Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jO1XGAXo9RUku8BplKZNxUyxsVg.roa
File: jO1XGAXo9RUku8BplKZNxUyxsVg.roa (raw, json)
Hash identifier: A2+MMlHkg85of03+hVoHJAlxFnedlsRtP2lkt58dlR4=
Subject key identifier: 8C:ED:57:18:05:E8:F5:15:24:BB:C0:69:94:A6:4D:C5:4C:B1:B1:58
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095529440CBEC972DE9E0D69A614FB3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jO1XGAXo9RUku8BplKZNxUyxsVg.roa
Signing time: Mon 02 Jan 2023 03:45:12 +0000
ROA not before: Mon 02 Jan 2023 03:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51685
IP address blocks: 31.148.136.0/23 maxlen: 23
31.148.138.0/23 maxlen: 23
31.148.136.0/22 maxlen: 22
93.170.232.0/22 maxlen: 24
93.170.232.0/23 maxlen: 23
93.170.234.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Jul 2023 11:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:52:94:40:cb:ec:97:2d:e9:e0:d6:9a:61:4f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ced571805e8f51524bbc06994a64dc54cb1b158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:31:f0:6d:73:f1:0e:3a:e4:48:c5:5f:15:
99:bc:24:41:2d:06:7e:5e:b7:28:2c:5e:d4:98:11:
02:7c:d5:5d:82:71:98:95:df:12:02:26:74:72:b9:
52:02:6f:2b:e3:7f:04:ac:ab:21:a8:28:0f:dc:89:
e6:e9:c6:4e:f9:d1:e8:5b:7a:50:e5:60:1b:60:c8:
9f:62:06:cb:d8:09:2a:7d:46:5f:87:cb:03:63:20:
99:a2:53:b0:97:c5:b4:cd:55:f2:f0:bc:dc:84:eb:
c2:a8:40:a0:e3:69:81:cc:1e:93:f7:de:c3:61:23:
cb:b9:91:a2:b7:88:5c:a5:cf:41:68:a6:ec:b9:9c:
fe:de:0d:d3:cd:b8:f9:1f:f0:51:4c:d5:76:b5:67:
cf:ef:ca:91:4c:bf:a2:c3:53:5a:57:f3:b5:d4:93:
a7:d9:3c:76:f6:68:3d:d8:b3:d1:5c:7b:e3:57:f1:
79:5a:4a:5b:5a:ca:87:14:d1:0a:de:88:1a:e6:c6:
ca:16:14:b1:ef:00:dc:0b:ce:7d:03:f9:e5:a6:a1:
1e:21:8a:76:3f:eb:46:83:79:34:30:b8:9d:7d:38:
9a:a5:8c:30:5b:56:79:3d:21:0a:28:f8:15:2a:7d:
d3:b3:e7:9f:cb:18:c1:d1:14:3b:44:89:22:d9:7f:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:57:18:05:E8:F5:15:24:BB:C0:69:94:A6:4D:C5:4C:B1:B1:58
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jO1XGAXo9RUku8BplKZNxUyxsVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.136.0/22
93.170.232.0/22
Signature Algorithm: sha256WithRSAEncryption
43:a7:18:ef:3f:b7:61:91:9f:a6:79:a8:39:41:61:75:34:0c:
f3:50:75:20:22:8a:a2:b5:a7:5c:d9:28:7f:64:b6:e2:cc:f5:
40:3e:81:2c:03:3b:6c:e7:fd:b5:51:a9:83:93:87:1e:25:45:
8b:9c:e7:ac:0c:78:7d:85:4a:99:f6:51:f7:58:e4:ef:07:81:
d2:e0:73:96:01:f3:a6:b8:33:de:35:1f:7f:bd:eb:6a:59:e2:
33:3d:3d:3f:37:c6:95:47:89:05:c9:0f:16:8d:65:5a:ae:ca:
e6:ee:ac:c4:11:c0:27:da:37:4b:0d:01:a4:ec:02:dd:62:fe:
48:e5:25:67:cb:15:96:e2:89:46:c4:d8:93:04:bd:93:95:56:
b7:e4:a5:ed:38:a8:bb:df:ab:eb:73:3c:1e:f7:a6:96:07:14:
a8:25:30:db:46:ca:14:9a:3b:20:05:60:1f:a4:92:89:ef:d1:
44:cb:38:1b:de:f6:8b:4b:83:f3:fb:41:fd:c8:72:8e:57:22:
89:d0:0f:2b:7b:a8:d3:fc:f3:4c:fe:7b:b6:e1:0c:55:c3:d2:
a3:62:7d:b3:31:e2:02:b3:27:ef:a1:c5:82:fc:27:f4:8a:af:
da:49:a3:1d:33:1e:17:2a:04:7f:47:dd:fe:b2:2a:99:48:c4:
96:4d:7d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:51 2024 by rpki-client on console-ams.rpki-client.org