Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UXm2_9Hm6DBFF41MMO7Upyj80Wc.roa
File: UXm2_9Hm6DBFF41MMO7Upyj80Wc.roa (raw, json)
Hash identifier: 0ZXX3wNUUVk+cELLuhGL8YBOk1LvCUC33rheclxzOBA=
Subject key identifier: 51:79:B6:FF:D1:E6:E8:30:45:17:8D:4C:30:EE:D4:A7:28:FC:D1:67
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019116E9C57FB07364524D168F440FA13E1C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UXm2_9Hm6DBFF41MMO7Upyj80Wc.roa
Signing time: Sat 03 Aug 2024 06:25:04 +0000
ROA not before: Sat 03 Aug 2024 06:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.38.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 08:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:16:e9:c5:7f:b0:73:64:52:4d:16:8f:44:0f:a1:3e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 3 06:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5179b6ffd1e6e83045178d4c30eed4a728fcd167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:51:8a:f4:ad:5c:81:a6:81:ea:87:fd:af:db:
44:55:11:cd:85:fe:e2:ed:48:cb:f5:57:0d:d2:7a:
b0:43:b3:dd:fe:09:11:59:5d:9a:df:c3:59:f3:31:
c8:48:9a:5e:1e:b8:b3:6a:7d:c6:28:d0:a1:2a:05:
8d:22:bb:04:d9:09:d4:ef:70:d1:23:25:b1:ae:2b:
10:4f:f9:81:ab:6e:14:5b:c7:ec:52:3c:47:9b:23:
34:d6:e4:9e:29:a8:ea:b4:26:91:02:9a:dd:a3:72:
01:55:a5:3d:5d:85:ea:82:59:d7:77:46:8c:56:1d:
f8:da:ec:2c:49:19:c7:c7:29:60:7b:2e:76:99:cb:
65:51:95:71:a6:25:32:25:7c:35:87:d7:dc:22:64:
f1:b1:1d:44:8d:d9:e2:9f:61:63:2b:14:87:99:d3:
2f:47:0a:09:44:1d:3c:00:36:18:03:db:e2:a4:54:
f5:4a:73:c3:76:90:f5:86:89:7a:6d:04:09:d4:a4:
9d:c0:a8:f1:50:4e:c3:34:da:9d:e8:56:6c:2b:a8:
08:86:68:84:5a:b2:1c:12:d4:ce:8d:0b:cb:31:2d:
0c:0d:da:25:5b:fc:3d:d5:27:1d:a9:85:3f:dc:54:
9d:bf:9d:dc:dd:68:ce:fc:2c:f8:c3:37:62:02:f0:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:79:B6:FF:D1:E6:E8:30:45:17:8D:4C:30:EE:D4:A7:28:FC:D1:67
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UXm2_9Hm6DBFF41MMO7Upyj80Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.50.0/23
31.210.53.0-31.210.54.255
78.135.78.0/24
188.132.170.0/24
188.132.215.0/24
188.132.227.0-188.132.228.255
212.68.36.0/24
212.68.38.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bc:b1:8f:61:c7:d5:18:6c:e1:12:6e:59:d4:12:6d:64:56:
2a:bd:af:e0:c4:f5:12:bb:73:db:cc:b7:4c:63:6a:17:64:c5:
07:48:ff:dc:dc:5d:b8:4f:5f:cd:c8:c5:63:cc:3b:94:1b:cc:
c4:42:76:1d:62:0b:3d:e0:00:01:4f:fb:01:61:d7:84:e9:cb:
db:5f:30:9c:88:2a:1c:83:4d:16:c5:ff:65:cb:b9:87:4a:09:
4b:1f:11:22:57:1d:35:08:ba:57:5b:e6:ae:39:91:ea:a9:6c:
63:e6:df:d4:de:24:77:5b:22:5b:f8:9d:f4:91:f3:ac:3d:42:
fa:99:53:0d:d5:e1:a2:e9:b0:c9:93:25:1c:7c:71:86:36:44:
3d:e4:34:c0:dc:6e:4d:50:dd:92:82:8f:08:8d:f3:aa:a4:a7:
82:a9:d3:11:eb:1f:82:99:63:d2:24:13:e6:22:fc:3f:dd:e1:
a3:7c:19:3b:1b:bc:b5:3b:52:1a:e0:37:c0:14:cd:b5:cd:f6:
0e:a4:a4:44:d1:d3:23:bc:b0:c9:81:21:fe:9a:aa:cb:b9:5c:
37:e8:7a:ba:94:95:41:e5:ab:cf:ac:5a:f0:b3:2a:67:e5:91:
89:3b:23:d1:e2:c5:fb:c2:68:c3:fe:0a:a4:2e:fe:fd:e9:09:
af:dc:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 12:10:14 2024 by rpki-client on console-ams.rpki-client.org