Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/cARxe9jJej44CRUvWrN87G7C7MM.roa
File: cARxe9jJej44CRUvWrN87G7C7MM.roa (raw, json)
Hash identifier: 7TMEkR256ck+5hSDCulXz99IgjeJMCB69lmc/Z4WMOE=
Subject key identifier: 70:04:71:7B:D8:C9:7A:3E:38:09:15:2F:5A:B3:7C:EC:6E:C2:EC:C3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018FDE5014A4C4C5653F20AB7B5F653AD4B9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/cARxe9jJej44CRUvWrN87G7C7MM.roa
Signing time: Mon 03 Jun 2024 13:35:41 +0000
ROA not before: Mon 03 Jun 2024 13:35:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 13:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:50:14:a4:c4:c5:65:3f:20:ab:7b:5f:65:3a:d4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 3 13:35:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7004717bd8c97a3e3809152f5ab37cec6ec2ecc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:11:92:b4:9e:85:78:bc:db:d1:36:94:7f:
b6:c7:b6:f5:8c:16:67:31:9a:b5:77:17:21:83:74:
88:6f:07:c2:8b:45:57:df:62:35:6f:41:0e:93:92:
b6:56:7d:e2:92:b2:1f:f9:09:1f:62:81:f4:2c:c7:
71:be:06:1f:e2:3b:f4:d2:76:94:8b:ad:dc:bd:ac:
01:f3:5b:46:16:4c:bc:cd:06:7d:c0:ee:08:d6:4f:
23:b9:10:1f:b3:e8:35:c1:b9:f7:fe:53:6f:8d:8f:
c4:dc:7e:d8:30:ba:3c:26:93:2d:a9:6c:54:6e:b9:
c6:9e:ac:83:da:5a:81:f7:2b:82:73:42:8a:03:90:
e5:49:d0:8e:d6:d9:27:76:89:82:ef:ca:0e:d2:41:
18:9d:ae:a5:2e:1e:80:3f:7c:cc:ee:53:c5:48:7c:
14:48:91:06:dc:cc:bb:87:db:17:e5:d7:23:d7:b4:
98:13:f7:b6:93:49:7d:80:8b:64:84:a6:2f:dd:ae:
bf:1d:f8:8d:27:94:27:b2:b5:7f:eb:6d:0e:84:76:
dc:3a:ba:dc:10:7b:78:0d:c9:8b:00:93:e1:42:4d:
ca:93:ce:4d:fc:e4:a1:9b:02:b7:18:81:59:0f:32:
15:41:01:e5:60:a7:ff:72:ac:7c:2b:c3:05:9a:31:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:04:71:7B:D8:C9:7A:3E:38:09:15:2F:5A:B3:7C:EC:6E:C2:EC:C3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/cARxe9jJej44CRUvWrN87G7C7MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
77.92.153.0/24
78.135.66.0/24
78.135.92.0/23
185.17.139.0/24
188.132.129.0/24
188.132.153.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.199.0/24
188.132.201.0/24
188.132.206.0/23
188.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
67:ec:12:eb:61:e7:71:2f:65:67:55:78:ff:89:b0:ec:4c:5d:
81:82:ea:5e:8c:56:fc:88:00:65:c3:df:b1:77:88:84:f8:f1:
13:55:cf:1f:11:87:05:39:55:f2:40:5e:9d:6c:e1:60:b9:57:
97:29:6e:38:11:bc:9f:3c:88:36:16:a7:0a:fd:57:15:8d:1c:
7c:c9:f6:1a:6d:ae:0e:2c:c3:90:20:16:a5:fd:47:f0:43:bf:
6c:0d:fc:5e:63:bb:50:d6:2e:b5:f9:41:00:90:bf:4c:2f:7d:
4e:42:a5:41:11:f4:e9:e3:6e:11:c2:2a:a5:af:da:2c:76:51:
10:79:50:ca:4f:ab:0f:76:28:f4:40:5e:34:56:1f:e5:08:5e:
ab:02:08:05:e3:75:63:7b:b4:70:68:6f:a2:dc:8d:ac:cf:13:
78:ff:19:92:74:09:19:e2:4e:1c:de:ce:66:11:0e:d8:5c:7f:
4e:99:72:27:45:db:20:4a:2e:c2:38:6e:6b:8c:8b:56:cb:21:
cf:81:55:d7:9f:2d:a6:92:ff:e5:53:05:e2:2e:cb:d5:83:a3:
c7:ea:ba:cb:2d:4c:15:e8:ce:41:63:92:fa:b8:91:84:7a:65:
1d:c8:96:40:5d:f6:e8:29:2d:ad:e2:f2:5e:f8:92:b0:4e:a8:
77:f1:b3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 16:01:27 2024 by rpki-client on console-ams.rpki-client.org