Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/x341YqsQAmcUIV4eDBqtY5R_cGY.roa
File: x341YqsQAmcUIV4eDBqtY5R_cGY.roa (raw, json)
Hash identifier: 2ZY6zrGyIA/Gu7NznDLUq6Ymby9uwIwmp0ns7m/qTpY=
Subject key identifier: C7:7E:35:62:AB:10:02:67:14:21:5E:1E:0C:1A:AD:63:94:7F:70:66
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019169AB593E5819A914E8EF6FE746CF5027
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/x341YqsQAmcUIV4eDBqtY5R_cGY.roa
Signing time: Mon 19 Aug 2024 08:05:22 +0000
ROA not before: Mon 19 Aug 2024 08:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31479
IP address blocks: 178.19.32.0/24 maxlen: 24
185.28.48.0/23 maxlen: 23
201.77.58.0/24 maxlen: 24
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Sep 2024 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:ab:59:3e:58:19:a9:14:e8:ef:6f:e7:46:cf:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 19 08:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c77e3562ab10026714215e1e0c1aad63947f7066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:2a:76:fd:07:34:48:3f:2a:80:e4:ff:b7:
98:f8:7b:80:46:73:e8:5b:70:58:a1:ca:13:0d:67:
aa:16:a7:70:ac:59:92:d1:d5:b6:19:47:5c:55:d6:
a4:17:1a:d5:0a:e9:45:05:9f:82:58:12:75:76:e9:
0b:06:61:d8:62:e3:56:fe:15:55:7f:57:7d:ff:19:
30:6f:ea:1f:cf:d2:2a:4d:22:da:02:a7:82:1e:32:
d9:29:45:b5:21:9c:3e:64:c0:29:06:6c:4a:8d:e7:
27:17:ac:0d:40:34:94:91:13:78:18:72:28:d0:0a:
2c:db:6d:f6:9e:6d:7c:72:55:30:d2:10:1f:d5:19:
73:b9:41:92:22:24:c4:f6:32:0c:9a:d3:12:62:82:
d3:85:6c:4a:c1:d7:7f:e7:95:fb:4e:de:82:5f:a0:
78:ba:7d:ba:01:ab:d6:cf:94:f3:4d:0e:c5:5a:de:
8d:36:3f:5c:a0:3b:3a:a9:7f:bf:43:26:8d:d7:8c:
5f:4b:2d:7f:81:3c:9c:3f:a4:6a:af:8b:cb:15:c4:
f3:55:cc:05:a9:06:e0:54:7f:4f:23:fb:3f:11:ab:
7d:45:83:c5:d7:ac:51:21:e8:bd:12:ed:06:6d:16:
0c:b1:14:64:cb:3a:d2:19:59:0f:df:b2:6e:15:14:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:35:62:AB:10:02:67:14:21:5E:1E:0C:1A:AD:63:94:7F:70:66
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/x341YqsQAmcUIV4eDBqtY5R_cGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.32.0/24
185.28.48.0/23
201.77.58.0/24
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
9f:b1:09:87:78:3d:84:ce:c1:cf:14:64:65:e8:44:0c:15:05:
8c:e1:d3:56:a5:46:3a:5e:a7:92:45:11:d2:70:fe:a1:c6:f7:
6a:64:16:03:49:8b:8c:a7:df:8c:7f:5a:04:7e:b6:70:96:d4:
9c:09:67:4b:7e:ee:98:ce:36:f5:81:54:45:6e:13:49:2c:e9:
1e:8d:ba:50:23:b5:df:b0:83:5d:83:e6:51:be:13:19:d2:02:
39:83:71:de:67:43:a9:0a:6b:3b:4a:40:87:f7:a2:5c:ff:c4:
81:9e:e5:ee:14:31:f6:bd:80:d3:fc:9b:da:47:a9:48:31:34:
ff:e5:b9:9c:19:30:e2:17:80:82:3b:6f:b1:b6:6a:5e:fd:3a:
99:11:f7:39:be:9a:c6:1d:3a:48:5d:45:2b:f6:b1:29:b2:76:
6b:b6:d0:bd:dd:9c:74:b3:8d:93:a0:88:c0:68:61:70:89:76:
52:50:e7:5a:28:2a:c8:6f:44:50:04:43:e1:21:cb:31:58:4e:
d9:41:4c:a6:67:b7:2e:94:1e:a2:3a:bc:a0:b1:e4:16:c6:6c:
ff:fa:ba:7c:39:38:54:32:5a:5f:0c:d5:b8:fe:f4:44:41:e7:
12:a5:11:4b:33:df:f7:66:0c:9c:7d:d2:9f:4a:a9:02:aa:6a:
6d:75:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 10:22:48 2024 by rpki-client on console-fra.rpki-client.org