Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/O2viDGqwAdJHVo2LV2x8eB6hxdM.roa
File: O2viDGqwAdJHVo2LV2x8eB6hxdM.roa (raw, json)
Hash identifier: FsYdnxyA9rIRJiGOhXTEondnDe3qoIc9jG5YQJdV80o=
Subject key identifier: 3B:6B:E2:0C:6A:B0:01:D2:47:56:8D:8B:57:6C:7C:78:1E:A1:C5:D3
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 01869893252B020D390F4CEAF0BF810764A8
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/O2viDGqwAdJHVo2LV2x8eB6hxdM.roa
Signing time: Tue 28 Feb 2023 15:10:25 +0000
ROA not before: Tue 28 Feb 2023 15:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56823
IP address blocks: 176.109.175.0/24 maxlen: 24
176.109.174.0/24 maxlen: 24
176.109.173.0/24 maxlen: 24
31.134.208.0/21 maxlen: 21
31.134.210.0/24 maxlen: 24
31.134.209.0/24 maxlen: 24
31.134.211.0/24 maxlen: 24
31.134.213.0/24 maxlen: 24
31.134.212.0/24 maxlen: 24
31.134.215.0/24 maxlen: 24
31.134.214.0/24 maxlen: 24
176.109.168.0/24 maxlen: 24
176.109.168.0/21 maxlen: 21
176.109.170.0/24 maxlen: 24
176.109.169.0/24 maxlen: 24
176.109.172.0/24 maxlen: 24
176.109.171.0/24 maxlen: 24
2001:67c:1378::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:93:25:2b:02:0d:39:0f:4c:ea:f0:bf:81:07:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: Feb 28 15:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b6be20c6ab001d247568d8b576c7c781ea1c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:72:3f:d0:1a:db:6c:4e:cd:cb:ca:77:97:
d3:82:08:80:46:ba:a0:85:e4:ed:5e:1b:3f:e5:66:
33:02:aa:8a:bd:4c:f3:f2:15:d3:41:16:a8:6b:8a:
03:60:6f:22:93:49:35:38:0b:fe:b5:3a:14:da:62:
b7:48:db:b7:4b:01:83:dd:9e:71:36:47:24:fd:1f:
26:e7:75:14:fc:e5:a9:1b:bc:63:66:a0:62:a7:e3:
43:f5:42:83:80:2f:e3:2a:ef:bb:52:d2:8a:58:83:
51:99:c3:99:5f:4c:b8:56:c0:ae:5c:b8:26:8f:10:
44:b8:e1:be:0a:ec:52:c8:dc:12:1e:26:a2:47:c9:
fb:61:a5:2c:83:32:21:7f:b9:81:6c:7f:26:97:4a:
a0:21:44:eb:4d:78:53:c0:ce:0a:56:ba:71:c4:eb:
e3:49:d5:07:48:9f:b6:fe:f9:2f:2f:d6:e7:49:0f:
db:fd:c9:7d:cb:8f:9b:84:58:d4:d8:29:b4:42:b7:
f9:47:d8:10:6a:63:d2:8e:ff:37:80:bd:0d:78:d8:
39:71:bd:e4:06:a5:a8:a8:2c:d9:80:54:63:77:39:
c2:0f:3f:6c:65:f8:29:0f:18:51:5c:6b:3f:37:a3:
33:56:61:49:78:dc:6d:92:0e:43:30:79:43:36:76:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6B:E2:0C:6A:B0:01:D2:47:56:8D:8B:57:6C:7C:78:1E:A1:C5:D3
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/O2viDGqwAdJHVo2LV2x8eB6hxdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.208.0/21
176.109.168.0/21
IPv6:
2001:67c:1378::/48
Signature Algorithm: sha256WithRSAEncryption
50:e3:d8:9c:34:6f:74:bc:10:78:32:3d:35:b0:7e:de:9f:03:
ee:c0:66:d5:6e:b0:87:70:46:ad:08:17:98:ec:45:e7:5c:67:
de:c3:b9:3c:c2:f7:17:47:40:a1:5b:a3:4f:29:b0:c4:ad:44:
91:21:ed:d1:88:e3:de:57:74:48:ca:9f:60:45:4e:84:db:3f:
44:6d:79:3b:b8:6f:e7:1c:0b:02:f8:78:a7:cb:4b:ca:04:cf:
e2:8f:eb:de:d3:d3:31:f1:f7:76:55:23:16:b8:31:ae:47:f9:
1d:b6:ae:7a:d4:ee:d3:6e:e2:d0:64:02:1f:e6:3c:39:9e:b8:
87:2c:b8:ec:2e:34:ee:e1:42:a4:a1:d0:e4:bf:c2:cc:23:85:
38:c1:66:d2:dc:d9:56:2c:a5:70:26:91:62:eb:d1:4b:91:37:
75:b9:77:e6:21:0e:2c:79:ad:2d:6c:f7:f7:3a:a9:88:47:51:
a8:b4:cc:d7:8b:5d:58:d0:b4:c0:cc:b6:2d:14:84:a9:1e:38:
1f:71:d5:fb:a9:26:f5:d6:3e:fe:cb:75:25:96:12:11:cc:60:
1a:7a:75:d6:15:57:c3:1c:e2:4f:ed:89:a9:1b:cb:1e:26:4f:
e2:b8:eb:e7:a6:dd:3a:61:82:a7:95:8a:98:a7:68:04:52:c0:
99:70:a2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:18 2024 by rpki-client on console-ams.rpki-client.org