Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/DAh38KgqZtcf8yHZzSpZrHJlzUE.roa
File: DAh38KgqZtcf8yHZzSpZrHJlzUE.roa (raw, json)
Hash identifier: zoKcJ3vSMlAIF9YlHNcPBbcppcgvEEfyykpStunXTY0=
Subject key identifier: 0C:08:77:F0:A8:2A:66:D7:1F:F3:21:D9:CD:2A:59:AC:72:65:CD:41
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018C16A379D0020F9639DCC0AE6924ACB259
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/DAh38KgqZtcf8yHZzSpZrHJlzUE.roa
Signing time: Tue 28 Nov 2023 15:54:21 +0000
ROA not before: Tue 28 Nov 2023 15:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51474
IP address blocks: 176.108.228.0/22 maxlen: 22
31.131.160.0/22 maxlen: 22
91.233.193.0/24 maxlen: 24
91.233.194.0/23 maxlen: 23
176.113.96.0/23 maxlen: 23
178.212.201.0/24 maxlen: 24
178.212.206.0/24 maxlen: 24
178.212.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:a3:79:d0:02:0f:96:39:dc:c0:ae:69:24:ac:b2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Nov 28 15:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0877f0a82a66d71ff321d9cd2a59ac7265cd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:d2:34:81:b6:31:f6:13:ac:04:47:8f:0f:
9c:a2:7c:d8:0d:6a:0a:80:c1:64:ad:1f:c6:4c:4b:
9b:12:bc:db:4a:cb:9d:90:27:8c:85:ad:9f:52:65:
42:fe:6a:81:67:54:b9:89:db:30:94:4b:76:53:0f:
31:c5:4d:9a:c7:6f:ed:13:cf:17:9e:13:25:94:70:
b8:40:99:f8:57:74:75:f0:25:2a:2c:ef:ce:55:71:
ed:f8:96:f9:d4:af:0d:17:56:5f:8f:60:4a:e8:da:
80:53:37:7b:ec:e1:be:2e:4b:3f:1f:48:c1:c7:b3:
c0:6e:4b:68:a0:96:10:3a:d0:f6:03:0c:4f:19:8c:
1e:0f:29:2b:89:c2:83:1f:6d:50:f8:ba:bd:8f:70:
d3:7b:7a:ef:42:0b:ac:53:9b:66:7d:e4:0a:af:76:
4e:a3:cc:cf:5f:4d:18:51:c8:c9:04:71:40:74:8e:
54:31:3b:6a:49:dc:be:58:e2:0a:82:d7:7b:eb:61:
3c:59:d7:60:5a:dc:ca:2a:75:4b:32:74:97:e3:79:
ca:07:88:a7:ee:a6:2e:00:bc:ab:32:bc:06:79:52:
85:c4:45:3a:33:27:70:f5:58:79:07:e5:e6:58:84:
a5:38:8a:f9:b2:29:7a:61:c3:97:c6:ce:3c:66:4e:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:77:F0:A8:2A:66:D7:1F:F3:21:D9:CD:2A:59:AC:72:65:CD:41
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/DAh38KgqZtcf8yHZzSpZrHJlzUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.160.0/22
91.233.193.0-91.233.195.255
176.108.228.0/22
176.113.96.0/23
178.212.200.0/23
178.212.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5c:91:bd:9d:15:c8:14:03:56:87:ed:94:b5:0e:9d:de:92:
25:ff:45:95:0c:cb:a2:f9:3f:3f:16:47:98:ba:b0:b5:d8:3b:
15:27:45:bf:18:b4:ce:80:53:da:50:0f:e2:4b:3e:7b:7c:1b:
39:d1:25:53:6f:87:d7:0e:1a:16:13:12:6b:6a:68:58:13:af:
c9:eb:a3:8a:53:1b:df:fd:01:cf:d3:a6:21:cf:87:e3:72:b5:
c5:1e:4d:f8:86:cb:de:52:1e:1c:78:05:f1:a4:39:67:24:23:
ad:dd:c7:69:13:0e:4f:c8:84:eb:4e:c3:8d:c6:e3:30:cc:9f:
ae:43:3a:3e:26:be:f8:e7:ea:cc:e4:9b:20:98:35:7f:bf:1c:
be:2d:b1:f3:f8:f1:7e:62:54:6e:93:86:b1:e4:ec:f1:25:80:
b0:f9:d1:1d:58:07:97:c3:e0:36:43:cd:22:8e:2d:7c:ce:64:
7e:3c:87:cf:08:10:f7:97:d2:69:8f:b0:9a:ec:10:99:e3:a7:
be:23:65:18:dd:0f:0c:0b:3a:2e:ae:a4:ef:1e:0b:ef:9c:6d:
1d:0f:6d:77:26:54:91:51:31:7d:33:33:db:8f:85:54:4f:64:
56:f8:4e:22:de:8b:ad:cf:6a:ea:ea:18:21:06:6a:42:d8:47:
75:27:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org