Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/T-nHEQXG9zHqukCYlADjqIyCv-Q.roa
File: T-nHEQXG9zHqukCYlADjqIyCv-Q.roa (raw, json)
Hash identifier: 0cKI0KhwNTPf6UmclIhm68cgBRlDtBOK6fwyfMeCINE=
Subject key identifier: 4F:E9:C7:11:05:C6:F7:31:EA:BA:40:98:94:00:E3:A8:8C:82:BF:E4
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 0185718C3586BD0C703E4C7BEED17F8D7AC8
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/T-nHEQXG9zHqukCYlADjqIyCv-Q.roa
Signing time: Mon 02 Jan 2023 08:14:52 +0000
ROA not before: Mon 02 Jan 2023 08:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47448
IP address blocks: 31.222.60.0/24 maxlen: 24
31.222.62.0/24 maxlen: 24
31.222.61.0/24 maxlen: 24
31.222.63.0/24 maxlen: 24
93.191.192.0/24 maxlen: 24
93.191.193.0/24 maxlen: 24
93.191.196.0/24 maxlen: 24
93.191.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:35:86:bd:0c:70:3e:4c:7b:ee:d1:7f:8d:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 2 08:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe9c71105c6f731eaba40989400e3a88c82bfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:b9:5e:81:f6:ee:02:88:6a:4d:16:bd:6f:
f2:03:99:c9:b5:af:bf:8e:a9:b1:65:91:1c:b8:ac:
37:53:10:59:1e:2d:8e:f8:5b:8e:3e:aa:95:d4:8e:
16:71:14:f6:ae:aa:25:d4:90:fa:6c:ee:da:bf:1d:
b9:08:4d:95:40:c7:51:4a:b7:0c:23:19:7c:e5:3a:
d7:a6:3d:0d:d7:09:a0:22:6d:83:a4:f9:1c:17:a7:
d0:52:64:3f:03:85:e0:69:39:7a:b6:8d:1d:eb:b7:
70:73:0a:c8:74:eb:e3:8f:8c:12:bd:1e:89:67:29:
62:c9:64:fa:1b:c8:62:3a:79:24:c6:89:be:f5:c4:
2d:0b:1d:4b:e9:9a:ff:74:db:14:03:57:70:e3:3a:
bf:de:fb:50:12:fc:a7:21:62:5d:bd:fb:d1:4a:f8:
96:5e:3f:80:0d:fa:d2:3b:14:a2:21:30:37:96:58:
3b:4e:88:fe:64:ee:53:9a:80:ad:e8:60:a4:a3:91:
77:a7:03:49:59:1c:e0:bb:0b:eb:ee:f6:cd:85:73:
9d:2c:f9:39:22:d5:97:f4:4e:f8:b0:21:db:34:1c:
c5:f4:1f:d3:52:0e:ba:72:89:ce:70:7f:55:28:d5:
99:32:29:4c:83:67:2d:76:eb:17:38:39:1e:e9:dd:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:C7:11:05:C6:F7:31:EA:BA:40:98:94:00:E3:A8:8C:82:BF:E4
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/T-nHEQXG9zHqukCYlADjqIyCv-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.60.0/22
93.191.192.0/23
93.191.196.0/24
93.191.199.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2a:23:2e:ac:3f:87:91:c5:75:b8:0d:d0:3a:4f:03:1e:1c:
57:fa:23:c0:53:1b:b8:72:fc:52:54:5d:e2:03:cc:80:20:82:
ea:d6:b7:5d:73:9e:c1:a4:cd:42:4f:43:df:bd:7e:43:6e:17:
c7:e4:43:5d:db:84:6f:a7:a9:28:0c:20:86:5b:27:03:03:f7:
72:0d:59:07:c9:6e:80:f3:98:fa:c9:7e:34:d4:6b:d0:c2:eb:
81:e2:51:c3:1e:47:d3:ff:16:86:20:ea:d5:a5:3d:09:ee:79:
51:84:c0:9e:17:a7:fb:1c:9f:bb:89:5c:45:5f:69:48:cc:d7:
50:e2:82:5f:a8:34:71:55:f3:17:b4:a0:f4:6b:4d:61:6f:14:
ae:ae:fe:ce:39:15:36:6a:4b:6f:8e:46:5d:95:2a:de:9d:a7:
a6:0b:9b:fe:cf:e0:d9:84:a4:3b:08:55:cc:e6:56:87:f6:7e:
22:dd:cf:30:68:c0:30:d0:3c:af:7c:c8:98:45:95:4a:d8:54:
4e:b4:6d:91:1f:28:33:0b:b0:84:b6:49:bb:c2:47:34:be:df:
45:11:c9:0b:7e:c2:43:1e:60:28:43:04:60:42:e3:77:1d:cd:
1d:61:12:f0:9d:16:7a:a1:9d:89:16:2f:d3:ac:b3:c6:52:36:
61:ad:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:03 2024 by rpki-client on console-ams.rpki-client.org