Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/30UMNc4k-se5iKLW6OoIwwqLnXs.roa
File: 30UMNc4k-se5iKLW6OoIwwqLnXs.roa (raw, json)
Hash identifier: URDmb44/AijXC7ejIND5DXUrSg1GrwNQ+KsdARtGV+Q=
Subject key identifier: DF:45:0C:35:CE:24:FA:C7:B9:88:A2:D6:E8:EA:08:C3:0A:8B:9D:7B
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01856E0B1067DD3E7568F84517A8A0A6D767
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/30UMNc4k-se5iKLW6OoIwwqLnXs.roa
Signing time: Sun 01 Jan 2023 15:54:56 +0000
ROA not before: Sun 01 Jan 2023 15:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56887
IP address blocks: 31.131.44.0/23 maxlen: 24
194.40.205.0/24 maxlen: 24
194.40.204.0/24 maxlen: 24
194.40.206.0/24 maxlen: 24
194.40.207.0/24 maxlen: 24
176.124.72.0/22 maxlen: 22
176.124.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:10:67:dd:3e:75:68:f8:45:17:a8:a0:a6:d7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df450c35ce24fac7b988a2d6e8ea08c30a8b9d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:79:25:d4:83:8c:99:e4:ca:dd:b6:7a:e1:
02:d2:5c:9b:e6:ea:08:bd:47:31:bc:99:23:c7:63:
2f:37:a4:c2:eb:ff:0e:18:dd:95:03:f3:e9:b4:a4:
0a:14:7f:31:b5:5d:a3:68:3f:44:95:d6:67:ed:a1:
47:c0:5b:94:46:e2:8f:3b:b7:9e:16:30:05:28:8c:
88:c0:30:fa:3c:4d:a0:3a:00:6c:10:14:dc:a8:d5:
b1:d5:5d:a2:b7:02:2b:98:5b:51:df:e2:c7:e1:ce:
7e:d8:a6:35:02:42:b0:c9:96:e0:0a:54:af:99:da:
f2:ef:a1:d1:de:1c:fc:a4:3c:7f:1f:8a:0a:44:a6:
53:6b:cf:19:a2:96:30:b7:be:7d:de:d5:c8:47:aa:
36:85:22:06:17:4e:d3:ed:a9:77:a6:1a:b2:44:6b:
a0:7c:ee:91:a6:fd:9a:57:b5:82:8b:76:6d:fc:01:
eb:d1:a8:29:27:0f:d7:a8:1b:59:8f:b1:bb:91:82:
ad:01:e5:cd:ad:a2:e9:c0:79:dd:2c:10:07:ed:fa:
5f:4e:6a:59:7f:ae:e5:7e:00:4d:2f:89:ab:21:03:
45:20:bb:1b:d6:07:d0:65:5e:7b:3d:40:80:00:67:
76:d2:05:3f:c6:58:60:84:a8:e9:08:f1:6b:55:13:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:45:0C:35:CE:24:FA:C7:B9:88:A2:D6:E8:EA:08:C3:0A:8B:9D:7B
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/30UMNc4k-se5iKLW6OoIwwqLnXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.44.0/23
176.124.72.0/21
194.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f3:27:c8:43:a6:13:b8:f7:42:76:2e:b2:00:33:ff:50:f3:
d0:59:fb:b1:d1:0e:d5:94:dd:9c:3b:22:5a:43:1a:e7:c6:f6:
eb:5b:a2:80:09:12:00:49:48:bb:d9:f6:3e:60:44:61:2a:17:
b6:03:b9:75:d3:a2:27:70:20:66:17:a5:27:03:a0:ff:8c:fa:
0c:a0:c6:ca:21:e6:fe:eb:d9:3c:52:0c:06:2c:40:ed:57:76:
53:79:e3:82:e7:09:f2:fb:35:73:0d:49:5a:96:52:0b:7c:b0:
34:50:84:74:ae:69:b7:3f:7f:58:f8:39:1b:02:00:bc:7e:20:
34:91:eb:78:6c:01:8b:d9:62:be:05:70:e8:79:5a:c2:83:a8:
4b:ed:a3:8d:d8:e6:a4:c0:c8:ae:4d:8e:d6:31:2e:6f:26:98:
cb:41:54:55:8d:bb:21:bc:c3:78:99:cb:1d:94:05:17:97:f8:
a2:a3:c3:4f:6e:ac:91:af:2e:c6:2b:5a:89:14:e7:95:cd:53:
95:89:b2:c1:51:13:e0:09:da:d1:c5:4e:36:12:4d:60:46:2d:
05:f1:92:f7:93:d0:d4:4c:0f:b1:9a:18:9d:cb:3f:96:4e:cd:
03:ad:72:39:87:f7:34:88:8c:8e:51:11:94:b9:c0:85:2d:a0:
f2:51:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 07:37:49 2023 by rpki-client on console-ams.rpki-client.org