Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/tsAxMJI__JHuBh1ibK4a7Agw0ZI.roa
File: tsAxMJI__JHuBh1ibK4a7Agw0ZI.roa (raw, json)
Hash identifier: PTI1CZAxaMWCpn19q8Ko1pY3VKZkZbV6EnBsOcRFaOI=
Subject key identifier: B6:C0:31:30:92:3F:FC:91:EE:06:1D:62:6C:AE:1A:EC:08:30:D1:92
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018CEDC466F8CA641B6DB159B642A6F6E6DC
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/tsAxMJI__JHuBh1ibK4a7Agw0ZI.roa
Signing time: Tue 09 Jan 2024 10:28:40 +0000
ROA not before: Tue 09 Jan 2024 10:28:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.14.37.0/24 maxlen: 24
185.155.52.0/24 maxlen: 24
185.155.54.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 17:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:c4:66:f8:ca:64:1b:6d:b1:59:b6:42:a6:f6:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 9 10:28:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c03130923ffc91ee061d626cae1aec0830d192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:81:54:87:b2:8a:5f:32:8d:31:f8:e2:57:
84:5e:21:0c:ae:1a:e2:69:9e:03:71:3d:8a:2a:a2:
9f:74:3c:8c:00:f2:26:9e:ec:92:32:37:98:d4:43:
0c:27:86:db:48:a7:b8:52:9d:99:91:61:e2:c6:dc:
a6:e9:08:73:24:60:f6:a7:a5:8a:2a:4f:31:64:70:
37:eb:38:70:87:84:dc:26:87:15:58:38:9c:93:04:
b9:48:63:ae:26:bc:e8:3b:fb:25:a5:ea:94:81:ea:
09:cc:07:9c:d6:53:d6:b7:86:32:8d:7a:8b:8c:98:
9f:d4:23:81:b4:ab:1e:da:c1:ff:91:c0:6a:70:87:
d6:41:e3:6b:85:aa:49:a2:1f:ee:eb:6c:4b:9d:7c:
ff:a1:d9:40:c1:b2:43:fd:96:7d:83:88:4c:ba:b3:
3e:9f:a5:05:55:0b:19:92:60:36:1c:01:2c:c3:fe:
45:38:dc:42:bb:68:33:30:bb:c8:44:79:0a:04:7f:
d0:03:fe:1f:8d:9e:cb:e1:81:84:4c:78:62:5e:69:
40:74:20:59:ca:1b:df:46:48:b5:95:94:2e:77:a1:
4b:88:46:05:88:d5:0b:27:02:16:7f:b1:88:d2:4f:
e8:e1:fd:28:f6:a8:fd:15:a4:2e:74:20:6a:62:8a:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:31:30:92:3F:FC:91:EE:06:1D:62:6C:AE:1A:EC:08:30:D1:92
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/tsAxMJI__JHuBh1ibK4a7Agw0ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
185.155.52.0/24
185.155.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:04:6c:d9:e0:08:83:4a:14:3e:b0:60:b3:44:e0:c8:5e:a6:
44:94:8a:72:32:3c:e1:76:24:77:07:ce:91:18:37:c9:43:db:
c0:ff:18:fd:a5:ea:1f:97:06:90:0d:d8:cb:4f:d9:0d:ee:71:
a0:52:a7:7f:ed:d1:17:35:93:0c:62:a1:f0:86:df:80:a2:a2:
77:1b:23:a1:06:c5:e3:42:64:8a:c7:11:3e:36:c5:12:38:27:
96:8c:b4:dd:41:d1:6b:08:d4:a7:34:7b:21:07:11:34:cb:96:
e5:ea:fa:88:48:7e:2e:c5:e0:6f:7e:55:1f:b5:12:bd:3b:55:
eb:87:50:e4:e4:7e:83:5b:e2:d9:8c:81:cb:25:2f:84:95:47:
9a:59:47:27:dd:0b:f8:96:31:ac:38:cf:97:24:6a:cb:2f:e7:
4a:d3:17:a6:13:45:5c:70:9b:20:50:f0:b1:66:97:3f:95:c7:
48:8f:47:68:70:b3:92:e5:13:bb:3e:87:c4:3f:45:81:02:7e:
99:5b:c2:c3:b3:02:83:c0:d2:d1:8b:5a:bc:e9:0c:8d:ac:ca:
a0:a9:1b:f8:5c:61:e4:d7:35:eb:23:df:39:d3:52:90:2a:d7:
33:68:24:0b:a0:34:ca:f8:cf:d0:83:a7:3d:86:cd:83:bd:12:
5b:6a:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org