Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/cVOyKWxs3xJhXKP7mEDSzCoD9mw.roa
File: cVOyKWxs3xJhXKP7mEDSzCoD9mw.roa (raw, json)
Hash identifier: APrPicD3oyShD1Azw1R3OJjsrrvZ1zVMu1SgjST5lKo=
Subject key identifier: 71:53:B2:29:6C:6C:DF:12:61:5C:A3:FB:98:40:D2:CC:2A:03:F6:6C
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 0190A297C76FADC48456B96FF8CB10936361
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/cVOyKWxs3xJhXKP7mEDSzCoD9mw.roa
Signing time: Thu 11 Jul 2024 16:19:34 +0000
ROA not before: Thu 11 Jul 2024 16:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 81.30.105.0/24 maxlen: 24
121.127.37.0/24 maxlen: 24
202.49.176.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
203.31.40.0/24 maxlen: 24
2a13:d207::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 03 Sep 2024 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:97:c7:6f:ad:c4:84:56:b9:6f:f8:cb:10:93:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Jul 11 16:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7153b2296c6cdf12615ca3fb9840d2cc2a03f66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:7c:3a:d7:91:5e:8e:cd:b6:33:74:8c:60:
e4:4f:b8:ed:48:b3:fd:e2:a3:28:d5:b5:e9:cc:00:
e6:85:52:44:ae:41:7c:84:e7:e1:f4:aa:64:d3:f1:
80:37:df:48:2b:d7:b2:27:a5:73:20:18:bb:7a:ba:
b6:67:c5:86:e2:c5:fd:3f:aa:bb:e9:e3:38:c7:5c:
0f:ff:87:f5:b8:f8:a8:b2:85:e9:d6:9b:78:16:42:
9d:dc:e2:0d:ff:b3:68:72:11:66:a9:5b:4b:97:c2:
ef:23:78:6c:b2:cb:60:0e:c5:76:72:85:a9:72:42:
59:79:40:19:d2:5e:bc:2d:24:44:9b:e6:a4:26:1b:
36:b5:a8:75:b3:c4:26:6a:ab:14:3d:a6:9e:ad:56:
78:4a:0b:59:57:93:43:11:08:69:15:36:67:bc:6c:
2a:7a:78:53:0f:92:3d:65:88:3f:27:42:4d:df:48:
50:83:81:65:2c:46:e4:54:d6:f6:1c:0f:58:cf:2a:
72:39:7e:df:8c:e1:74:d6:70:49:89:7e:9d:7f:02:
94:66:e0:c2:1e:28:d2:33:54:67:36:70:27:eb:fb:
0f:c5:e8:7c:cf:ee:11:17:a5:32:c2:5e:70:e2:8d:
47:d6:a4:0e:42:47:29:2a:b9:ad:94:10:bc:7b:dc:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:53:B2:29:6C:6C:DF:12:61:5C:A3:FB:98:40:D2:CC:2A:03:F6:6C
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/cVOyKWxs3xJhXKP7mEDSzCoD9mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.105.0/24
121.127.37.0/24
202.49.176.0/24
202.181.148.0/24
203.31.40.0/24
IPv6:
2a13:d207::/32
Signature Algorithm: sha256WithRSAEncryption
6f:7b:2f:9a:77:05:04:b4:c6:65:41:ae:34:0f:9d:57:60:cd:
81:c7:c7:a6:9c:86:7c:77:ff:2c:15:79:2e:5e:52:09:35:2f:
28:1a:db:85:1b:fe:8a:59:51:dc:7a:64:92:a1:4a:6a:05:ce:
54:ba:b4:ef:0b:64:1b:52:4a:e5:f3:9f:99:ec:80:e3:16:9d:
f6:49:40:4f:86:5a:76:82:eb:2a:7b:a5:4f:52:05:f9:4e:c3:
8d:4a:5f:61:83:1c:df:69:86:c0:ff:e0:e9:1b:2a:c9:11:3d:
73:a4:96:be:65:e3:cd:f0:bb:f9:85:82:f9:e7:eb:92:1e:3f:
ad:38:18:c5:56:3e:3d:18:6e:91:53:ba:9d:de:f1:56:06:ec:
cf:83:33:20:82:ce:37:9e:a8:fd:12:29:b2:ba:a2:fd:4f:f7:
53:de:f7:f4:37:25:85:3b:58:b6:f3:2b:71:86:19:13:f6:11:
76:fb:00:05:ac:fc:38:8e:32:66:de:e4:c0:15:46:c1:fe:a1:
9b:33:c1:a1:19:cc:92:2b:b0:60:b4:3d:7a:ae:f3:c5:db:8f:
da:b3:46:ab:0d:53:6d:4b:ba:ae:e8:fe:ac:ed:4d:a0:7f:6f:
24:2c:cb:91:58:19:11:8b:de:23:a4:f3:64:92:82:bc:76:41:
fe:3a:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 17:39:36 2024 by rpki-client on console-ams.rpki-client.org