Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/9VMT7nufcpNT5qtUWoYmh9cxT2o.roa
File: 9VMT7nufcpNT5qtUWoYmh9cxT2o.roa (raw, json)
Hash identifier: rZDwDZs2WRBepRR5Xgx8rGWtWQNvK3A2pQR93f21a7I=
Subject key identifier: F5:53:13:EE:7B:9F:72:93:53:E6:AB:54:5A:86:26:87:D7:31:4F:6A
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 018C2104BDDABAEE06F85374BA5A1A9115A4
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/9VMT7nufcpNT5qtUWoYmh9cxT2o.roa
Signing time: Thu 30 Nov 2023 16:16:48 +0000
ROA not before: Thu 30 Nov 2023 16:16:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20714
IP address blocks: 195.177.124.0/22 maxlen: 22
195.214.196.0/22 maxlen: 22
31.128.224.0/20 maxlen: 20
31.42.48.0/21 maxlen: 21
31.128.240.0/23 maxlen: 23
31.42.56.0/24 maxlen: 24
31.128.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:04:bd:da:ba:ee:06:f8:53:74:ba:5a:1a:91:15:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Nov 30 16:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f55313ee7b9f729353e6ab545a862687d7314f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:b6:9e:7c:81:ad:e1:75:a0:28:0a:48:a0:
6d:e2:cf:d2:c9:9e:be:0c:dc:9e:82:12:cd:b5:ee:
20:3b:5b:42:a0:cc:14:92:8e:fb:d3:f2:bf:70:92:
84:93:91:41:9e:08:2a:3f:1c:b0:67:b3:e7:fb:21:
b2:02:bc:59:2f:97:83:d0:69:5c:82:10:75:c1:64:
28:ae:cc:bc:36:56:cb:2e:cc:df:cf:95:53:96:90:
b4:3c:63:27:48:47:cc:2c:7e:db:ac:c9:14:28:e0:
da:35:2b:df:b1:48:08:23:a8:6e:b5:26:61:c8:af:
7f:8f:40:08:b0:56:45:a3:11:b3:e0:e8:f5:db:e8:
1b:b0:29:0c:6b:1b:6a:93:d4:54:24:8d:ef:ea:ec:
dd:ea:ed:91:fa:c2:b9:bb:cd:0e:68:85:74:05:67:
eb:f0:e7:6a:cb:7a:a8:b3:32:fc:9a:ba:41:ca:1b:
b7:df:51:17:23:1d:86:94:9f:d7:ae:79:b8:f4:dc:
8b:e1:9d:b1:75:7f:7e:61:97:8f:f0:d1:b5:ec:2f:
91:ee:77:9f:e3:0c:6f:28:18:23:ac:52:d6:70:db:
c9:76:f8:20:bd:b0:7d:38:3c:c6:15:3a:b8:55:66:
b4:e8:ff:a8:14:1c:67:0f:b0:8f:81:1a:3f:32:71:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:13:EE:7B:9F:72:93:53:E6:AB:54:5A:86:26:87:D7:31:4F:6A
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/9VMT7nufcpNT5qtUWoYmh9cxT2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.48.0-31.42.56.255
31.128.224.0-31.128.241.255
31.128.255.0/24
195.177.124.0/22
195.214.196.0/22
Signature Algorithm: sha256WithRSAEncryption
74:1f:48:99:9c:b4:04:18:26:1c:09:97:e8:fd:e9:94:00:fa:
bd:cf:d9:3a:45:d5:41:d4:75:2c:bb:15:53:23:80:29:8e:f0:
00:b2:91:ba:22:48:95:c4:97:40:6d:93:aa:cb:e6:ce:f1:33:
3b:c6:47:69:52:9b:bc:89:2a:02:6e:08:c5:4c:db:7b:88:8c:
ce:34:d3:09:30:16:d6:d1:7a:85:33:95:00:15:46:e9:c6:89:
15:20:6d:63:57:e2:58:ec:e9:5e:61:4c:ce:90:36:1e:f5:52:
2d:73:dd:64:d0:8e:b0:bd:07:95:22:6f:ff:fd:b8:dd:dc:eb:
21:64:95:27:33:52:ba:41:ec:de:01:96:c6:e4:7d:dc:f9:7b:
aa:32:18:89:d7:4f:00:6c:05:aa:2b:9b:24:44:6e:fe:e1:f9:
04:fa:de:19:96:c6:d2:fe:a2:7d:88:be:34:64:33:c1:7f:37:
02:34:db:22:d5:f7:44:19:9a:cb:89:58:31:51:2a:5e:89:1b:
3d:12:1e:6e:83:4f:d7:fd:fd:88:12:70:8b:7e:5f:bd:5c:d3:
12:9e:db:16:6a:e9:c4:34:c2:fe:63:98:ca:4c:9b:45:6f:4b:
7e:cd:c3:8c:85:5d:c9:4e:37:d7:f1:5a:d6:82:d9:05:d8:3f:
13:13:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:32 2024 by rpki-client on console-fra.rpki-client.org