Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/06EUcmrfTiau5NuZeTev57K7yfA.roa
File: 06EUcmrfTiau5NuZeTev57K7yfA.roa (raw, json)
Hash identifier: KSdet3nULIR/kzU5zi9IruhRfoYuu5LuKw473bdmbnY=
Subject key identifier: D3:A1:14:72:6A:DF:4E:26:AE:E4:DB:99:79:37:AF:E7:B2:BB:C9:F0
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018AD6059EDB9201C4715DEDC7581F2B7C61
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/06EUcmrfTiau5NuZeTev57K7yfA.roa
Signing time: Wed 27 Sep 2023 09:43:27 +0000
ROA not before: Wed 27 Sep 2023 09:43:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204108
IP address blocks: 31.41.12.0/23 maxlen: 23
31.41.14.0/23 maxlen: 23
185.229.232.0/23 maxlen: 24
185.229.232.0/22 maxlen: 24
185.229.234.0/23 maxlen: 24
31.133.32.0/22 maxlen: 22
185.253.42.0/23 maxlen: 24
185.253.40.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:05:9e:db:92:01:c4:71:5d:ed:c7:58:1f:2b:7c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Sep 27 09:43:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3a114726adf4e26aee4db997937afe7b2bbc9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:b3:80:c5:22:44:89:d5:fd:64:ef:10:56:
f1:ad:5b:b6:6c:1c:ed:a4:1e:4a:de:e7:57:53:4d:
e5:e8:d0:fc:d3:ac:f0:7e:26:66:fd:49:83:84:9e:
20:38:ba:f9:66:3c:2e:e2:0d:be:db:17:7f:29:36:
c8:52:2b:af:13:1b:18:59:ee:e5:c1:0c:ab:e3:d0:
49:18:ae:6c:3c:fa:cc:11:bc:21:c4:41:7a:be:be:
1a:f4:15:79:c3:68:1c:72:8a:11:6a:6d:a9:97:b6:
a0:10:36:78:63:ce:b1:7f:e2:4e:24:e7:34:43:94:
78:0e:68:23:9b:a4:a4:7a:53:bd:e8:99:19:2c:51:
fd:53:f3:2f:2d:9b:2f:e1:21:4f:d8:c4:3a:fb:04:
b6:df:8b:45:82:81:23:76:4f:51:9f:76:73:77:7f:
b2:9c:ea:3e:e0:c0:ba:33:b8:4e:b8:9a:9e:70:64:
41:c7:c5:ec:4a:fb:09:d3:00:db:a0:63:58:67:3e:
22:44:24:70:e8:42:a8:de:69:2a:3d:a1:cd:70:5f:
c9:0a:ca:ad:60:30:bc:3f:fb:0a:87:e1:a1:5d:5a:
a9:59:28:7b:a7:3a:a0:01:13:53:cf:0b:c4:6f:b4:
e3:b2:75:50:cf:30:42:69:2e:2d:25:c2:56:dc:01:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:14:72:6A:DF:4E:26:AE:E4:DB:99:79:37:AF:E7:B2:BB:C9:F0
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/06EUcmrfTiau5NuZeTev57K7yfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.12.0/22
31.133.32.0/22
185.229.232.0/22
185.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
23:69:31:bb:60:5f:f6:8e:2d:bf:32:e5:83:50:fc:e6:a6:2b:
80:75:3e:c1:7a:d6:6d:88:30:a0:b4:d0:1b:27:c5:8f:9d:ac:
b7:66:39:e5:dc:a7:b2:a9:fa:30:34:52:57:b8:85:4e:15:3f:
4a:50:89:84:d7:89:65:91:fd:56:21:6f:b7:3c:c2:ff:e4:ae:
7a:75:74:2d:93:50:6f:1f:ad:a9:98:24:61:e4:af:a0:72:2f:
12:de:4c:49:fb:ea:4d:92:bf:18:59:2b:ae:cd:b0:8d:9e:52:
42:2c:fc:ca:fa:44:19:de:ff:59:26:3b:41:c9:40:cf:55:19:
45:f2:88:a0:ec:2d:fa:a4:b0:c5:4b:95:66:de:36:19:ef:79:
c4:87:e9:d7:84:d3:63:07:96:ab:03:f6:96:1e:bc:c5:d9:26:
09:b6:25:f4:5e:57:71:9c:7f:3b:51:f1:fc:bd:b5:c1:58:92:
90:35:48:70:0a:1a:e2:eb:15:1f:0e:9f:84:ad:c6:6e:88:cc:
f2:d7:f1:d0:0e:f3:0c:de:70:fe:00:54:5a:99:1d:84:9b:19:
69:d9:a4:15:48:89:a1:f7:68:2f:55:2b:6c:7f:a0:21:08:00:
b6:3a:6b:d8:73:bd:83:9d:4a:89:b9:04:7e:c7:1a:c3:49:4f:
b3:cd:e2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org