Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vjeUoS21Uyun-sMUvWc1yyuut8s.roa
File: vjeUoS21Uyun-sMUvWc1yyuut8s.roa (raw, json)
Hash identifier: I2zBLeinavfBnypQ2RxfZpCstP548UYbpIn5sMARZb0=
Subject key identifier: BE:37:94:A1:2D:B5:53:2B:A7:FA:C3:14:BD:67:35:CB:2B:AE:B7:CB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7CDCA67CE446156CA353EEA0A67D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vjeUoS21Uyun-sMUvWc1yyuut8s.roa
Signing time: Tue 02 Jan 2024 06:32:18 +0000
ROA not before: Tue 02 Jan 2024 06:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 188.132.129.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 16:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7c:dc:a6:7c:e4:46:15:6c:a3:53:ee:a0:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be3794a12db5532ba7fac314bd6735cb2baeb7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:42:fc:fd:49:e4:70:f3:b9:b3:e4:d5:f0:
4f:1d:70:59:4a:3a:f0:40:45:97:de:69:bc:80:bf:
93:9b:0f:ba:7c:02:ba:db:82:e4:9b:a1:84:22:ce:
61:ab:e8:1e:d3:31:64:03:58:7b:d3:62:e7:73:19:
e3:13:84:ae:69:f7:69:c1:91:7a:9b:a9:83:ec:2b:
60:8f:e5:46:f1:fa:b3:5f:b0:a5:89:17:96:fb:65:
69:3c:ce:18:87:51:c9:b3:32:1d:e1:84:ca:d1:81:
57:14:cb:7b:f9:18:6a:71:fe:f9:de:6a:5f:2a:44:
0b:c3:a2:dd:73:15:bf:ca:c6:94:2e:a6:18:98:6c:
31:14:36:ad:5b:67:99:4b:03:3a:ed:09:43:35:3e:
d1:ed:75:4d:00:8d:75:b4:85:d1:79:a9:4a:34:bc:
b6:23:10:e2:2f:6b:8a:76:a0:29:e2:25:71:02:02:
f7:78:19:1b:05:44:92:b3:86:50:44:65:0c:dd:a8:
3d:fd:26:1a:a0:f3:e8:5a:68:5a:10:a3:5e:a1:6e:
b4:97:1b:56:9f:ae:22:cd:05:d1:63:83:e7:1b:8d:
fa:77:c4:e2:06:49:da:96:04:70:d6:30:c6:1c:6b:
87:b9:f2:b5:5e:5a:77:88:da:0e:be:9a:a3:ce:1a:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:94:A1:2D:B5:53:2B:A7:FA:C3:14:BD:67:35:CB:2B:AE:B7:CB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vjeUoS21Uyun-sMUvWc1yyuut8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.145.0-77.92.146.255
77.92.153.0/24
78.135.66.0/24
188.132.129.0/24
188.132.153.0/24
188.132.168.0/24
188.132.185.0-188.132.186.255
188.132.201.0/24
Signature Algorithm: sha256WithRSAEncryption
66:14:e5:35:66:19:1c:b4:55:83:d4:f4:1f:ef:55:2d:bf:61:
41:45:54:ee:4c:60:67:82:17:c8:ef:97:5a:01:63:2a:5a:06:
d1:32:8e:17:ff:b0:16:a4:21:57:1c:b4:67:47:fe:4a:a4:fd:
27:d9:06:b6:79:cd:b1:5e:43:29:be:e2:45:69:63:1c:25:36:
f3:d2:06:29:c5:e4:6c:10:21:9c:e3:01:4d:d2:df:73:48:d4:
40:e3:92:10:33:d5:5f:f2:f3:91:b9:40:7f:11:04:1d:de:2f:
84:64:32:5c:a6:33:89:e5:f4:ad:9c:ac:ce:62:9f:df:89:9a:
06:be:1a:53:08:23:43:8c:4b:73:e7:54:f3:82:6f:1f:cb:9d:
39:ff:b7:f1:58:bf:6e:e1:8e:e7:da:c0:75:30:63:34:81:f6:
8b:71:da:77:83:b2:73:d7:b9:88:c4:2c:e1:23:57:e1:39:30:
81:49:da:54:f0:18:03:eb:14:46:b8:b6:53:b0:0b:f0:19:d7:
6c:21:7f:5b:f2:40:e0:62:7f:27:31:c4:c4:4f:38:d9:18:07:
04:a6:f3:78:3b:6c:e2:93:76:cf:39:1b:d6:21:86:48:cc:aa:
74:e9:90:a5:3c:50:f0:e5:88:68:9c:5f:ae:5c:4f:40:19:0e:
11:a8:a3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org