Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1-BOuIj752kYpYG9hPG5wIcGcC44.roa
File: 1-BOuIj752kYpYG9hPG5wIcGcC44.roa (raw, json)
Hash identifier: xPe+fqOojC8YpY0cHVXwD+e+GkRIOPISGVahkh0ek38=
Subject key identifier: F8:13:AE:22:3E:F9:DA:46:29:60:6F:61:3C:6E:70:21:C1:9C:0B:8E
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01926833A86FC4705610398C0621423C51A7
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1-BOuIj752kYpYG9hPG5wIcGcC44.roa
Signing time: Mon 07 Oct 2024 18:17:48 +0000
ROA not before: Mon 07 Oct 2024 18:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198934
IP address blocks: 31.31.88.0/23 maxlen: 23
31.31.88.0/24 maxlen: 24
31.31.89.0/24 maxlen: 24
37.252.97.0/24 maxlen: 24
188.214.225.0/24 maxlen: 24
212.237.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 16:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:33:a8:6f:c4:70:56:10:39:8c:06:21:42:3c:51:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Oct 7 18:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f813ae223ef9da4629606f613c6e7021c19c0b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:9f:cc:1d:58:a0:7b:5b:51:05:f2:2d:5c:
cf:f9:a6:e9:5a:6e:3c:09:dd:dd:5c:17:e5:19:97:
84:7d:15:5e:1a:23:83:a4:31:69:78:57:87:dd:9b:
34:be:4c:ca:4b:d1:2a:59:41:2d:45:9b:43:25:a1:
e2:a4:e4:fe:b9:eb:e7:ae:89:6b:36:48:8e:1c:07:
18:6f:73:35:9f:ac:cc:9e:c5:e0:19:f4:e8:8a:dd:
04:59:34:54:c6:62:e2:73:5a:67:56:ca:14:6c:19:
1e:32:d0:ef:f4:7e:ec:8d:fd:90:1b:7b:30:6d:e4:
55:e1:26:8b:f1:04:18:08:60:92:14:4f:bd:69:6e:
8b:b7:29:4b:7b:d0:a4:62:cc:75:5a:94:d7:f4:66:
36:62:a4:7f:dd:9a:5d:56:48:35:be:9c:81:18:8a:
06:31:19:4f:7d:fa:c2:39:30:2b:e2:72:9b:eb:85:
d7:61:90:ac:37:c6:ce:47:d0:8c:31:d2:62:24:f2:
5d:cb:99:88:11:33:e1:8f:2a:3b:a7:3e:16:ac:73:
03:d2:c7:e8:51:a2:37:0a:2d:f8:ac:3f:21:de:3f:
e1:69:ec:25:bc:48:6f:78:28:2f:30:4c:2d:79:04:
63:2a:c2:0d:8a:e3:c1:87:43:a1:a2:04:4c:09:77:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:AE:22:3E:F9:DA:46:29:60:6F:61:3C:6E:70:21:C1:9C:0B:8E
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1-BOuIj752kYpYG9hPG5wIcGcC44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.88.0/23
37.252.97.0/24
188.214.225.0/24
212.237.230.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a3:24:29:ef:bb:b2:34:c2:4b:0c:fb:29:b5:ed:28:ae:26:
d7:07:70:af:f1:e2:a3:bb:c4:a7:a8:b5:7b:cf:ec:56:40:e7:
2e:4b:1b:65:d7:7f:e3:4a:e5:de:4d:b9:18:99:e7:83:0b:ed:
a0:88:0b:8a:7d:79:1d:29:ee:dd:f4:8a:95:e7:37:fc:33:26:
63:92:76:e2:ea:8b:e4:29:04:3e:de:f6:ea:80:ac:12:5d:75:
52:85:d1:b7:bf:59:56:6a:cf:cd:e6:fc:e9:eb:27:d3:e1:40:
09:e5:40:db:74:bb:06:80:4d:e1:b8:19:76:db:32:cd:58:28:
ae:26:e2:e8:b3:8e:bc:45:ac:06:e6:05:79:96:d1:92:b4:a3:
f2:c2:91:62:aa:11:76:a7:2a:c7:48:09:2f:19:7b:95:c6:39:
bb:63:0c:e7:6b:6a:57:00:bf:a6:23:1b:80:8c:13:fa:bb:38:
fb:fc:3b:a3:57:24:f6:3c:3f:30:77:58:03:38:30:93:b0:bd:
e8:cb:cf:c8:f6:a3:3f:90:2c:ce:1e:f0:d2:df:45:ec:a8:f6:
3a:f9:00:e7:05:71:59:28:18:ea:e4:7c:c4:5a:05:e4:90:2e:
df:24:e3:33:3b:e6:c6:fe:a0:e9:fd:aa:e0:30:be:c8:43:0f:
6e:37:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org