Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RMR9URhtyFX3ImxL5PjwTSrmJT4.roa
File: RMR9URhtyFX3ImxL5PjwTSrmJT4.roa (raw, json)
Hash identifier: DGWIP6zdj6FvH2PBrdHdX3gcZtglhSjiqRU5sN/7Tw0=
Subject key identifier: 44:C4:7D:51:18:6D:C8:55:F7:22:6C:4B:E4:F8:F0:4D:2A:E6:25:3E
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DB2110A6A6B5D7637AFEC8C859CEEF0E0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RMR9URhtyFX3ImxL5PjwTSrmJT4.roa
Signing time: Fri 16 Feb 2024 13:17:57 +0000
ROA not before: Fri 16 Feb 2024 13:17:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.49.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
77.92.144.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.208.0/24 maxlen: 24
188.132.211.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
188.132.225.0/24 maxlen: 24
188.132.226.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
188.132.230.0/24 maxlen: 24
188.132.231.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.241.0/24 maxlen: 24
188.132.250.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.38.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 15:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:11:0a:6a:6b:5d:76:37:af:ec:8c:85:9c:ee:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 16 13:17:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44c47d51186dc855f7226c4be4f8f04d2ae6253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:eb:4c:c6:ee:b5:ed:e6:82:33:9c:fb:32:
23:ae:4d:39:67:31:9e:27:06:f3:bf:32:f1:e6:08:
a9:a9:05:67:f2:00:80:38:f1:a6:f2:97:33:31:99:
be:ad:b8:4c:94:8b:9a:32:af:08:14:15:1c:ab:a4:
23:28:41:ca:a3:8c:f4:8b:b7:76:27:96:65:e2:2a:
76:e8:54:8a:b3:3c:37:53:f5:ba:eb:2b:e2:35:4a:
d0:ea:d8:1d:8f:77:f8:5b:19:ed:0a:da:fc:55:1d:
22:40:96:ed:20:0e:56:dd:7c:b6:38:be:d6:40:26:
bd:98:63:3d:41:34:24:43:16:4b:8d:34:e1:40:3b:
ca:83:5e:1c:25:0d:4c:7e:91:6b:c5:81:19:51:ab:
aa:e1:6a:1a:76:23:c4:fe:30:84:b8:0b:9f:97:7d:
75:ec:06:84:07:ad:33:de:d8:ad:f7:94:e9:81:ea:
68:f5:f8:1b:b1:d7:2f:b0:4b:09:7e:07:93:ba:40:
bc:2d:68:41:ab:62:2f:a2:98:16:45:96:dd:51:da:
0f:c3:20:8d:6d:f7:fa:de:bf:d7:f3:29:a1:8d:f2:
20:68:45:93:fd:52:c4:4d:7a:d6:e1:3e:51:8a:db:
34:3f:b1:5e:5a:de:b8:30:03:0b:85:88:4d:b8:47:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C4:7D:51:18:6D:C8:55:F7:22:6C:4B:E4:F8:F0:4D:2A:E6:25:3E
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RMR9URhtyFX3ImxL5PjwTSrmJT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.49.0-31.210.51.255
31.210.53.0/24
77.92.144.0/24
78.135.78.0/24
188.132.170.0/24
188.132.208.0/24
188.132.211.0/24
188.132.213.0/24
188.132.215.0/24
188.132.217.0-188.132.218.255
188.132.225.0-188.132.228.255
188.132.230.0/23
188.132.234.0/24
188.132.241.0/24
188.132.250.0/23
212.68.36.0/24
212.68.38.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
74:51:ab:3c:e1:07:7c:09:2c:46:e1:e0:b0:99:d9:10:48:9d:
81:35:1e:cc:e1:51:53:c3:ab:28:8b:89:d2:27:fa:f8:ce:d1:
b1:ce:ae:75:0e:19:73:e9:b7:9f:1c:d9:1e:12:6f:83:e0:48:
b5:20:d2:92:d0:25:41:10:7c:59:96:0b:ee:e9:01:17:d2:b7:
2d:ac:b1:7b:73:94:45:8c:4a:6c:32:43:63:f9:ec:49:e0:a9:
5d:d8:0f:b1:9c:72:5f:19:03:b4:36:20:da:eb:46:53:c0:3a:
8a:27:43:d3:20:3d:a6:f5:b3:41:de:c7:91:0c:94:17:9c:f5:
ab:36:0a:f7:c5:20:87:8c:1a:02:c6:69:d8:e5:e3:40:7c:a0:
63:62:48:4a:7a:0a:09:1a:f0:14:3f:6d:a6:44:73:a3:fe:2f:
b8:fb:bc:92:ac:2b:ae:8b:b5:79:12:3e:8a:78:b7:e1:ec:2d:
bb:45:4f:3a:33:e1:7f:81:84:63:0a:ce:80:d0:9c:a0:91:df:
51:28:c9:c1:3c:fa:e6:50:a5:b6:fd:1c:c2:35:35:20:e5:b8:
1e:7b:3f:86:78:23:e8:46:57:49:2c:e1:b2:5a:bc:f4:2b:d4:
a6:86:f4:13:25:f8:bc:44:a7:3b:39:00:b7:14:40:b3:62:ec:
dc:d4:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org