Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/zjgukzrLM1DX-VP29Ef8Le_UtYM.roa
File: zjgukzrLM1DX-VP29Ef8Le_UtYM.roa (raw, json)
Hash identifier: KP+AEDTDoyVhTJ+zAXKZz+v+K/ErjttGTp7L3kIMY40=
Subject key identifier: CE:38:2E:93:3A:CB:33:50:D7:F9:53:F6:F4:47:FC:2D:EF:D4:B5:83
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 018C19B32A763267E582DB83924621E4291D
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/zjgukzrLM1DX-VP29Ef8Le_UtYM.roa
Signing time: Wed 29 Nov 2023 06:10:21 +0000
ROA not before: Wed 29 Nov 2023 06:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44056
IP address blocks: 91.237.186.0/23 maxlen: 23
176.125.192.0/19 maxlen: 19
46.148.128.0/22 maxlen: 22
46.148.128.0/20 maxlen: 20
31.135.224.0/20 maxlen: 20
31.135.232.0/22 maxlen: 22
31.135.236.0/23 maxlen: 23
46.148.143.0/24 maxlen: 24
195.2.238.0/23 maxlen: 23
109.196.64.0/22 maxlen: 22
109.196.64.0/20 maxlen: 24
109.196.68.0/22 maxlen: 22
91.195.130.0/23 maxlen: 23
91.230.146.0/24 maxlen: 24
83.97.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:b3:2a:76:32:67:e5:82:db:83:92:46:21:e4:29:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Nov 29 06:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce382e933acb3350d7f953f6f447fc2defd4b583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bb:bb:ec:90:05:c1:72:e9:21:10:f3:ee:dc:
2c:d0:0a:7a:bc:e7:e4:df:51:84:5d:e1:dd:81:d3:
39:89:0b:e7:81:5f:d3:56:c8:f6:70:b6:30:54:f8:
dc:8b:b6:be:d1:ee:0a:52:62:9c:a6:dc:82:30:d6:
7a:0d:a8:3f:f3:06:b6:ca:4c:4b:2a:9a:41:51:70:
de:5b:b5:fa:dc:4b:ce:68:35:ce:47:54:81:74:2d:
c9:cb:82:c2:ed:97:3c:71:28:ff:a1:93:be:31:7b:
ba:4b:7d:82:51:58:bf:68:85:fc:72:fa:f6:7a:6e:
00:06:59:2a:dc:ec:cb:a3:8f:35:51:c8:e5:d4:96:
b5:2c:03:ea:ec:1c:a3:81:76:ae:a9:e7:e7:14:95:
dd:64:13:50:ad:5a:50:70:68:ef:b1:62:23:67:c9:
7b:8f:61:8b:8d:72:05:ca:91:02:d7:ac:5e:b5:c3:
de:d6:76:2b:ad:f0:7c:3f:ae:e2:af:bc:e9:b5:2b:
2a:dc:e3:02:8c:d8:5b:42:eb:c3:67:68:50:6e:d5:
99:79:dc:55:82:58:cf:c4:bb:73:21:f8:7a:64:01:
ce:e2:fb:13:17:7a:1e:3c:e0:d4:7f:f4:0a:be:65:
d2:c7:0a:3d:72:bf:68:00:2b:3c:e9:18:5b:4b:98:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:38:2E:93:3A:CB:33:50:D7:F9:53:F6:F4:47:FC:2D:EF:D4:B5:83
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/zjgukzrLM1DX-VP29Ef8Le_UtYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
Signature Algorithm: sha256WithRSAEncryption
81:49:c1:fc:ad:96:f5:3e:2d:27:9c:20:80:41:be:0c:0f:a4:
eb:d9:a0:f0:2d:c0:42:85:8d:b2:4f:9f:b7:de:f5:d1:5b:a8:
c0:42:f3:59:45:06:db:09:16:02:78:ff:ed:bf:8d:8e:e3:dd:
c6:61:0c:32:eb:5a:c9:ba:3d:d8:a1:37:e1:34:14:e9:1b:4a:
91:c2:9b:29:7e:3a:4b:5b:ff:dd:ba:d3:a5:2c:5a:f2:0e:7d:
d3:19:80:15:21:17:25:30:c9:10:cb:ee:f4:b7:3d:63:12:7a:
cf:89:d9:fe:66:1d:d3:94:69:03:f1:60:b1:72:79:70:84:fa:
1e:9f:3c:75:0b:0c:43:30:6a:a2:1f:1f:d7:8b:eb:d5:bc:55:
cf:ee:ca:b2:2b:58:9b:8d:c6:02:eb:48:dd:fa:56:2b:d0:58:
f8:ea:18:ed:06:d1:ef:d3:5f:eb:c9:96:14:40:23:78:d2:67:
31:3f:bd:fe:18:d2:21:3e:cb:e7:f0:7d:db:94:7f:ab:0f:aa:
9b:e7:58:3c:d6:23:03:65:71:88:a3:c3:b9:6d:79:e3:bb:20:
af:48:49:c1:1a:29:b1:7a:7a:82:ef:f4:5f:58:c9:c7:81:15:
e8:4e:41:6c:eb:d3:39:08:da:ce:bf:66:7f:bf:e0:d9:74:15:
de:2e:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org