5:e3:e2:16:eb:b4:77:6d:32:2b:0b:5e:a1:53:e7:8c:
12:26:2c:c9:20:9b:aa:f5:92:bd:60:32:d8:f1:05:5b:a7:de:
ac:9f:d6:2b:f6:0b:5c:d1:6f:ab:7d:f7:8c:75:16:25:46:a2:
58:db:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org