Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iZ-N8hgJB9UZSpOBrTWvo8D2SwY.roa
File: iZ-N8hgJB9UZSpOBrTWvo8D2SwY.roa (raw, json)
Hash identifier: gMGVfHBrLJRaB++TXEaqvOzKedv+oZERG5aYnvx+dPA=
Subject key identifier: 89:9F:8D:F2:18:09:07:D5:19:4A:93:81:AD:35:AF:A3:C0:F6:4B:06
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018F171E9EB67249DD4F334A185D9ADDC8D3
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iZ-N8hgJB9UZSpOBrTWvo8D2SwY.roa
Signing time: Thu 25 Apr 2024 21:17:13 +0000
ROA not before: Thu 25 Apr 2024 21:17:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207983
IP address blocks: 31.210.54.0/24 maxlen: 24
78.135.109.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 14:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:17:1e:9e:b6:72:49:dd:4f:33:4a:18:5d:9a:dd:c8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 25 21:17:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=899f8df2180907d5194a9381ad35afa3c0f64b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:8c:ce:f6:7f:e0:76:c6:db:12:34:3c:6a:
84:85:7d:c8:86:1f:f0:7b:69:b6:6a:a7:81:b6:c9:
65:2d:cf:a6:39:42:21:5d:5c:b1:f3:6a:de:81:0d:
a4:e8:98:54:42:a2:83:38:0d:fd:bb:9d:bc:0c:02:
77:6f:24:df:ec:57:48:9b:b5:de:3f:34:97:c9:3d:
d6:27:27:76:04:55:9e:b3:62:3a:62:20:ef:d9:42:
48:8c:43:e3:0e:76:90:f3:d5:05:79:e6:96:b1:9a:
31:46:5b:9d:35:e1:67:d1:36:7f:c5:4c:ce:75:90:
aa:a6:71:24:4f:8b:df:f6:e4:86:d2:4b:45:fd:3c:
41:2c:87:b1:77:d4:40:8f:1f:d8:69:25:fa:1d:7e:
01:da:e3:71:88:88:e6:2d:3e:05:a4:7f:cd:f4:cc:
8d:3c:3f:c5:90:04:14:cc:f6:71:40:c7:4a:9f:3c:
7a:84:f6:0e:d3:93:ec:b9:25:43:1f:28:73:ac:00:
9c:82:93:d2:29:b8:6c:fb:bf:c5:ac:22:6d:27:f6:
d6:db:af:64:43:55:13:ad:f1:99:b0:61:b4:1f:44:
fb:ca:17:76:fe:d9:b9:72:a1:eb:d0:bc:36:aa:8f:
8f:3d:66:c5:35:88:14:02:ec:95:55:f6:42:62:4e:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:8D:F2:18:09:07:D5:19:4A:93:81:AD:35:AF:A3:C0:F6:4B:06
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iZ-N8hgJB9UZSpOBrTWvo8D2SwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.54.0/24
78.135.109.0/24
188.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7d:f9:15:1d:7e:e6:06:0b:1c:1f:29:e7:30:a4:48:f4:c9:
7e:de:84:00:85:c9:9f:d7:83:70:f3:cd:88:c3:50:46:6c:a4:
52:06:3e:52:8d:27:99:bf:70:1a:79:3f:3d:d0:f3:2c:07:da:
13:70:6c:77:0b:ce:18:48:50:21:47:fa:8f:21:57:84:9b:74:
dd:9d:d2:9a:79:ff:18:9a:6e:f1:3c:8b:6c:d3:20:40:6e:55:
ad:1d:6d:a9:9e:d5:78:4b:0b:d5:61:fd:bd:b0:49:51:19:49:
8c:cf:74:58:d5:a1:a4:ad:8c:77:47:f9:3b:6d:d6:97:44:f7:
7b:e3:6f:fc:fe:84:58:cf:db:eb:c6:21:d8:f0:4e:ba:a6:76:
b4:2e:58:36:58:af:b4:4a:65:d4:77:cb:92:3c:35:0a:fd:20:
39:41:08:b1:8a:3c:f3:0f:1e:3d:cd:a8:ff:e0:37:47:a2:4a:
bc:78:1d:55:12:b3:b9:3b:1d:64:cc:29:fa:69:c5:88:50:12:
5e:9c:ec:bf:29:28:19:78:15:bd:e3:6c:04:eb:5b:c4:dd:23:
8d:97:e5:3d:50:53:0e:92:ba:ea:82:ef:a1:6f:c9:d9:07:9f:
aa:25:9e:a1:2b:ca:a8:47:6e:fa:38:5e:ba:3d:69:d4:54:88:
cc:fa:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org