Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/iCsLFnX0iprYeBCaHPEr-1E2Ew0.roa
File: iCsLFnX0iprYeBCaHPEr-1E2Ew0.roa (raw, json)
Hash identifier: qio7Tp1eO3vpOethH7PPvj33tQgl+AvXMwaYFfbRxXA=
Subject key identifier: 88:2B:0B:16:75:F4:8A:9A:D8:78:10:9A:1C:F1:2B:FB:51:36:13:0D
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01905EF2E2650BF5DFF917DDF01A27A00C94
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/iCsLFnX0iprYeBCaHPEr-1E2Ew0.roa
Signing time: Fri 28 Jun 2024 13:04:54 +0000
ROA not before: Fri 28 Jun 2024 13:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 31.129.22.0/24 maxlen: 24
45.95.232.0/24 maxlen: 24
45.95.233.0/24 maxlen: 24
92.118.112.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.247.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 12:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:f2:e2:65:0b:f5:df:f9:17:dd:f0:1a:27:a0:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jun 28 13:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=882b0b1675f48a9ad878109a1cf12bfb5136130d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:1b:a3:bc:f0:61:14:14:f4:2b:be:57:eb:
dc:71:a5:c7:9a:43:d4:5f:1c:98:9e:0a:52:aa:19:
c6:2d:16:ba:f3:35:69:0a:a3:25:bd:12:70:84:36:
f3:46:85:09:bd:99:0b:3a:2e:a1:3f:b4:53:01:c6:
88:8f:27:35:19:da:91:2b:ff:6f:a4:6c:54:91:c3:
96:38:a8:db:83:0b:d8:3f:52:7b:4e:9b:00:93:c0:
47:e7:77:a7:bf:c4:e8:0d:ef:aa:b4:7f:f1:d7:31:
5b:56:38:a7:ed:ef:fd:c7:73:ab:61:a9:01:cc:17:
69:7a:7c:03:95:72:6a:48:8d:b2:90:54:73:26:75:
6a:4d:b1:c2:84:23:67:1c:2b:32:d7:a3:5b:58:19:
4f:d5:34:b3:fe:dd:16:d2:44:13:62:45:d2:af:cf:
bc:46:1e:84:34:c0:bc:f9:26:51:5e:7b:06:12:13:
d7:f1:58:d3:ca:7d:0b:ba:a9:e6:87:f6:57:e1:dc:
7c:fb:ef:2f:4a:47:5b:c2:db:3f:c6:6e:6a:ae:24:
ae:f9:1b:81:2f:2a:2c:11:b0:65:2a:f8:49:f4:22:
b3:76:46:36:37:7f:36:2a:4e:f1:1b:f5:a1:31:37:
2d:f3:54:84:23:c1:ad:55:0e:1a:d8:22:97:a3:e0:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:0B:16:75:F4:8A:9A:D8:78:10:9A:1C:F1:2B:FB:51:36:13:0D
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/iCsLFnX0iprYeBCaHPEr-1E2Ew0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.22.0/24
45.95.232.0/23
92.118.112.0/24
141.98.233.0-141.98.234.255
185.247.184.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a4:87:cd:08:3c:1d:b0:96:21:93:70:a5:1a:f1:1b:a8:03:
0a:f3:39:ac:da:11:10:eb:73:98:4f:9c:6e:52:95:ab:06:41:
44:d8:6f:24:86:a7:93:fa:9c:40:22:a2:a5:7e:69:8b:3a:a8:
ac:88:d6:4a:2c:84:9f:64:68:50:45:5b:bb:27:da:ba:69:6c:
21:d5:1c:8f:9f:1a:1c:72:c3:53:1e:a6:15:77:d7:5c:6d:3f:
a7:23:67:50:48:6b:1f:a0:e6:90:a6:5c:96:0c:61:a6:bd:06:
d7:26:5a:9e:8a:c1:01:af:63:ec:82:e7:7d:7f:8c:68:43:f0:
f9:21:90:5e:18:50:02:ee:93:4e:7e:05:50:b0:13:3e:0a:85:
9f:63:09:cb:39:0f:a0:1c:63:55:f7:72:fd:05:eb:a0:02:fc:
b6:c4:c5:00:99:10:21:08:f0:ba:98:4f:96:ad:42:96:14:ee:
82:80:68:58:5a:72:7d:7c:a3:1d:f4:82:19:b8:dd:e7:9b:8c:
3b:19:65:29:aa:30:20:00:a9:32:cf:35:8a:59:ca:cd:37:bb:
5f:f5:1a:4e:0d:b2:44:be:6c:0f:2d:2a:5e:d6:b9:b9:7a:11:
71:a6:88:d7:5c:7c:54:63:7f:50:37:ac:75:37:ce:18:25:b2:
52:03:66:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 14:03:38 2024 by rpki-client on console-ams.rpki-client.org