Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xO6Shpcj86JGJr7VNWz0jcsOgTI.roa
File: xO6Shpcj86JGJr7VNWz0jcsOgTI.roa (raw, json)
Hash identifier: Ds6iAKyTP/aqGv+ogDAvE2bIUl7Ac12Tmf25TNEIXg4=
Subject key identifier: C4:EE:92:86:97:23:F3:A2:46:26:BE:D5:35:6C:F4:8D:CB:0E:81:32
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018CC64B3810F7022A9DD8B3EA0E5BE4ED91
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xO6Shpcj86JGJr7VNWz0jcsOgTI.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 31.58.238.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.239.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.182.57.0/24 maxlen: 24
151.247.232.0/22 maxlen: 22
94.182.56.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
94.182.56.0/24 maxlen: 24
94.182.58.0/24 maxlen: 24
94.182.59.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.239.0/24 maxlen: 24
94.182.61.0/24 maxlen: 24
94.182.63.0/24 maxlen: 24
94.182.62.0/24 maxlen: 24
151.247.236.0/22 maxlen: 22
151.247.240.0/24 maxlen: 24
94.182.60.0/22 maxlen: 22
94.182.60.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.238.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.248.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.0.0/23 maxlen: 23
31.58.254.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:38:10:f7:02:2a:9d:d8:b3:ea:0e:5b:e4:ed:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4ee92869723f3a24626bed5356cf48dcb0e8132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:e6:e9:10:8d:e6:a6:b2:cf:7b:e3:ee:75:
4f:b8:d8:b6:d0:7e:6f:a8:39:6b:5c:cc:23:79:62:
8f:57:6e:de:70:9f:b5:dd:06:89:48:a0:4d:1a:c3:
6b:c0:98:c5:f5:a1:a6:bd:19:26:bf:40:9b:10:dc:
34:7e:6b:02:34:5a:2d:ea:40:76:be:ff:2c:17:cb:
3b:62:3f:d4:8a:8b:6a:52:d6:38:89:eb:19:66:63:
70:3b:74:99:d1:ef:af:82:36:93:a4:15:fd:76:25:
41:ac:ec:df:7d:5c:1f:56:74:bd:3c:ee:98:c4:4a:
8b:74:96:fd:38:f5:5d:13:af:89:94:3a:80:9c:45:
8d:6d:6a:c8:51:00:d7:ef:3f:9c:66:99:6b:5b:ef:
a0:58:aa:33:6d:28:7b:41:f9:94:d8:53:2f:d0:30:
15:82:6a:b8:0f:f8:26:20:16:3f:21:8d:b3:5f:a4:
85:19:d0:a7:6d:f3:38:91:57:a5:40:a5:47:c0:7d:
0e:bd:36:40:4f:72:84:5f:eb:32:a4:b2:ed:1e:f8:
bf:db:71:61:73:93:77:8c:b2:45:ba:c0:44:62:89:
72:4a:39:ed:0c:cb:1b:d9:5c:9d:63:a2:dc:9d:50:
6f:ea:73:a0:f7:4e:37:cb:cd:70:43:d6:ef:b9:1c:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:92:86:97:23:F3:A2:46:26:BE:D5:35:6C:F4:8D:CB:0E:81:32
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xO6Shpcj86JGJr7VNWz0jcsOgTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.236.0-31.59.1.255
31.59.12.0/22
94.182.56.0/21
151.247.228.0-151.247.241.255
Signature Algorithm: sha256WithRSAEncryption
a6:cf:8b:c6:ab:bf:30:20:eb:83:c6:33:e2:be:c5:92:de:51:
c8:18:8d:79:67:0d:46:f9:7f:63:05:9c:99:bc:5b:5f:42:84:
90:f3:83:28:27:69:7c:a7:13:2d:8a:24:29:12:f7:ca:63:6c:
54:77:22:86:32:bb:91:59:86:1b:2d:6f:ca:10:0a:68:00:fc:
5b:f2:c6:54:60:4d:70:14:bb:82:41:13:db:19:3a:eb:69:cc:
f3:a9:8d:10:1e:c8:43:db:a8:c1:1c:b0:e6:a5:34:79:7f:e8:
26:40:1c:bc:21:f6:51:61:96:2f:4f:aa:b2:1a:96:6d:a1:78:
e3:f8:65:f3:7a:09:59:65:e5:46:d8:e7:94:26:5f:53:80:82:
e7:36:e3:ba:b2:95:6d:43:af:bd:1d:d4:5b:73:cc:d7:fe:f1:
93:50:94:c3:91:12:a8:50:f8:e6:1a:ef:c0:c1:27:73:b4:e0:
b0:d7:c0:84:b2:ba:35:aa:87:93:ba:5e:e1:e9:b1:fa:99:6e:
be:32:3f:e4:8e:f9:e1:c0:51:a0:07:5b:06:61:fc:00:9f:2e:
ef:df:47:d7:09:64:16:41:0a:ec:38:04:06:66:90:58:fc:ec:
52:0b:e9:5f:0f:ba:d5:fe:51:74:e9:d8:2a:ba:c3:88:39:9b:
95:51:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 12:06:57 2024 by rpki-client on console-ams.rpki-client.org