Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/7Co7F34Ja0AcKIMwhn8-YaEPTIQ.roa
File: 7Co7F34Ja0AcKIMwhn8-YaEPTIQ.roa (raw, json)
Hash identifier: Of08XPq9rI4H8deoI0XbRssa1fUHgXv+C1nzxmKOOaU=
Subject key identifier: EC:2A:3B:17:7E:09:6B:40:1C:28:83:30:86:7F:3E:61:A1:0F:4C:84
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 019229408C08E4D4516325A26D49A2070B11
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/7Co7F34Ja0AcKIMwhn8-YaEPTIQ.roa
Signing time: Wed 25 Sep 2024 12:55:48 +0000
ROA not before: Wed 25 Sep 2024 12:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59675
IP address blocks: 31.220.150.0/24 maxlen: 24
128.0.144.0/23 maxlen: 23
128.0.146.0/23 maxlen: 23
128.0.148.0/23 maxlen: 23
128.0.150.0/24 maxlen: 24
128.0.151.0/24 maxlen: 24
128.0.152.0/24 maxlen: 24
128.0.153.0/24 maxlen: 24
128.0.154.0/24 maxlen: 24
185.5.8.0/23 maxlen: 23
185.5.10.0/23 maxlen: 23
213.185.78.0/23 maxlen: 23
213.185.80.0/22 maxlen: 24
213.185.80.0/24 maxlen: 24
213.185.84.0/23 maxlen: 23
2a02:45c0::/32 maxlen: 48
2a02:45c0:1::/48 maxlen: 48
2a02:45c0:3::/48 maxlen: 48
2a02:45c0:7::/48 maxlen: 48
2a02:45c0:8::/48 maxlen: 48
2a02:45c0:9::/48 maxlen: 48
2a02:45c0:10::/48 maxlen: 48
2a02:45c0:13::/48 maxlen: 48
2a02:45c0:18::/48 maxlen: 48
2a02:45c0:19::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Oct 2024 19:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:40:8c:08:e4:d4:51:63:25:a2:6d:49:a2:07:0b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Sep 25 12:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec2a3b177e096b401c288330867f3e61a10f4c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:3e:03:b5:ac:18:f7:70:bd:24:82:b7:a6:
53:29:f8:89:3f:c9:04:b8:5a:24:d2:7d:76:83:a2:
4c:90:74:1d:6c:c1:40:16:cc:df:d5:72:fd:3e:f1:
c0:0f:3e:91:b3:9e:72:17:05:c0:3e:fd:48:f6:53:
ef:2e:82:75:c5:90:f9:10:59:95:57:89:e0:e8:b5:
61:1d:c3:b0:fc:f1:be:f6:7e:f7:4a:a9:90:cd:db:
d1:f0:5a:5c:48:67:90:00:85:46:fc:3b:6c:e9:ee:
e3:16:b3:d2:c0:93:81:e8:db:70:71:6b:56:b9:4a:
30:3a:9b:52:87:2e:15:f5:ff:7d:a8:2c:c7:df:1d:
3c:b2:4f:df:d2:b4:8d:68:7b:16:27:04:10:64:60:
37:e9:b7:7b:47:15:fd:7d:0d:65:f4:32:f3:1d:74:
07:dc:c5:b3:63:8a:3a:9d:6a:44:3a:f6:90:b9:67:
ef:74:5f:bf:ce:7c:b4:8a:83:2c:84:12:97:8b:94:
b8:63:cb:35:0f:17:34:7e:fb:88:8c:f5:b0:4b:cc:
80:df:99:57:b9:76:73:cc:b1:e6:e1:ad:df:4e:f9:
f1:b0:8e:21:94:bd:e3:58:bc:8c:1a:29:7e:13:d4:
76:2e:5e:9b:09:57:46:66:e0:12:92:f4:b1:8a:3f:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:3B:17:7E:09:6B:40:1C:28:83:30:86:7F:3E:61:A1:0F:4C:84
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/7Co7F34Ja0AcKIMwhn8-YaEPTIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.150.0/24
128.0.144.0-128.0.154.255
185.5.8.0/22
213.185.78.0-213.185.85.255
IPv6:
2a02:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:3a:ec:47:be:78:c8:32:10:85:d5:75:b8:47:0e:63:e1:1b:
3e:2c:5a:0d:bc:b5:9e:05:41:6d:2e:39:e7:bb:35:4c:c8:30:
b1:ca:fe:a0:e3:93:a5:6b:ed:63:b4:5d:1f:3e:7c:d8:a9:1d:
cd:06:b5:02:4f:84:19:8e:ad:c5:2e:0e:b1:eb:49:20:ee:ef:
26:d5:c3:5b:a1:c2:16:92:35:6e:39:7d:a9:71:41:47:ce:c2:
39:bc:71:82:4c:ed:f1:22:a5:1f:ec:9f:52:7e:d8:e8:6f:8e:
bb:02:1a:d6:e1:d2:9e:61:a8:0c:5b:ea:d4:a5:37:8a:0a:91:
7f:41:69:3a:42:07:bb:7d:51:cd:3b:b0:97:1c:ec:70:92:60:
3b:e3:7b:1d:09:87:6f:5d:64:d9:00:0a:29:a9:a1:a0:3e:e4:
5e:d8:50:82:65:e2:eb:45:7c:68:29:94:2a:6c:85:81:9f:b1:
90:ab:4b:65:69:5c:a5:ea:b5:ba:d6:ee:10:c0:de:42:f5:6c:
32:83:6d:f1:65:1e:1a:48:97:f1:80:e5:da:3a:51:9b:b6:2f:
7b:b1:04:9a:c7:70:63:1e:29:ed:91:ec:2d:a8:c8:75:ca:f2:
b3:66:59:1c:a8:ee:ec:93:4a:6d:2f:8d:a1:63:b6:99:5b:a8:
64:9e:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 21:37:44 2024 by rpki-client on console-fra.rpki-client.org