Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WCQiB5ef1_jiFlEVa0Qlc8RPZNQ.roa
File: WCQiB5ef1_jiFlEVa0Qlc8RPZNQ.roa (raw, json)
Hash identifier: IC0S1A7aEcwr6TBx9JS2vtyrafLSDBDFz0VoktjP4lQ=
Subject key identifier: 58:24:22:07:97:9F:D7:F8:E2:16:51:15:6B:44:25:73:C4:4F:64:D4
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018EAF06120BA59787DCD199E3961730A0E8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WCQiB5ef1_jiFlEVa0Qlc8RPZNQ.roa
Signing time: Fri 05 Apr 2024 16:09:54 +0000
ROA not before: Fri 05 Apr 2024 16:09:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.208.0/24 maxlen: 24
188.132.211.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.38.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 21:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:af:06:12:0b:a5:97:87:dc:d1:99:e3:96:17:30:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 5 16:09:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58242207979fd7f8e21651156b442573c44f64d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:ce:5d:95:56:0d:e8:cb:5f:49:3b:28:db:
00:e9:f8:c8:a8:b7:f4:b0:05:50:c6:3c:f1:e3:ff:
4f:e7:9f:65:87:1f:fa:9b:35:8c:3c:e0:e7:d0:db:
b4:f0:2c:eb:d6:d0:0a:d1:ed:77:e5:4a:3a:66:2c:
75:59:26:95:07:51:67:9a:01:44:4b:99:5d:eb:eb:
70:80:17:02:b7:74:46:a3:12:52:a0:90:fb:b3:17:
31:8f:d9:33:10:41:17:97:06:e9:ef:1a:21:ec:b3:
07:06:4d:06:71:b2:e2:60:11:fe:ae:2b:6f:d0:ab:
db:97:f5:99:14:0c:47:34:fc:c2:c0:25:cf:63:f5:
ea:2a:d6:9b:7c:61:55:7a:c1:30:a6:0e:5c:48:7b:
69:6d:c0:e3:15:ea:fa:53:bf:0d:ee:82:95:ae:d5:
52:e2:b5:30:0a:de:78:af:99:84:b4:c4:56:97:25:
c8:44:5f:5f:39:be:03:71:79:e4:21:2c:1c:ad:c9:
fb:da:b0:20:30:b8:9c:18:53:1f:d6:24:91:4c:c1:
6a:8f:5b:2b:6f:31:c3:4a:bc:0c:fd:a1:ee:1f:fe:
c0:37:d0:98:b7:d0:fb:93:91:b5:be:ae:8b:26:8c:
9a:4d:1b:4f:de:d9:a6:27:8f:a1:27:6b:6f:d4:28:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:22:07:97:9F:D7:F8:E2:16:51:15:6B:44:25:73:C4:4F:64:D4
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WCQiB5ef1_jiFlEVa0Qlc8RPZNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.50.0/23
31.210.53.0/24
78.135.78.0/24
188.132.170.0/24
188.132.208.0/24
188.132.211.0/24
188.132.215.0/24
188.132.218.0/24
188.132.227.0-188.132.228.255
212.68.36.0/24
212.68.38.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8f:42:7b:e9:ae:5b:3f:96:11:78:03:da:d7:55:b2:60:93:
e6:52:66:28:0d:b1:29:32:f3:ac:44:68:d1:6c:9d:69:5b:99:
47:e4:4f:ff:dd:a7:8f:e9:c9:c7:e2:d7:48:e4:ac:83:78:f1:
c9:64:c0:c6:de:32:14:25:cd:10:fe:f2:54:48:20:9f:e9:d6:
61:40:02:81:7f:cf:d8:88:30:e7:09:c5:9c:cd:ff:f7:79:4b:
5e:f8:c6:cf:9d:0c:35:4c:55:5f:47:38:eb:af:7d:e6:9c:c9:
e5:ae:ab:22:12:15:6d:09:94:7b:9b:21:17:3a:f8:e5:ca:79:
66:d1:a2:37:43:2b:05:9d:a8:ad:c9:58:7e:55:65:61:04:9a:
28:7e:61:35:e9:11:19:b3:d0:3f:c5:93:8d:cb:7d:72:22:c4:
0b:fa:6f:6a:91:6f:c0:ba:13:6d:c8:2e:ea:ab:76:4f:8b:9e:
e7:4e:9c:69:ee:ea:25:88:d6:52:b2:07:bd:73:4e:22:c4:b2:
d5:3c:f8:81:38:a1:c3:61:90:db:fb:ae:f9:d3:72:fa:95:89:
af:65:54:17:82:62:05:03:f1:2e:5f:b2:e3:11:62:fd:6f:fe:
1b:d2:a3:a8:fe:88:f1:0a:cc:e2:d9:07:9b:b5:bc:6f:5d:af:
05:19:1c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org