Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/z-Zoj6Y5RwHC6c5HfxjQ70WTloM.roa
File: z-Zoj6Y5RwHC6c5HfxjQ70WTloM.roa (raw, json)
Hash identifier: 6w3Wg7Rsjt5YJ1FP2DjwgImd32XtEffufYGarzN/XpY=
Subject key identifier: CF:E6:68:8F:A6:39:47:01:C2:E9:CE:47:7F:18:D0:EF:45:93:96:83
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 018D9D66941CE486CC38D4C5E65D3D6FD924
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/z-Zoj6Y5RwHC6c5HfxjQ70WTloM.roa
Signing time: Mon 12 Feb 2024 12:59:21 +0000
ROA not before: Mon 12 Feb 2024 12:59:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33885
IP address blocks: 31.211.192.0/18 maxlen: 18
37.46.160.0/19 maxlen: 19
37.247.0.0/19 maxlen: 19
84.55.64.0/18 maxlen: 18
84.246.88.0/21 maxlen: 21
89.253.64.0/18 maxlen: 18
92.244.0.0/19 maxlen: 19
94.137.96.0/19 maxlen: 19
109.104.0.0/19 maxlen: 19
178.78.192.0/18 maxlen: 18
185.86.100.0/22 maxlen: 22
212.107.128.0/19 maxlen: 19
2a01:3b8:4000::/35 maxlen: 35
Validation: Failed, certificate revoked on Mon 19 Feb 2024 08:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:66:94:1c:e4:86:cc:38:d4:c5:e6:5d:3d:6f:d9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Feb 12 12:59:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfe6688fa6394701c2e9ce477f18d0ef45939683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:c5:0d:f4:a7:3c:31:54:b4:1d:46:6b:af:
a0:66:ab:91:5f:bf:2e:0f:c9:7f:a3:d8:7b:ca:17:
d7:48:25:76:d2:2a:ba:62:a8:22:d3:e1:cf:65:b2:
8f:4e:19:e0:b0:22:7b:0b:68:d2:05:18:69:e2:c3:
13:1e:06:74:7b:d6:5a:bd:c1:9a:49:ce:67:f9:6b:
6e:40:92:39:0e:70:cc:0f:15:0f:b0:8a:d8:48:44:
6a:dc:10:6e:e7:37:3d:89:0c:1b:3a:12:79:37:98:
81:a7:f5:53:2d:7d:d4:0e:a8:91:e8:52:d0:e2:b1:
b7:c0:6f:06:b9:2d:fc:2e:43:23:11:77:9f:a1:c8:
fe:31:8a:a1:f2:6b:24:50:9d:4b:84:2b:03:f1:dd:
cc:d7:f6:66:45:8b:7c:cf:9e:56:42:b7:f7:89:9d:
4d:cf:af:0f:65:2a:09:4b:9d:7f:63:07:8d:40:10:
42:66:b3:4c:ef:4a:14:c3:13:1d:b7:be:32:61:3f:
d0:c6:d4:c1:a3:43:1d:5c:e8:53:a7:12:d5:a5:96:
21:55:b9:a0:c0:0b:08:be:39:87:d4:9e:14:6d:85:
34:ab:e2:a9:15:4d:2d:4f:a8:8b:2c:d0:2a:c5:66:
12:1b:d4:ea:0f:28:72:1a:08:7b:07:98:f4:76:21:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:68:8F:A6:39:47:01:C2:E9:CE:47:7F:18:D0:EF:45:93:96:83
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/z-Zoj6Y5RwHC6c5HfxjQ70WTloM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.192.0/18
37.46.160.0/19
37.247.0.0/19
84.55.64.0/18
84.246.88.0/21
89.253.64.0/18
92.244.0.0/19
94.137.96.0/19
109.104.0.0/19
178.78.192.0/18
185.86.100.0/22
212.107.128.0/19
IPv6:
2a01:3b8:4000::/35
Signature Algorithm: sha256WithRSAEncryption
2c:8d:23:29:00:93:48:ef:e8:2c:30:33:68:19:3f:84:3a:bc:
9a:ac:8b:de:e9:2f:2a:6e:6f:11:c3:a4:75:4f:4c:f4:95:b0:
7c:b7:48:32:e8:24:13:ed:e5:c2:4b:d9:4d:5a:f1:eb:90:c7:
c6:bf:48:bc:a7:ca:b2:3b:e3:a9:32:5d:95:5d:56:28:a9:51:
c0:18:6e:59:c8:65:2b:d8:7d:c0:1c:23:53:7e:a3:58:6f:e1:
df:a4:af:bd:39:d1:5f:9d:e9:35:47:b1:86:95:d8:0a:1f:21:
02:72:dd:03:a5:d4:03:d6:a2:8c:13:eb:02:6b:20:2d:d5:1f:
d4:73:2a:d5:09:e2:44:cc:53:c2:9d:92:bb:3c:ee:c1:40:3f:
f9:6e:dc:23:f8:9e:77:4b:bf:79:25:18:39:77:f5:e7:ef:68:
ff:92:7a:de:f2:96:53:cc:89:13:d2:2e:bb:e4:ef:2e:7c:ae:
5a:60:23:3e:17:5e:61:82:31:d9:56:33:1e:6e:3e:e0:4e:d7:
23:8e:4a:39:2c:27:bd:1b:a2:76:13:b9:a2:3f:bc:a4:e0:a0:
95:26:f9:dc:1d:72:60:71:e0:0f:32:08:fc:ad:9c:c3:aa:5e:
3a:35:27:07:01:37:9b:7e:4f:e9:54:ab:cf:5c:22:f8:14:aa:
eb:3b:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 12:16:55 2024 by rpki-client on console-ams.rpki-client.org