Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/449XGKYHmr7Iw76GQgQcsXqQ6K8.roa
File: 449XGKYHmr7Iw76GQgQcsXqQ6K8.roa (raw, json)
Hash identifier: eWRbfZhE48l0JMpHN4fCDdkM4VYxJCI2WOb4qvkafFw=
Subject key identifier: E3:8F:57:18:A6:07:9A:BE:C8:C3:BE:86:42:04:1C:B1:7A:90:E8:AF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018ECC4A07578D0957E63EC85233FAAEC018
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/449XGKYHmr7Iw76GQgQcsXqQ6K8.roa
Signing time: Thu 11 Apr 2024 08:33:07 +0000
ROA not before: Thu 11 Apr 2024 08:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 31.222.230.0/24 maxlen: 24
37.72.128.0/24 maxlen: 24
62.204.52.0/24 maxlen: 24
77.83.193.0/24 maxlen: 24
78.142.238.0/24 maxlen: 24
130.255.172.0/24 maxlen: 24
130.255.175.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
185.253.4.0/24 maxlen: 24
193.17.88.0/24 maxlen: 24
193.201.10.0/24 maxlen: 24
194.69.164.0/24 maxlen: 24
195.64.127.0/24 maxlen: 24
195.96.159.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
213.109.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 19:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:4a:07:57:8d:09:57:e6:3e:c8:52:33:fa:ae:c0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 11 08:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e38f5718a6079abec8c3be8642041cb17a90e8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:cf:7c:7e:29:39:39:87:c3:39:3b:fa:f5:
f2:96:95:13:1c:81:72:3a:57:0c:6c:6c:06:8f:3f:
86:00:b0:5e:17:36:fa:6c:ab:94:00:43:dd:36:92:
fd:57:eb:df:b4:2e:df:f2:4d:75:5b:5c:eb:c1:69:
c4:35:8d:23:f0:56:ea:52:83:cc:f2:78:95:5b:dd:
d4:28:96:20:a3:01:45:e8:1e:b1:2c:34:c6:4e:95:
24:e8:8a:c6:0a:b6:97:fc:02:00:14:25:4f:72:8a:
6a:57:b0:f9:ca:50:d0:60:26:15:ae:49:97:34:80:
e0:11:45:d3:02:b5:dd:7b:3a:96:cc:12:ec:d6:92:
e5:98:0e:2d:d4:1f:55:ec:8e:df:45:a7:6f:56:b1:
22:7e:66:d3:d4:fc:5c:b7:db:a1:83:96:86:06:4d:
52:06:09:b0:1e:6b:4c:f9:23:9e:e5:b7:6e:22:22:
84:d9:dd:00:78:55:a7:cc:1c:d3:2d:88:55:60:3a:
87:96:d7:d2:a4:78:f6:38:bb:88:38:30:b7:4c:39:
d7:fa:1b:4f:2d:c1:87:03:18:e0:00:85:52:02:fa:
0b:ac:b4:55:0a:6c:ee:3f:f3:32:11:11:6f:c7:91:
09:46:86:85:d0:a2:c3:1e:ad:a7:19:3c:74:26:28:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:57:18:A6:07:9A:BE:C8:C3:BE:86:42:04:1C:B1:7A:90:E8:AF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/449XGKYHmr7Iw76GQgQcsXqQ6K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.230.0/24
37.72.128.0/24
62.204.52.0/24
77.83.193.0/24
78.142.238.0/24
130.255.172.0/24
130.255.175.0/24
146.19.129.0/24
185.253.4.0/24
193.17.88.0/24
193.201.10.0/24
194.69.164.0/24
195.64.127.0/24
195.96.159.0/24
212.107.26.0/24
213.109.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:02:3c:a0:f2:75:05:d5:2e:19:28:b8:14:0d:57:e9:68:8d:
26:93:7f:6a:21:70:4b:57:2c:4b:f5:00:2b:ff:04:99:05:79:
a5:26:4c:bc:b7:ba:44:5b:f1:9a:ca:b7:e3:57:d4:1b:4b:bb:
bb:61:43:cd:75:4a:e9:7e:01:80:35:67:f2:6d:b3:37:d4:c0:
9e:b4:26:05:06:cf:ec:56:dc:a3:8b:4c:59:1a:28:0c:dc:42:
b2:d8:fb:11:89:89:72:8d:fa:6b:bd:0b:eb:25:00:cc:79:59:
96:42:f6:58:50:84:b9:f4:ba:a8:f2:11:22:86:c9:42:eb:78:
ba:22:72:da:49:84:8a:a8:4f:74:20:14:9e:ce:28:cd:13:e8:
f2:b3:1c:87:52:79:e9:99:08:ec:f1:f3:65:df:e4:65:10:3b:
9c:40:96:1f:9f:8c:4f:e1:65:60:b5:b7:e5:87:82:04:83:ab:
d8:a7:0e:05:3a:1d:c3:cf:c8:40:b4:39:21:24:88:0c:4c:3f:
11:8e:8e:53:6f:e9:e8:4e:e2:0b:76:d4:95:c0:3d:ea:5b:d4:
e3:eb:e7:d4:38:88:c7:94:d9:69:c6:9f:fa:cf:35:25:35:35:
86:39:a6:91:77:21:79:1e:c7:78:45:d1:76:6e:35:7b:86:04:
2f:d4:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org