Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q0Uuei3-WSMicTnI5TU5KXQLlMA.roa
File: Q0Uuei3-WSMicTnI5TU5KXQLlMA.roa (raw, json)
Hash identifier: /XYksUHxM0yjjmZplELcoiNFkzEzh2hw0x1xdIeZ9y4=
Subject key identifier: 43:45:2E:7A:2D:FE:59:23:22:71:39:C8:E5:35:39:29:74:0B:94:C0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193209892844D07B32409A9859C691444C6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q0Uuei3-WSMicTnI5TU5KXQLlMA.roa
Signing time: Tue 12 Nov 2024 13:38:10 +0000
ROA not before: Tue 12 Nov 2024 13:38:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214304
IP address blocks: 31.14.10.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:98:92:84:4d:07:b3:24:09:a9:85:9c:69:14:44:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 12 13:38:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43452e7a2dfe5923227139c8e5353929740b94c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:c5:27:44:42:3b:83:18:64:d3:d2:16:44:
ee:63:86:5e:3c:9f:62:5b:83:2e:f5:4f:a6:98:0d:
29:35:43:24:b4:0e:c6:ee:ed:f3:eb:2f:83:64:9f:
4e:5f:08:1e:13:3b:88:ff:20:e4:b6:2c:80:28:5e:
59:6d:7f:d7:bb:15:f9:15:85:21:23:68:36:8a:ff:
ff:84:4e:a4:e9:37:32:c1:e4:1a:d4:3a:02:f6:78:
49:2b:64:75:1d:96:ef:b4:79:39:d8:c9:a1:58:b2:
c6:44:e6:ec:67:24:94:8e:e3:e4:58:f1:7d:6e:a2:
d5:f5:98:27:59:de:08:3d:58:f0:12:8f:d6:a2:09:
40:90:7c:34:24:cd:c7:b9:b8:5e:75:83:ff:fb:21:
d4:a6:ac:d0:77:c2:95:7a:d8:ce:b3:0b:df:04:c7:
bc:c5:7d:e4:02:c7:8b:9e:f1:73:27:75:bd:eb:1f:
3b:f9:95:2a:45:f0:dd:a7:4a:27:88:89:f5:12:1e:
c7:55:f0:55:9b:22:4f:22:d8:ca:dd:e5:f1:1d:40:
71:80:37:f9:6a:f9:2d:8d:d1:af:5c:67:87:d7:f7:
c8:e4:b3:96:88:9d:1b:0f:67:91:dd:7f:c3:4f:79:
f4:73:b5:4c:69:0d:f7:65:a5:c1:80:02:19:73:10:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:45:2E:7A:2D:FE:59:23:22:71:39:C8:E5:35:39:29:74:0B:94:C0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Q0Uuei3-WSMicTnI5TU5KXQLlMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
185.212.119.0/24
193.228.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:54:23:3b:ed:e3:46:e1:98:5b:10:a3:64:4a:5a:4b:6c:63:
ab:65:e0:0a:78:ff:4e:15:72:87:6c:81:01:76:13:d1:3d:07:
88:1d:28:25:27:9b:28:46:3b:59:6b:39:81:a4:a4:f6:83:15:
83:97:69:78:d3:62:3d:9b:b2:54:cc:22:48:2d:d3:f1:0a:ce:
55:2a:91:1f:34:18:79:56:78:c6:5b:cb:1d:a3:ea:da:50:2f:
7f:98:a9:8a:a1:2c:4c:0c:73:88:8a:ad:8d:fb:7c:0b:53:e1:
d9:01:be:df:d1:77:08:30:56:00:70:b1:22:ce:3b:7d:00:dd:
ce:39:e9:a8:85:25:91:d2:40:7b:24:f6:10:a6:83:cd:65:35:
37:1b:75:5b:81:e2:ba:bb:fa:9f:40:da:e3:c2:cc:6a:e8:45:
44:0d:f4:51:3f:1f:b8:94:8e:ad:7e:29:cc:15:ed:9a:03:f4:
b4:b9:79:ca:c9:f6:b3:10:85:e5:9d:01:69:03:ae:aa:f7:94:
50:29:de:e7:f7:d1:dd:a4:2d:c3:cf:ab:e4:07:aa:b7:0a:af:
b3:cb:d4:84:cf:84:c0:37:d8:d9:1d:04:9a:5a:f5:61:b9:19:
ae:ec:4b:9d:aa:66:b0:0f:7d:25:8c:cf:7a:a8:e6:6e:7f:dd:
86:87:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 06:09:44 2024 by rpki-client on console-ams.rpki-client.org