Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/9L2Ia2AbI35kdvIS4gqkEYJlSKU.roa
File: 9L2Ia2AbI35kdvIS4gqkEYJlSKU.roa (raw, json)
Hash identifier: XHHuGyvbSvCRtMGY8kkyVqFGCRKtA9/faeAUezBxBt8=
Subject key identifier: F4:BD:88:6B:60:1B:23:7E:64:76:F2:12:E2:0A:A4:11:82:65:48:A5
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801B021237E737B5EE304C3A951741B
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/9L2Ia2AbI35kdvIS4gqkEYJlSKU.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.165.0/24 maxlen: 24
31.40.162.0/23 maxlen: 23
31.40.167.0/24 maxlen: 24
31.40.172.0/23 maxlen: 23
31.40.178.0/23 maxlen: 23
31.40.132.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.135.0/24 maxlen: 24
31.40.134.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
31.40.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 11:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b0:21:23:7e:73:7b:5e:e3:04:c3:a9:51:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4bd886b601b237e6476f212e20aa411826548a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:04:8c:4f:2e:72:03:27:12:6b:94:85:fb:
78:89:9c:70:e9:6b:c8:f1:73:19:bb:6f:eb:31:42:
35:bf:1e:f5:1b:d8:53:30:0f:f2:11:bd:d3:47:19:
c8:56:ea:68:48:02:00:fc:bd:81:21:57:67:0c:3b:
8f:d4:0f:39:2c:25:b0:d7:fc:72:e1:2b:cb:70:7e:
7d:55:ce:13:d2:26:cb:45:dc:40:67:b6:b0:e5:60:
09:c4:fc:42:a3:1a:97:ef:02:58:5d:77:a4:d9:a6:
75:2f:4e:92:bc:49:43:0f:ee:17:e6:17:9e:0e:2c:
46:53:01:6a:56:8f:d3:62:f2:a9:28:44:4e:ce:f8:
b8:42:12:cd:1d:8f:c9:c8:06:4e:2a:94:3e:e7:b1:
a5:57:ce:8e:23:48:09:8c:d4:09:00:0b:24:70:ad:
cf:03:f0:84:8d:75:e7:64:fe:22:67:36:60:d6:dd:
0b:64:b7:2c:b2:a9:20:db:5e:4f:25:12:00:75:72:
2e:e9:31:aa:bf:a7:52:44:0b:a7:e1:f3:d8:80:c8:
67:f9:9a:ce:70:e9:15:2f:ee:33:fe:3a:17:1a:ac:
3c:50:8a:5c:68:f1:07:ec:63:1d:1e:5d:81:a5:94:
b1:4d:09:93:44:b2:c2:59:2c:45:91:24:04:3b:26:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:88:6B:60:1B:23:7E:64:76:F2:12:E2:0A:A4:11:82:65:48:A5
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/9L2Ia2AbI35kdvIS4gqkEYJlSKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.132.0/24
31.40.134.0/23
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.143.0/24
31.40.151.0/24
31.40.153.0/24
31.40.162.0/23
31.40.165.0/24
31.40.167.0/24
31.40.172.0/23
31.40.178.0/23
Signature Algorithm: sha256WithRSAEncryption
12:1b:ab:95:92:a6:c5:d6:21:2b:19:3d:62:09:99:d1:d0:ce:
d8:26:20:bd:5d:b7:3a:62:87:a6:ec:56:46:a6:d8:27:1b:09:
01:6f:ca:f3:a8:9a:7a:cb:09:e8:fe:70:bd:88:2a:4b:19:d1:
66:10:d2:ca:b9:ce:b1:f1:7b:6b:1b:b1:d8:93:11:08:e3:6b:
e0:71:48:9e:82:30:1e:af:ff:0c:de:4c:a4:6a:2c:20:1a:8c:
67:45:ff:16:4f:1a:b2:93:42:c0:74:06:6c:06:25:14:a3:2d:
11:03:de:ba:ce:42:13:3e:e8:40:7b:da:58:63:ec:de:cf:79:
c2:c5:d5:d4:37:4e:4b:dd:ef:82:06:a1:82:07:3c:e0:c0:79:
dd:5b:40:e4:4c:85:7e:ae:02:91:2a:66:0e:23:7a:bf:d5:08:
f8:32:0a:c3:16:13:96:ca:47:3f:a1:a1:4f:73:80:2f:46:a1:
7c:b0:5e:3f:26:42:d8:99:6d:dd:3b:d6:7b:19:a6:5f:97:dd:
4f:11:a5:4e:07:63:eb:01:15:dc:c3:aa:e9:4d:d6:96:01:0d:
04:98:6b:70:c7:99:f4:36:59:30:de:a5:ff:dc:b8:7e:b9:d5:
e0:c2:39:83:8f:d5:1a:f6:c6:b4:ec:53:bf:fd:3e:fc:70:eb:
fe:db:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:02:45 2024 by rpki-client on console-ams.rpki-client.org