Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/euIOUuCgw9viRYn31nXupLZpoZg.roa
File: euIOUuCgw9viRYn31nXupLZpoZg.roa (raw, json)
Hash identifier: vSv1YCJNZ/2aR75J7P8X5Ot9/4RTKBvayH8bsMlowiE=
Subject key identifier: 7A:E2:0E:52:E0:A0:C3:DB:E2:45:89:F7:D6:75:EE:A4:B6:69:A1:98
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9F31AE9E61B26B3F425828DAF6E6FEB5
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/euIOUuCgw9viRYn31nXupLZpoZg.roa
Signing time: Tue 02 Apr 2024 14:23:37 +0000
ROA not before: Tue 02 Apr 2024 14:23:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 31.41.253.0/24 maxlen: 24
45.87.255.0/24 maxlen: 24
45.95.28.0/24 maxlen: 24
45.128.129.0/24 maxlen: 24
45.131.160.0/24 maxlen: 24
45.131.161.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
94.154.188.0/24 maxlen: 24
94.154.189.0/24 maxlen: 24
94.154.191.0/24 maxlen: 24
193.187.106.0/24 maxlen: 24
212.60.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:31:ae:9e:61:b2:6b:3f:42:58:28:da:f6:e6:fe:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 14:23:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae20e52e0a0c3dbe24589f7d675eea4b669a198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8f:3d:9a:8b:30:49:85:bc:5d:23:41:4e:3a:
52:a5:36:39:43:67:60:a3:d5:99:64:7d:be:47:57:
b8:15:7e:87:7c:72:9b:b8:37:18:67:06:2b:6a:cc:
73:48:b4:a3:7f:af:7c:32:e0:f1:97:78:1b:c8:87:
f3:19:d3:30:e6:70:21:92:7e:2b:3a:bf:46:31:4d:
6b:d0:88:b1:88:06:87:27:f5:bf:b9:a5:1c:5e:f8:
28:62:ca:75:8b:31:2f:9e:33:44:72:99:20:91:d2:
03:2b:bd:d4:ee:58:e7:ec:1d:90:8e:8a:63:34:12:
69:35:73:5f:ae:86:56:00:2a:05:39:e3:87:2b:39:
b5:77:55:94:04:28:14:46:01:da:4a:59:07:1a:a0:
98:63:69:a5:87:f0:98:5c:c3:c2:53:0a:44:fd:e1:
fe:8b:3d:1d:b9:2b:30:5e:40:2f:5f:4c:40:f7:68:
b1:71:91:9b:a1:d8:a0:b8:98:1d:19:ff:69:bd:a2:
d0:89:22:81:72:89:ae:b7:99:c7:60:4e:3a:70:c9:
ac:0d:b5:c9:74:be:0f:d1:7a:9b:d8:a0:c6:12:70:
8e:37:33:f2:e0:df:7c:68:d6:0d:36:3c:84:b1:5f:
a8:ba:ca:23:cf:65:84:8c:2d:a7:fd:ca:86:09:ca:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:0E:52:E0:A0:C3:DB:E2:45:89:F7:D6:75:EE:A4:B6:69:A1:98
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/euIOUuCgw9viRYn31nXupLZpoZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.253.0/24
45.87.255.0/24
45.95.28.0/24
45.128.129.0/24
45.131.160.0/23
91.190.158.0/24
94.154.188.0/23
94.154.191.0/24
193.187.106.0/24
212.60.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:43:a5:3c:b6:96:fd:ca:8e:ec:92:0f:df:31:09:54:d1:41:
1d:67:e1:86:76:e0:b3:1b:d8:ab:62:2f:06:64:bf:cb:19:38:
b8:33:de:da:9b:41:bc:19:bf:91:58:5b:52:b1:91:c2:d7:a0:
e0:19:d5:0b:39:8f:2e:ed:80:42:22:25:a9:c9:3b:11:06:96:
e6:a9:38:76:68:9c:7c:36:bd:eb:1e:78:3f:00:56:b3:2a:d4:
3c:a1:f1:e1:f7:ff:a7:bd:23:17:34:e9:32:44:65:a7:0f:5e:
2e:82:82:e8:a3:49:35:6f:19:ab:2a:95:7e:82:f1:62:12:c3:
74:10:fd:1a:10:cc:7b:7d:d4:9b:d9:dc:a8:84:af:3d:14:df:
3e:5c:63:11:07:a3:3d:f0:4c:90:a4:7f:56:c0:e1:90:ba:e5:
f6:aa:0c:91:89:72:b6:a0:9b:92:ef:4e:7c:2d:bd:0a:c0:d2:
64:ad:5f:24:ef:cb:02:ab:0a:13:ef:31:74:46:25:09:d1:0d:
d7:4e:bb:d2:cf:9d:0f:6f:d4:90:bb:aa:19:05:66:bc:b9:c8:
54:86:e9:f1:a9:21:e6:60:71:8f:7c:92:ea:40:6a:de:0f:dc:
90:39:5d:6b:ea:bf:a6:41:de:e7:05:74:82:90:25:1d:4c:5a:
dd:32:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 16:48:51 2024 by rpki-client on console-ams.rpki-client.org