Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/3EasauLvg6SdGrutUO-Q4Fj8CtM.roa
File: 3EasauLvg6SdGrutUO-Q4Fj8CtM.roa (raw, json)
Hash identifier: wcBKWzyHN7OdESDjqFsr7/6KOPH+Rtoc1n6HtTaPmhQ=
Subject key identifier: DC:46:AC:6A:E2:EF:83:A4:9D:1A:BB:AD:50:EF:90:E0:58:FC:0A:D3
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 018570FBDBDAAB52C3D1900F608C336A45DA
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/3EasauLvg6SdGrutUO-Q4Fj8CtM.roa
Signing time: Mon 02 Jan 2023 05:37:12 +0000
ROA not before: Mon 02 Jan 2023 05:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3549
IP address blocks: 31.204.115.0/24 maxlen: 24
79.171.60.0/24 maxlen: 24
37.130.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 16:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:db:da:ab:52:c3:d1:90:0f:60:8c:33:6a:45:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Jan 2 05:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc46ac6ae2ef83a49d1abbad50ef90e058fc0ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:95:03:c5:7f:28:bb:bc:4a:14:d1:0a:96:
d5:1b:33:9a:4c:25:28:c7:ea:46:b2:3d:2d:b4:8a:
fd:de:ea:f3:c8:2e:b0:37:f1:49:43:06:6f:00:e6:
de:b7:18:d2:87:6d:fd:ba:22:f2:68:fe:b8:c2:d3:
3c:ce:5d:bd:57:0a:cf:dd:db:d7:2f:2d:0e:6c:cb:
a6:02:f3:99:84:31:f2:3a:3b:2e:26:69:51:46:0b:
12:05:af:dc:4b:52:73:ef:f2:80:39:b5:1f:21:4d:
c3:00:8c:48:52:43:6c:79:7a:41:47:c5:9f:e7:3f:
f0:8b:66:82:a1:63:68:5f:cf:2b:31:28:48:49:29:
6d:0d:41:90:4e:37:06:2f:f1:5f:1c:a2:d9:b9:65:
28:2d:75:a9:d7:fb:63:b9:21:7a:10:51:0a:46:ec:
1d:f5:d3:e4:ef:09:6d:e2:00:fe:f9:49:6a:a1:0e:
d3:9a:50:b6:50:06:fe:1c:43:b2:a3:eb:15:f5:62:
32:f3:17:25:b6:17:c0:61:17:45:b7:45:a1:0f:66:
d6:7a:8b:a9:6a:ec:a9:da:d4:73:cc:98:c1:18:6c:
56:01:9e:22:f9:75:5d:63:81:8b:a1:b9:6e:7e:08:
2c:3b:48:f6:f2:37:aa:6d:4a:e7:87:41:c4:e3:7e:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:AC:6A:E2:EF:83:A4:9D:1A:BB:AD:50:EF:90:E0:58:FC:0A:D3
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/3EasauLvg6SdGrutUO-Q4Fj8CtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.115.0/24
37.130.130.0/24
79.171.60.0/24
Signature Algorithm: sha256WithRSAEncryption
47:14:bc:58:1c:d1:0e:4f:09:52:6f:7f:69:88:b3:f9:4f:f6:
17:34:60:a3:b7:a9:78:ab:56:00:4b:ab:ad:97:d6:63:7e:5b:
0a:9c:a3:72:87:b9:c4:af:aa:9f:13:2d:63:41:ee:34:2f:28:
88:ae:a4:aa:c0:e2:93:4a:c6:df:73:40:6a:d5:7f:a0:17:a6:
7d:ea:b1:10:2d:4a:7f:e3:c6:33:cc:df:33:b0:aa:bb:b7:9b:
2e:ad:31:0c:9a:9f:e5:d5:ae:5b:b6:20:7f:33:50:fa:2d:03:
6e:fc:91:87:41:2e:af:43:ce:2b:4e:d0:f6:f7:fc:bc:29:59:
b1:cc:3d:6e:25:19:c7:1d:8c:fb:90:a5:c3:bf:f2:d8:5a:37:
7a:2d:01:15:be:30:19:68:c7:4a:46:bc:80:ce:f6:96:96:42:
00:69:a2:4c:74:e2:dd:d0:bf:48:1a:72:d5:20:74:c6:6c:a3:
2f:fe:90:28:c8:1d:04:96:bb:cc:61:91:1e:a2:c4:b6:e9:d6:
64:bf:5f:50:de:75:f2:56:3e:b6:45:6b:ff:b8:10:80:d2:c2:
0d:59:71:ed:8b:5c:f2:3a:ac:29:b8:fa:a5:27:e5:de:ad:8a:
38:3e:9c:8b:03:d4:1f:20:b4:70:d9:46:fe:74:c3:c6:73:95:
86:ce:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:45 2024 by rpki-client on console-ams.rpki-client.org