Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UoLJhgNmTansCt9e0k7RfXkWcMk.roa
File: UoLJhgNmTansCt9e0k7RfXkWcMk.roa (raw, json)
Hash identifier: kEPanoXkR0D7X4QgqsmGlgJhW3CKPbqc+4HCHeoxF+M=
Subject key identifier: 52:82:C9:86:03:66:4D:A9:EC:0A:DF:5E:D2:4E:D1:7D:79:16:70:C9
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DD356F6AA7A38D12EAF5D7B010B824884
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UoLJhgNmTansCt9e0k7RfXkWcMk.roa
Signing time: Fri 23 Feb 2024 00:21:48 +0000
ROA not before: Fri 23 Feb 2024 00:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.49.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
77.92.144.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.208.0/24 maxlen: 24
188.132.211.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
188.132.225.0/24 maxlen: 24
188.132.226.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
188.132.230.0/24 maxlen: 24
188.132.231.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.38.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 16:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d3:56:f6:aa:7a:38:d1:2e:af:5d:7b:01:0b:82:48:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 23 00:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5282c98603664da9ec0adf5ed24ed17d791670c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:07:6c:90:85:b1:9f:87:76:36:fb:73:59:
21:45:95:63:d6:0a:48:e1:50:f9:c4:63:9e:78:8f:
7d:a9:37:02:c4:1f:dc:db:bb:5a:02:42:e3:8b:37:
cf:f4:4e:7b:16:84:78:88:df:dc:25:f1:39:80:ba:
a4:36:95:54:01:00:29:85:ed:9d:8f:5c:5b:d3:eb:
ce:eb:67:0d:87:70:37:bd:80:ac:b0:f0:6f:b1:86:
92:24:ba:d5:e7:87:49:a7:b9:2e:da:36:70:6a:bf:
e9:7d:45:66:f3:8e:88:a6:88:7b:60:ec:33:db:55:
b0:8b:d2:e5:c0:75:55:23:b2:3f:f2:f1:be:06:76:
53:19:49:b8:05:20:19:a8:78:8c:d1:44:97:84:a4:
60:52:e8:d9:c5:fb:3a:6d:34:77:2e:6b:11:0c:50:
da:95:74:79:e3:13:0b:79:76:36:d9:bd:b9:67:3e:
5e:89:85:10:7c:4a:7b:f9:5f:22:da:e6:cd:96:df:
7b:b7:d8:de:16:94:12:d9:6f:f5:32:69:33:51:42:
9f:77:d1:8f:45:92:ac:62:1c:68:ea:fe:26:5a:ae:
43:ee:cc:99:50:13:c9:5c:e3:7a:97:db:f5:b2:59:
25:15:f2:6e:b5:d2:ae:18:6a:87:e2:0c:de:40:d8:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:C9:86:03:66:4D:A9:EC:0A:DF:5E:D2:4E:D1:7D:79:16:70:C9
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UoLJhgNmTansCt9e0k7RfXkWcMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.49.0-31.210.51.255
31.210.53.0/24
77.92.144.0/24
78.135.78.0/24
188.132.170.0/24
188.132.208.0/24
188.132.211.0-188.132.213.255
188.132.215.0/24
188.132.217.0-188.132.218.255
188.132.225.0-188.132.228.255
188.132.230.0/23
188.132.234.0/24
212.68.36.0/24
212.68.38.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:35:42:8c:82:58:32:7d:55:e9:0e:d2:1a:36:fc:3c:c4:8f:
f5:a6:63:1b:e4:ec:1c:cf:22:dd:39:b0:ed:53:f8:d9:8a:fe:
b3:59:e6:35:42:2a:e0:3f:9a:f3:a0:d6:b9:1b:26:2a:9c:8b:
98:61:96:73:28:a5:94:88:10:6e:9f:bb:d7:32:ad:b4:f8:fa:
31:4c:8b:33:1e:47:44:5a:74:9b:97:0e:59:89:98:33:b8:ce:
66:fa:5c:5a:45:73:56:fa:cb:55:21:54:08:13:dc:c8:56:6c:
31:8d:5c:9b:10:ac:55:ad:ec:8f:24:97:e7:ce:16:79:42:cc:
a1:a5:b0:96:95:15:17:5c:a9:06:5e:e2:a2:1f:d7:f0:a7:cb:
e5:78:55:f8:de:83:0b:8d:5c:dc:cf:4b:71:07:88:a5:5e:cd:
df:d2:a2:ba:53:a4:e2:c0:36:6e:3b:7c:71:99:5e:a2:41:e3:
50:f9:b7:00:5f:03:c8:17:a8:b9:ec:13:3a:1f:3c:59:42:d7:
0c:62:5a:0f:02:56:64:be:2c:da:17:d5:5d:9c:aa:4f:a7:73:
d9:0d:4f:b2:a5:0a:d9:11:e3:61:0d:2f:49:9a:2f:99:c3:bc:
5c:0b:64:2e:d1:7f:fd:e4:8e:3e:71:bf:4b:49:e5:6d:44:93:
c7:6e:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org