Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RnB13EvKMu8PsWxQtBSZn65Yo80.roa
File: RnB13EvKMu8PsWxQtBSZn65Yo80.roa (raw, json)
Hash identifier: 0XTdc3uETxl6VdVJucaLK7LGBryVUwdGDa/D1fPcOrY=
Subject key identifier: 46:70:75:DC:4B:CA:32:EF:0F:B1:6C:50:B4:14:99:9F:AE:58:A3:CD
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018FF7B24A0F756D3D45E4094C09C01828AC
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RnB13EvKMu8PsWxQtBSZn65Yo80.roa
Signing time: Sat 08 Jun 2024 11:53:27 +0000
ROA not before: Sat 08 Jun 2024 11:53:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.211.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.38.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 06:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f7:b2:4a:0f:75:6d:3d:45:e4:09:4c:09:c0:18:28:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 8 11:53:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=467075dc4bca32ef0fb16c50b414999fae58a3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b7:f1:fe:91:85:63:19:6f:28:b1:78:df:42:
a4:17:68:7c:14:99:3e:07:b3:a0:58:66:dc:8d:0f:
1c:2d:c4:9e:47:6a:6f:43:f6:68:9c:80:15:cc:e4:
b2:d6:92:49:56:3b:61:b0:9a:72:a9:22:59:92:56:
4d:c5:e8:f1:b8:7f:b8:b4:56:aa:52:ca:de:e7:57:
07:04:b8:f4:f0:62:77:fe:7d:86:a5:a3:75:d0:f8:
d1:53:01:3a:a5:cc:39:02:87:c9:d5:80:a7:e2:07:
5a:ac:83:ce:17:20:88:e5:3e:78:ee:44:40:55:3e:
59:b3:7f:97:06:57:e5:a6:c0:c5:d9:8a:3b:6c:4b:
cd:d7:27:d1:df:6f:58:fc:72:51:30:c8:bc:28:8a:
89:53:13:e6:7e:cc:46:7d:b4:51:96:b8:74:61:85:
32:20:03:a2:52:46:c5:7e:f4:a2:62:ac:15:d0:31:
ea:af:31:77:18:c1:ab:21:4a:9f:f3:c1:d5:d8:d0:
90:63:ba:08:0c:44:87:65:72:a5:62:82:b4:7b:f2:
5d:25:83:79:06:b7:2a:1a:dd:52:23:98:22:18:ce:
75:8c:1d:42:4f:69:34:83:06:78:c1:9c:88:e8:7d:
eb:43:ad:95:50:8a:ac:87:77:e1:bb:ad:07:36:07:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:75:DC:4B:CA:32:EF:0F:B1:6C:50:B4:14:99:9F:AE:58:A3:CD
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RnB13EvKMu8PsWxQtBSZn65Yo80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.50.0/23
31.210.53.0-31.210.54.255
78.135.78.0/24
188.132.170.0/24
188.132.211.0/24
188.132.215.0/24
188.132.227.0-188.132.228.255
212.68.36.0/24
212.68.38.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:dd:64:8c:8c:72:3b:47:80:63:91:be:2f:3b:b4:cf:75:9c:
ed:d2:8d:a8:e6:c7:1f:fa:6b:82:8b:62:12:ea:8c:c6:fe:64:
83:2f:1f:5f:0a:d3:15:00:da:c4:47:8b:be:57:16:8c:fd:b3:
ee:c9:35:08:76:5c:24:c6:41:a3:57:80:98:c9:6a:5f:83:ec:
6d:a4:37:2c:0f:a5:6b:8d:13:ee:46:f6:f9:d5:0f:41:bd:83:
f8:01:74:73:d5:9e:24:c4:7b:06:07:d1:06:44:77:fa:17:05:
90:b3:12:1b:2a:f1:0e:1e:69:75:97:3d:00:a0:24:3a:37:77:
d3:16:f2:56:23:49:da:da:1a:ab:f9:5a:3f:81:28:50:d6:d3:
e2:16:d2:8c:94:dc:58:50:e3:f8:cb:63:4e:43:ae:d0:a5:18:
0c:2a:b1:54:a2:20:ed:23:2c:25:4b:65:85:8e:69:e4:be:2f:
5a:3c:42:fd:b6:e2:26:8e:74:8e:13:29:f8:95:86:61:8c:30:
1a:cc:18:4c:ae:9d:82:fc:9f:bd:66:b5:97:fb:bf:d1:ce:c6:
05:bd:84:3d:4c:21:fe:03:01:28:8c:ac:6b:9a:cc:72:48:50:
ae:cd:54:54:ef:97:e9:b8:b7:2f:72:23:d9:c5:c9:82:35:c5:
b3:fd:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 09:29:40 2024 by rpki-client on console-ams.rpki-client.org