Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e_QMXK-YYCBbKDrzmiTswhtCflo.roa
File: e_QMXK-YYCBbKDrzmiTswhtCflo.roa (raw, json)
Hash identifier: C5DTXhuqk3wlKvV4yLZxd+dFivYpARKY2+IJ6qOtgJ4=
Subject key identifier: 7B:F4:0C:5C:AF:98:60:20:5B:28:3A:F3:9A:24:EC:C2:1B:42:7E:5A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019092A2B2AB650D8CF6941F39B1743E4E01
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e_QMXK-YYCBbKDrzmiTswhtCflo.roa
Signing time: Mon 08 Jul 2024 13:57:34 +0000
ROA not before: Mon 08 Jul 2024 13:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 10:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:a2:b2:ab:65:0d:8c:f6:94:1f:39:b1:74:3e:4e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 8 13:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bf40c5caf9860205b283af39a24ecc21b427e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:af:c0:a9:79:4b:f1:9e:58:6f:89:87:58:
d0:fb:23:1d:07:9a:ab:4f:09:a8:0c:bb:45:82:52:
88:8c:1c:92:46:c9:95:2d:b8:00:84:89:cb:bd:95:
c3:dd:24:38:b8:c5:5f:1e:1e:1a:f8:69:59:d6:aa:
12:ef:c6:fd:f8:0b:4e:33:9c:e2:37:eb:7f:7b:3d:
cd:c1:0e:68:31:e2:50:7c:9d:2f:93:d8:63:4a:27:
30:de:7d:67:e5:63:04:74:7f:66:4e:03:99:da:b6:
15:f6:54:84:38:0c:f0:f3:cf:6d:65:9a:26:f6:3f:
e2:ef:b7:d7:1c:5d:16:55:26:fa:65:9b:08:87:68:
56:28:a2:2d:ad:a7:e5:f2:ea:c6:17:a8:e3:0d:38:
d6:f4:39:7f:bb:27:e5:89:7a:40:88:78:ad:23:b4:
86:3a:9d:22:90:17:d2:8f:b5:b0:9b:bb:1d:c1:e0:
34:16:1c:97:d0:d0:71:e1:4d:63:5c:3d:67:ad:3d:
ae:a1:42:aa:69:a4:92:ab:e9:a8:60:13:eb:c1:13:
28:5e:d3:f7:aa:03:ee:02:32:b9:85:3d:21:43:45:
88:7a:8f:ce:69:a6:e7:7e:9c:50:a3:f0:46:ed:c0:
de:39:d0:43:bd:3d:b5:d3:75:55:d2:77:91:ba:ac:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:0C:5C:AF:98:60:20:5B:28:3A:F3:9A:24:EC:C2:1B:42:7E:5A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e_QMXK-YYCBbKDrzmiTswhtCflo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.92.0/23
185.17.139.0/24
188.132.129.0/24
188.132.153.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.199.0/24
188.132.201.0/24
188.132.206.0/23
188.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
34:6d:1c:de:6e:c5:5a:1e:f2:90:34:56:ad:6e:ee:cf:1a:d9:
e9:64:82:2c:47:49:3e:11:c7:61:a1:d9:36:b3:bf:68:c6:a9:
67:f5:45:5c:e1:6c:7a:06:27:cf:75:96:f1:af:e3:a2:b6:33:
56:af:d9:19:1c:94:3e:60:c8:15:fe:ae:02:2b:00:63:d2:19:
59:92:6e:d4:51:25:27:11:a6:fd:9f:e5:2a:48:16:f8:da:10:
c5:df:ce:8d:02:7a:94:36:c1:33:5b:d3:8b:f3:7d:f1:d9:8d:
0a:02:5d:c6:f0:4d:4e:ba:cc:11:d5:28:3d:ba:22:0d:c7:ea:
ff:d0:15:b0:bf:73:b5:90:21:91:1b:fe:06:09:fb:d8:9b:35:
0c:96:ac:aa:cd:a4:5f:ec:d4:f3:07:82:23:f9:f7:64:27:3f:
13:2b:93:3f:c7:b9:e2:17:b4:42:07:b9:86:33:99:ae:2f:1e:
55:7b:f2:f6:17:70:d6:87:55:1d:b5:14:6f:e4:cf:64:e9:17:
fe:40:b5:08:82:72:85:7d:cd:3d:00:df:fd:62:bf:9a:04:8b:
bc:16:d7:67:4a:c6:db:0a:5c:e3:92:31:1a:10:39:e8:ad:25:
a1:38:bd:c1:db:61:24:5a:bc:fc:d2:e0:2e:cd:c4:61:62:90:
c4:52:bf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 12:09:38 2024 by rpki-client on console-fra.rpki-client.org