Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/AA6n9SII5RWc1ES1dA9RBYjVCgg.roa
File: AA6n9SII5RWc1ES1dA9RBYjVCgg.roa (raw, json)
Hash identifier: 1mA5tOeBPUHtyvJpWObsPZSGqwBInPCCUX3CFNKMajk=
Subject key identifier: 00:0E:A7:F5:22:08:E5:15:9C:D4:44:B5:74:0F:51:05:88:D5:0A:08
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0190AB982A4223F37200CD9ABF26D4387409
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/AA6n9SII5RWc1ES1dA9RBYjVCgg.roa
Signing time: Sat 13 Jul 2024 10:16:34 +0000
ROA not before: Sat 13 Jul 2024 10:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.80.0/24 maxlen: 24
31.133.81.0/24 maxlen: 24
31.133.82.0/24 maxlen: 24
31.133.83.0/24 maxlen: 24
31.133.84.0/22 maxlen: 22
31.133.88.0/22 maxlen: 24
31.133.88.0/24 maxlen: 24
31.133.89.0/24 maxlen: 24
31.133.90.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
176.103.224.0/22 maxlen: 22
176.103.232.0/22 maxlen: 22
176.103.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 07 Aug 2024 15:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:98:2a:42:23:f3:72:00:cd:9a:bf:26:d4:38:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 13 10:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=000ea7f52208e5159cd444b5740f510588d50a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:07:c6:65:50:76:2d:92:92:b4:f8:30:3c:
c3:db:dd:8a:fd:cb:54:c2:f7:fe:cb:0a:69:cc:f1:
b1:ed:af:5a:09:bb:1c:23:14:44:3b:05:9d:e3:a8:
50:fd:99:8d:65:e0:1f:e4:82:a8:47:b7:73:45:75:
9a:80:24:61:fa:0d:d0:19:fa:21:c4:73:d0:6f:ca:
65:f9:00:48:b2:71:ce:d3:d2:0f:20:cf:74:19:fc:
f0:a0:4e:59:ea:41:6a:4a:78:c4:0c:bd:d9:c6:9a:
6f:f7:59:bf:22:19:f2:7d:b4:65:24:c3:7c:0b:ff:
f8:e8:5d:d0:e4:b5:43:77:6f:8d:d1:2c:b7:fc:7d:
ae:b8:64:85:b5:26:98:9e:fc:36:08:b7:de:3e:79:
14:d8:52:9a:92:c1:d8:18:d9:20:1c:17:59:4f:42:
4a:23:3e:96:a0:81:19:ff:f8:40:25:87:cc:da:2a:
f0:43:74:3a:27:5b:54:07:b2:ba:42:14:09:f3:cd:
96:e5:96:0d:77:d3:ca:96:52:af:f9:12:38:a3:3e:
f8:b7:58:c4:5c:55:66:73:32:f6:94:7a:21:a4:25:
23:e3:a3:e4:ed:df:7a:05:ab:62:dc:6e:ca:dd:37:
b9:db:eb:52:63:5a:ad:e5:46:e2:71:26:03:d7:e0:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0E:A7:F5:22:08:E5:15:9C:D4:44:B5:74:0F:51:05:88:D5:0A:08
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/AA6n9SII5RWc1ES1dA9RBYjVCgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0-31.133.91.255
176.103.224.0/22
176.103.232.0/21
Signature Algorithm: sha256WithRSAEncryption
44:b0:31:77:c7:30:b3:36:ad:23:85:99:e4:80:eb:62:8d:1f:
8b:e1:1b:22:24:d0:6d:13:96:99:56:74:46:d1:fc:df:70:23:
33:d8:46:a4:1e:f4:83:a3:21:7e:3d:22:c1:b8:fd:e5:53:0d:
ea:f1:6b:71:ce:92:30:9f:aa:5d:ae:3b:be:b2:5a:da:f2:03:
16:d5:f3:6a:c4:af:3f:9d:49:0c:d8:28:f4:93:5d:19:a6:cf:
d8:08:75:49:3d:7c:d3:83:2a:09:53:68:13:f4:30:be:89:1e:
1f:6f:f6:3f:18:4e:ac:db:00:cd:1a:6e:15:92:ae:b6:f3:75:
01:26:9b:64:4e:fa:be:86:e0:b8:32:c5:62:21:d3:65:fe:e3:
ce:2e:e2:3c:fd:fb:c8:2e:77:2c:03:89:70:0c:37:d8:b1:c0:
08:87:59:9b:d6:9c:c5:53:85:53:1a:b9:b7:8a:13:af:38:8f:
47:fa:3f:da:13:94:4b:39:c1:8c:08:38:a9:70:81:b6:c9:a6:
a9:4c:a8:1e:e3:94:f6:38:59:ef:1c:89:16:df:54:13:7b:3c:
e4:dd:42:a3:bc:61:5f:52:03:6f:fc:5a:70:82:aa:03:f7:f7:
4a:67:88:95:39:7b:4f:d1:34:15:07:f8:ca:00:99:1d:a9:ea:
88:0a:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:11 2024 by rpki-client on console-ams.rpki-client.org