Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fN2RqYviQV18bOAdmkTG1L43S8Y.roa
File: fN2RqYviQV18bOAdmkTG1L43S8Y.roa (raw, json)
Hash identifier: ahB3jOmim2jbWhyZObbjevy58XPrtfmf924j4iIaTfs=
Subject key identifier: 7C:DD:91:A9:8B:E2:41:5D:7C:6C:E0:1D:9A:44:C6:D4:BE:37:4B:C6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018FBFC7558939C11792D43F72A33A2BE6D4
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fN2RqYviQV18bOAdmkTG1L43S8Y.roa
Signing time: Tue 28 May 2024 15:17:42 +0000
ROA not before: Tue 28 May 2024 15:17:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 13:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:c7:55:89:39:c1:17:92:d4:3f:72:a3:3a:2b:e6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 28 15:17:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cdd91a98be2415d7c6ce01d9a44c6d4be374bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:84:14:95:10:be:84:b5:d2:5d:83:56:a6:
c7:1d:da:c3:e4:b8:a0:b8:1b:7f:52:57:e8:18:9a:
fb:fa:76:2d:28:0a:7c:ba:ac:d5:33:85:92:ac:15:
37:b6:21:50:a9:76:cb:fe:e0:eb:70:9a:45:69:c7:
79:63:f4:f2:e9:50:9a:a8:8d:0d:14:91:68:0c:bf:
52:e2:f1:a0:f7:ed:ac:eb:45:52:24:9c:a8:7b:d2:
d3:16:dd:9a:ea:3f:33:16:74:ba:e3:48:09:76:06:
15:3b:e1:14:cc:81:f2:7b:17:bd:9d:c0:83:72:33:
11:64:67:e0:64:84:25:09:88:d6:07:6f:ee:95:a4:
41:6d:e9:f4:cb:aa:c0:10:a6:50:b5:58:7c:51:ed:
81:52:c1:a0:e5:b0:ee:a6:8f:1c:a7:48:3a:16:17:
8b:29:01:05:c9:7b:ef:4e:17:f1:f0:d4:87:57:86:
a1:18:96:cd:77:7e:da:4c:e0:e3:a1:8e:9c:a8:50:
f8:9e:53:25:02:1b:56:6a:57:6b:a9:91:86:74:63:
a3:9b:b6:22:1c:ba:d5:e1:09:6c:f4:29:4d:d2:ee:
0f:2d:ed:13:e3:b0:ff:4e:db:fe:e7:05:a0:1d:00:
e4:73:e1:12:62:16:0c:66:cd:d3:74:22:1c:6b:df:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DD:91:A9:8B:E2:41:5D:7C:6C:E0:1D:9A:44:C6:D4:BE:37:4B:C6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fN2RqYviQV18bOAdmkTG1L43S8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
77.92.153.0/24
78.135.66.0/24
185.17.139.0/24
188.132.129.0/24
188.132.153.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.199.0/24
188.132.201.0/24
188.132.206.0/23
188.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:c0:0f:d9:5c:06:b8:76:ce:34:1f:1b:e9:0d:8c:d8:86:91:
d7:47:e3:80:5f:1e:07:7e:cd:bb:8d:1a:d8:78:26:58:d1:a8:
9a:2c:1c:20:5e:aa:49:6c:ab:85:01:d2:e2:04:80:05:89:3c:
d6:d4:47:f6:ce:d7:2b:2b:9c:68:a5:38:de:53:8c:d2:d2:cd:
6c:5b:28:23:f2:ac:86:09:21:41:7f:10:b6:e2:b9:02:b0:68:
e9:ab:d2:de:54:d6:20:c2:7c:f1:fc:8e:91:99:6b:72:bc:b9:
ad:25:72:45:0b:74:7f:f0:ad:0b:c0:5f:9f:b3:96:e7:f9:46:
39:2b:4a:6c:d0:2e:7e:33:59:20:10:52:33:4a:ef:fe:84:15:
4f:ae:b0:95:c3:92:a4:ad:fc:82:d8:48:03:00:ba:ad:79:57:
ca:64:87:fe:b5:86:29:db:19:b8:3d:41:ac:64:6d:18:df:7f:
b2:e2:2a:98:51:b1:c2:18:1a:c7:74:af:86:84:e2:17:2f:9e:
e1:5d:f7:2c:e1:a8:b8:fb:47:90:ca:99:3c:88:52:a4:04:09:
7e:6c:ed:4c:99:92:e5:c3:25:86:b9:89:f6:cb:b2:c3:ca:eb:
81:c2:fb:19:f3:12:50:2e:1d:47:70:64:d0:db:da:09:6a:12:
61:e2:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org