Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/42MJooXyLhfMFlnM7mfXq6MLlFU.roa
File: 42MJooXyLhfMFlnM7mfXq6MLlFU.roa (raw, json)
Hash identifier: UP854INCPjA6Cq+nYeVsLfyQJpGco5oeE3KiZA07S9Q=
Subject key identifier: E3:63:09:A2:85:F2:2E:17:CC:16:59:CC:EE:67:D7:AB:A3:0B:94:55
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018A9062D27444A3824E78C285EFB463F923
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/42MJooXyLhfMFlnM7mfXq6MLlFU.roa
Signing time: Wed 13 Sep 2023 21:11:50 +0000
ROA not before: Wed 13 Sep 2023 21:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 188.132.229.0/24 maxlen: 24
188.132.240.0/24 maxlen: 24
188.132.242.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.147.0/24 maxlen: 24
212.68.48.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
188.132.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:62:d2:74:44:a3:82:4e:78:c2:85:ef:b4:63:f9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Sep 13 21:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e36309a285f22e17cc1659ccee67d7aba30b9455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:5e:6d:dd:83:e9:06:7c:ab:a2:a9:58:bf:
b7:62:8d:38:2e:51:81:c0:c7:56:cd:80:e4:39:73:
d2:a7:eb:51:9b:d0:ca:d5:9f:68:17:de:cf:d2:e9:
64:58:1b:43:65:32:3e:cd:b1:d9:c5:a1:4d:27:d2:
a5:6b:30:03:08:68:2a:9c:33:84:68:cd:9c:30:28:
f2:69:41:5f:96:87:e5:93:3d:f3:48:83:8f:48:7c:
30:d4:94:cf:aa:0c:ee:14:45:36:25:6c:2c:88:8a:
24:8a:a0:ca:53:a4:ad:a6:85:61:9a:23:4a:2a:8b:
3d:31:30:f7:4d:41:d3:bf:2b:c5:e8:9d:60:df:1e:
88:b3:e7:9c:1a:77:1f:73:57:bf:c8:41:8a:3a:65:
4c:88:82:bb:9a:c8:44:c9:32:40:a5:b2:46:96:bc:
c3:e4:6c:d6:b8:92:74:6f:b5:8b:1b:ab:b6:94:80:
32:a1:d0:2a:2a:03:24:8a:92:e8:53:85:65:b9:38:
16:69:15:5d:96:e8:27:57:e6:11:85:de:0a:de:f4:
18:5a:17:48:d4:01:f0:94:af:b5:49:ae:69:2f:54:
45:ba:9c:44:49:b3:a1:4e:ee:f3:04:f1:f7:c2:0d:
3e:12:70:e6:c2:aa:b5:5f:45:ca:2f:fb:95:bd:22:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:09:A2:85:F2:2E:17:CC:16:59:CC:EE:67:D7:AB:A3:0B:94:55
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/42MJooXyLhfMFlnM7mfXq6MLlFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
77.92.142.0/24
77.92.145.0/24
77.92.147.0/24
188.132.184.0/24
188.132.210.0/24
188.132.229.0/24
188.132.240.0/24
188.132.242.0/24
212.68.48.0/24
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
09:83:92:03:d5:98:d0:b9:10:1a:78:b3:79:9d:17:7c:cf:41:
f2:68:7f:5e:ed:3d:ae:11:bc:c9:8c:a2:37:dd:4a:fa:5a:29:
93:2c:70:3b:87:ff:db:85:89:6c:e3:52:34:d9:9c:b2:99:74:
78:76:39:9b:a1:29:76:a6:29:65:55:38:58:38:8f:3e:72:83:
eb:5c:70:4b:81:f5:c8:9c:d6:0d:e2:fa:87:25:90:1f:c7:89:
ec:90:cf:0c:43:bc:a4:8e:f6:5d:30:27:31:77:55:a7:f7:32:
bf:c2:98:cc:98:4e:2a:30:51:90:eb:00:35:de:61:39:74:90:
85:14:f6:45:f0:33:c1:60:dc:41:24:f5:99:95:75:fb:28:8c:
3a:8d:a7:42:18:0b:83:45:9a:88:d2:4e:4b:83:cf:26:d6:ff:
db:ab:67:9b:a4:48:dc:0c:0a:7f:7e:32:86:dd:96:34:aa:63:
cd:85:5c:75:0c:a1:f9:a4:b9:e7:e0:26:f9:e4:8b:20:00:1b:
7a:50:0b:8f:22:3b:32:d0:b6:49:09:99:16:ec:1c:4e:43:c1:
27:5e:9f:f0:d8:a3:9c:41:7d:07:56:cc:a3:f2:98:94:99:87:
ce:0e:91:bd:d0:0b:ca:1c:6c:ce:cb:bd:8d:1b:cd:e6:de:57:
7b:d3:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 13:31:51 2023 by rpki-client on console-ams.rpki-client.org