Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/82Sat_0dNo7f9wljK-KwTi5sHMs.roa
File: 82Sat_0dNo7f9wljK-KwTi5sHMs.roa (raw, json)
Hash identifier: 0nkM/nNXgRoilTy/WdYTHW1mKh7bDaje6hE/IARWq5o=
Subject key identifier: F3:64:9A:B7:FD:1D:36:8E:DF:F7:09:63:2B:E2:B0:4E:2E:6C:1C:CB
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018BB42545075F837DF160F687BA744960A5
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/82Sat_0dNo7f9wljK-KwTi5sHMs.roa
Signing time: Thu 09 Nov 2023 12:53:43 +0000
ROA not before: Thu 09 Nov 2023 12:53:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.14.37.0/24 maxlen: 24
185.155.55.0/24 maxlen: 24
185.155.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 16:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:25:45:07:5f:83:7d:f1:60:f6:87:ba:74:49:60:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Nov 9 12:53:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3649ab7fd1d368edff709632be2b04e2e6c1ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:c3:52:88:0e:95:fa:2a:f7:08:29:15:b0:
36:7e:eb:46:61:a7:0c:fe:6c:9f:7c:aa:78:df:6d:
3d:60:58:1c:5e:0c:e7:da:c2:81:ba:8c:ad:e8:02:
b1:88:d0:44:b8:86:4d:3e:d9:26:59:cb:1b:2d:ae:
79:03:e2:3a:52:d7:0d:60:50:d8:c7:46:d5:97:bd:
a0:d3:1b:55:d1:90:05:cf:9c:29:17:22:90:bd:88:
15:2d:f9:b0:72:cc:23:94:c5:fb:01:b8:f2:2e:52:
98:5c:86:12:f5:e7:3a:b6:e0:db:07:f1:a5:9b:f9:
8d:d5:fb:f1:66:ed:ef:f2:cd:d3:dc:0b:75:8c:06:
7f:67:57:00:4c:79:a4:9c:af:9f:d8:9c:e4:f2:40:
df:e8:e0:29:07:31:ad:48:d1:e1:45:ef:0e:0b:da:
05:f4:6f:d2:43:8e:3c:a6:34:5b:95:73:42:22:6a:
5c:de:16:d5:ed:8a:07:49:e0:74:e0:f3:cc:76:a2:
6f:5b:33:c1:2e:17:a9:d9:d6:e6:78:49:72:19:ce:
b9:75:fa:64:1f:df:36:ae:8a:38:2c:c6:de:fa:98:
9d:ce:22:2f:71:67:0f:2c:09:f9:c5:83:68:41:35:
1d:1f:af:76:9d:e9:38:27:f1:52:bd:bc:0b:bc:0a:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:64:9A:B7:FD:1D:36:8E:DF:F7:09:63:2B:E2:B0:4E:2E:6C:1C:CB
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/82Sat_0dNo7f9wljK-KwTi5sHMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
185.155.54.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:37:63:5d:ad:c6:58:0f:a8:f7:52:b1:1b:f4:e0:1a:c8:25:
0f:c2:f3:c3:56:61:20:1f:42:b7:78:53:b3:ba:0c:be:ce:09:
c2:2b:8f:9d:d1:81:50:e7:b2:f6:46:33:20:a6:6b:e8:a6:81:
08:94:87:5c:01:4f:f2:e0:30:ff:4c:ec:20:38:3a:70:b0:d0:
db:c6:8b:12:aa:87:d4:3a:a6:ca:f0:4f:c2:bc:2e:d3:6b:15:
30:c1:b0:12:1b:b5:d1:ce:9a:62:9a:89:24:84:d1:42:57:bd:
bb:37:e9:3a:ea:40:d9:ad:83:df:b7:66:71:10:43:b6:87:a1:
a1:3f:5c:ef:7c:03:0c:a0:a1:83:f9:09:f0:1f:29:b5:9a:84:
28:29:53:22:a3:56:5f:97:1c:ea:99:19:cc:85:f8:f6:1a:ba:
15:c3:96:c7:10:95:5c:74:c8:b1:69:58:20:ee:ac:68:b8:46:
08:f7:98:8c:97:84:b9:22:a6:26:c1:b7:ca:db:ab:c4:63:01:
5f:81:44:42:d6:ae:14:16:25:b1:b9:ba:01:cc:02:51:f6:dd:
7c:93:82:f6:89:bb:29:4a:0d:48:c8:32:3c:9b:78:87:7e:29:
f5:78:36:cd:99:3a:bd:f1:62:e4:4b:28:50:9e:26:67:97:ea:
af:03:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org