Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/w1vb55IXlW2IH0_zOaClm8KAwK4.roa
File: w1vb55IXlW2IH0_zOaClm8KAwK4.roa (raw, json)
Hash identifier: v7sTe/huulQUsWpA2yRbKqPKNvV1UCXtdOM4dug3k30=
Subject key identifier: C3:5B:DB:E7:92:17:95:6D:88:1F:4F:F3:39:A0:A5:9B:C2:80:C0:AE
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0191A05B9865BA5770F64B93B5043AC63677
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/w1vb55IXlW2IH0_zOaClm8KAwK4.roa
Signing time: Thu 29 Aug 2024 22:57:22 +0000
ROA not before: Thu 29 Aug 2024 22:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198934
IP address blocks: 31.31.88.0/23 maxlen: 23
37.252.97.0/24 maxlen: 24
212.237.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a0:5b:98:65:ba:57:70:f6:4b:93:b5:04:3a:c6:36:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Aug 29 22:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c35bdbe79217956d881f4ff339a0a59bc280c0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:8b:5c:3d:5e:6b:78:8a:e0:9e:10:3f:7f:
49:9b:b4:dd:50:88:bc:2b:a2:86:12:f1:4d:51:b9:
a5:96:16:23:83:1b:35:63:5b:04:97:a1:dc:79:8d:
21:ad:e8:73:d5:83:31:2d:78:00:63:f2:cd:d2:3b:
71:53:ab:e5:0a:ef:f5:cf:e7:ef:36:3e:91:cf:10:
55:03:86:c4:4e:06:e3:c5:a1:5d:20:15:2c:80:17:
99:0f:c4:3a:78:a4:f9:b9:be:f7:2f:26:8f:8e:a7:
f2:56:25:0c:c6:03:c9:0f:fd:84:9c:63:bc:e5:87:
6d:d3:d1:ec:79:d2:d9:7c:e5:5f:f7:75:59:d4:f2:
48:b9:8f:21:05:d8:47:6f:d5:93:1e:0f:04:ce:4a:
86:f1:3c:0b:d8:05:c4:9e:86:68:8d:d6:c2:b2:e6:
18:2c:56:79:c6:45:45:6a:24:bd:5f:89:99:be:6c:
7f:96:5a:24:11:8f:c8:6f:bf:97:3f:4a:6f:21:bb:
4e:fa:31:d6:93:22:aa:28:87:6a:7c:e2:9b:c0:30:
77:6b:a0:4b:bb:1d:c0:b0:c7:98:64:4d:e2:d1:ab:
b1:1b:73:7b:21:d4:7d:59:31:4d:cc:e7:3f:88:68:
d8:8e:5e:ea:9f:10:4c:97:d3:85:95:df:ff:4d:aa:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5B:DB:E7:92:17:95:6D:88:1F:4F:F3:39:A0:A5:9B:C2:80:C0:AE
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/w1vb55IXlW2IH0_zOaClm8KAwK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.88.0/23
37.252.97.0/24
212.237.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a5:71:f0:7e:c3:50:d8:3d:d0:67:22:01:79:34:71:d5:cb:
09:0e:f8:11:2e:13:86:38:35:63:4e:d9:03:34:de:b5:85:12:
03:85:e3:33:06:e2:c8:df:ed:92:2a:04:8b:71:0b:8f:66:04:
9f:27:b6:09:69:9b:0c:0f:18:ae:3d:5f:0a:f2:7c:4a:dc:f5:
b7:00:7f:d4:76:a0:9d:ac:64:be:60:9d:84:57:07:09:d8:4a:
c4:9f:22:0d:33:b0:1f:c5:ae:83:93:93:41:fb:63:ae:47:9b:
ba:df:eb:17:f2:32:a5:bd:e4:16:7a:6b:a9:44:dd:c2:19:dc:
f8:20:58:48:da:64:1f:ce:1e:f9:88:6c:4f:08:2c:cf:b4:be:
d6:56:47:ec:7c:bb:89:6f:9c:18:32:d2:05:cd:20:65:49:c9:
6a:a1:87:20:1c:94:e2:00:35:00:fa:83:35:47:da:f9:07:b3:
2c:bb:a7:81:bc:89:1d:49:0c:eb:da:bc:04:af:83:22:0c:84:
cb:be:c5:62:d6:af:19:a3:63:23:69:41:ad:0d:8b:4b:ba:bb:
c0:bd:61:54:45:c8:fa:ef:b2:e5:fb:89:80:ed:99:7d:2c:40:
28:92:da:2c:6b:17:c0:9b:e0:00:bd:b8:b5:cc:a4:3d:b9:ef:
bb:dd:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 13:00:13 2024 by rpki-client on console-ams.rpki-client.org