Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/auRghYSa4NxryARVErBMTkA9Mwc.roa
File: auRghYSa4NxryARVErBMTkA9Mwc.roa (raw, json)
Hash identifier: b0J/zxB5jGdOZGi2NAvTVhdKvozSiE8hTkqkJzRstfg=
Subject key identifier: 6A:E4:60:85:84:9A:E0:DC:6B:C8:04:55:12:B0:4C:4E:40:3D:33:07
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193158C613D59DE949AD5F5C2D629CAC5B2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/auRghYSa4NxryARVErBMTkA9Mwc.roa
Signing time: Sun 10 Nov 2024 10:09:01 +0000
ROA not before: Sun 10 Nov 2024 10:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214304
IP address blocks: 31.14.10.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
185.141.218.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 13:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:15:8c:61:3d:59:de:94:9a:d5:f5:c2:d6:29:ca:c5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 10 10:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ae46085849ae0dc6bc8045512b04c4e403d3307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:1d:28:bf:79:74:b4:f5:10:cb:c7:8a:93:
ad:17:0b:1c:6e:36:d9:22:29:3d:c0:72:a5:37:c5:
82:4e:e7:57:84:8c:9d:78:c0:1a:73:00:af:85:ed:
70:0c:dd:33:11:6f:72:b5:ff:76:33:8d:15:6a:bb:
03:1c:df:9b:12:24:fe:4c:e5:09:46:06:a5:51:eb:
23:7b:67:60:f7:03:b2:d3:31:f6:2f:a0:11:9f:95:
ec:8a:3e:f2:ab:03:ef:87:2d:e0:b1:4d:96:07:78:
7d:77:ac:5c:71:8d:48:68:db:8a:da:6c:20:7a:04:
13:3f:31:b1:f0:81:79:fa:74:95:28:08:8f:14:1a:
98:e3:6d:12:d1:2d:98:17:5e:42:3c:ec:4c:6b:1c:
01:89:a1:3c:f1:f6:c9:c0:d3:bf:27:52:2b:df:73:
7e:0c:ee:23:59:06:7e:84:f7:c1:3b:0d:13:c8:bd:
4e:c5:d4:38:7c:89:9f:22:14:2e:ac:18:c1:dc:e4:
8e:c0:e3:c9:50:61:56:07:50:74:e6:12:9b:0a:5d:
b7:cd:b6:94:9a:2a:88:8c:c4:0c:3d:9c:31:b0:d1:
69:03:1e:a5:24:ce:86:1d:6c:17:db:00:d7:17:98:
5b:5d:fe:32:03:a3:fe:23:bd:9d:4d:ab:68:3a:b9:
f1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:60:85:84:9A:E0:DC:6B:C8:04:55:12:B0:4C:4E:40:3D:33:07
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/auRghYSa4NxryARVErBMTkA9Mwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
103.245.229.0/24
185.141.218.0/24
185.212.119.0/24
193.228.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e9:7e:a3:e6:98:46:c3:2e:c0:c9:ae:7e:9d:ac:a1:9f:85:
87:62:77:67:1a:d7:bb:bb:c1:ef:f8:52:90:ae:a6:98:ee:ae:
e8:b7:bb:14:59:30:35:f0:9b:ad:47:bb:a0:77:64:8d:5b:06:
2f:5c:38:0f:cb:d5:a9:a5:6b:36:ce:20:b3:92:9a:79:a5:3a:
f4:14:9e:58:b4:57:1e:5b:37:fe:21:50:dc:01:e8:ac:02:4d:
bd:8a:bf:b3:13:a1:26:a0:ef:4e:7e:b4:e8:0f:a6:16:32:16:
57:9b:66:d7:32:8b:db:0a:61:e7:e6:30:c2:36:7b:3a:dc:7c:
9d:8b:f5:10:d6:c9:e6:da:0c:d6:e1:ce:8e:f2:9b:d9:cd:ad:
c9:c6:15:cc:e4:e0:e8:c8:d5:6a:8d:6f:b2:1b:6d:0f:f2:e9:
41:e3:d9:23:dd:26:8f:4f:cd:07:f2:aa:2c:9e:e6:19:eb:56:
1e:e7:7a:83:34:0c:04:4f:6b:f4:e0:81:e8:2f:1f:95:fd:a3:
a6:75:71:43:5d:68:19:e5:83:bf:61:cf:a3:1e:27:9f:d5:5f:
2f:20:6b:6f:3e:de:61:a1:5a:49:6d:6b:ba:4a:10:ce:03:7a:
73:fa:48:19:8f:39:b4:15:79:4c:58:7a:3d:d6:4a:57:5d:ea:
f6:86:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:12 2024 by rpki-client on console-ams.rpki-client.org