Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nmae3GroDr0kohjsCRpNOduqZUc.roa
File: nmae3GroDr0kohjsCRpNOduqZUc.roa (raw, json)
Hash identifier: sgWAY1+9S1ld9GTT0Jt8YSIBAKSLEmszer4Ieuiq9AA=
Subject key identifier: 9E:66:9E:DC:6A:E8:0E:BD:24:A2:18:EC:09:1A:4D:39:DB:AA:65:47
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DB28A42E4A0D5CFA864BBEF70A51341E3
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nmae3GroDr0kohjsCRpNOduqZUc.roa
Signing time: Fri 16 Feb 2024 15:30:21 +0000
ROA not before: Fri 16 Feb 2024 15:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.49.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
77.92.144.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.208.0/24 maxlen: 24
188.132.211.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
188.132.225.0/24 maxlen: 24
188.132.226.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
188.132.230.0/24 maxlen: 24
188.132.231.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.241.0/24 maxlen: 24
188.132.250.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.38.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 00:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:8a:42:e4:a0:d5:cf:a8:64:bb:ef:70:a5:13:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 16 15:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e669edc6ae80ebd24a218ec091a4d39dbaa6547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:38:51:86:37:d7:43:48:89:7d:4a:0b:7c:
b5:53:79:12:40:80:d7:17:7d:7c:b0:4a:11:4b:01:
1c:2e:6c:5a:02:0e:36:27:87:68:c5:8f:5b:0f:87:
c1:79:24:1f:4c:6f:24:ce:db:ea:13:2c:cd:14:63:
a1:a8:fd:f6:e4:eb:3f:05:7f:b4:be:5e:49:23:6f:
66:76:a9:97:d0:c6:a5:d6:28:bd:cc:5f:76:2f:e8:
3b:91:c8:c6:be:63:4b:f1:23:0a:ec:22:0e:e6:a4:
5f:b4:52:9a:26:3b:3d:c9:ae:d0:4a:e2:f8:0a:cb:
3e:0e:cd:de:a2:70:02:db:ac:ce:db:03:30:d4:c2:
8f:2d:de:f5:80:d1:c4:72:b4:e6:c1:d5:ee:ef:63:
cf:45:bd:0a:95:5d:7a:ba:6e:f9:f9:9a:cd:7a:4d:
45:0e:1e:dd:10:1a:70:bc:f6:71:26:de:ec:fe:7e:
b1:b6:f0:30:40:3f:62:ad:70:81:60:f5:31:74:8a:
83:a5:f3:88:d0:cf:ed:e7:e0:12:d9:91:d5:7f:5e:
b8:fb:05:0a:6c:e5:30:1e:1b:a1:38:ef:66:f7:19:
b9:ce:b2:01:c0:61:39:6a:db:41:9a:82:ff:9c:9a:
16:7c:ee:cc:87:73:22:0a:8b:8c:34:93:59:41:12:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:9E:DC:6A:E8:0E:BD:24:A2:18:EC:09:1A:4D:39:DB:AA:65:47
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nmae3GroDr0kohjsCRpNOduqZUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.49.0-31.210.51.255
31.210.53.0/24
77.92.144.0/24
78.135.78.0/24
188.132.170.0/24
188.132.208.0/24
188.132.211.0-188.132.213.255
188.132.215.0/24
188.132.217.0-188.132.218.255
188.132.225.0-188.132.228.255
188.132.230.0/23
188.132.234.0/24
188.132.241.0/24
188.132.250.0/23
212.68.36.0/24
212.68.38.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:93:e7:91:b9:d6:61:a0:1e:76:37:73:23:20:00:c7:a2:e9:
f2:9b:4d:db:1e:29:19:b2:01:f2:41:fb:2b:13:f7:33:1a:e6:
50:cb:b1:ad:83:ce:63:a3:da:99:80:e6:41:15:33:81:84:6f:
23:be:c3:5d:c4:5e:e3:ed:ed:07:55:5e:de:df:7f:5b:e1:50:
5e:f9:5c:fc:45:0b:09:ab:45:13:bc:08:df:3b:39:2d:b6:db:
73:c9:99:d0:97:a5:37:4a:01:ed:7d:13:99:05:53:7c:ca:dd:
37:19:63:b8:b9:d8:26:b8:f9:2a:57:b6:b0:86:e4:31:cd:2a:
b6:02:f5:27:1d:f3:ea:2c:f6:3c:2a:e5:3e:2d:52:dd:a4:12:
f3:6e:b4:3c:0c:5d:a6:ce:b9:75:b1:79:ee:46:7a:f1:a0:22:
0f:0e:cb:8e:52:6a:30:14:ac:0b:46:a7:c8:dc:a7:21:d4:9e:
de:0d:dd:12:c8:a2:4e:4f:b2:b5:f6:38:56:a4:cb:df:55:fc:
13:b8:e2:ce:e7:89:b2:97:e3:c2:b0:8f:0d:cb:fa:97:07:00:
57:b3:79:06:f8:db:10:99:10:9b:82:47:08:66:5d:1e:cb:80:
40:42:c1:68:51:93:fb:b1:38:c0:7a:7c:4c:58:d9:ae:b8:11:
c4:c4:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org