Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/cEE-CM5NRDP7slUX0coHb0Tyqe4.roa
File: cEE-CM5NRDP7slUX0coHb0Tyqe4.roa (raw, json)
Hash identifier: cGCFM3eSCEYwOZQzcR4ypWrMbVwZ5Un3lawkSyYucYA=
Subject key identifier: 70:41:3E:08:CE:4D:44:33:FB:B2:55:17:D1:CA:07:6F:44:F2:A9:EE
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41CB2D0E9980E67D616C162AB9E308
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/cEE-CM5NRDP7slUX0coHb0Tyqe4.roa
Signing time: Sun 01 Jan 2023 16:54:43 +0000
ROA not before: Sun 01 Jan 2023 16:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 188.214.141.0/24 maxlen: 24
31.14.20.0/24 maxlen: 24
188.241.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:cb:2d:0e:99:80:e6:7d:61:6c:16:2a:b9:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70413e08ce4d4433fbb25517d1ca076f44f2a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:f7:f4:c4:cb:ea:29:0c:1d:db:70:27:96:
94:fa:75:18:a1:a5:0a:89:23:f2:ac:e1:a2:bb:e4:
a2:6c:df:09:55:c2:a1:77:3a:a9:5d:ea:58:cd:13:
b3:44:95:b1:12:e6:53:d7:a2:2d:c9:cb:ea:c4:41:
e1:66:c6:0b:de:44:fe:b1:e3:2d:a8:e4:96:72:1b:
ec:cd:f7:6a:6e:a0:46:fe:70:3d:db:95:64:0b:67:
ba:8f:f7:ca:5e:f0:0a:9a:51:c6:4e:6e:70:69:cc:
0c:87:2f:4b:2d:9a:09:b3:eb:ad:01:a1:60:80:2e:
64:01:29:b5:ed:69:43:76:62:19:63:4b:e4:bd:08:
e3:e6:30:4d:a9:7e:f3:c9:a5:84:4c:ce:eb:61:ed:
30:2f:0c:4c:27:6c:0f:cd:f2:db:03:68:3a:c7:1f:
ef:0f:6f:be:cb:0b:6f:27:6c:39:78:af:1d:b4:71:
99:7e:93:00:20:d2:d9:bb:2f:48:84:fc:95:38:8e:
eb:90:fc:bf:0d:8b:1d:ef:64:f2:ad:40:59:ef:dc:
93:64:90:33:0c:73:7d:ef:a2:89:c6:b8:d7:ba:db:
79:84:30:c8:b2:3c:7c:db:4a:69:e5:9c:78:d9:4f:
13:a2:ab:40:a7:a7:27:3b:30:49:17:da:40:49:ef:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:3E:08:CE:4D:44:33:FB:B2:55:17:D1:CA:07:6F:44:F2:A9:EE
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/cEE-CM5NRDP7slUX0coHb0Tyqe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.20.0/24
188.214.141.0/24
188.241.7.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7b:51:34:6d:5f:8f:00:fb:f4:59:d2:8c:39:63:af:05:eb:
07:f3:7b:ff:da:e2:c9:2f:3a:75:64:1d:d9:82:37:73:4a:54:
31:ad:51:f1:e0:43:5b:f3:06:fc:ef:ee:d5:12:6d:ed:25:75:
bc:77:1d:d6:07:d7:95:ea:95:c7:cc:19:d8:a4:ae:e8:30:ce:
e0:62:73:5f:6c:64:1d:36:76:51:cb:af:59:74:9b:99:21:7b:
c2:02:64:0a:2e:69:77:f5:59:15:78:95:87:5b:51:b1:b7:f9:
96:4d:12:8b:c2:50:6d:2e:e8:87:41:ff:42:19:0f:36:65:32:
32:d1:9d:b5:eb:10:54:10:a1:f1:05:a8:f7:f6:7c:e3:2c:33:
cd:73:6a:72:fc:b1:0c:83:bb:49:73:31:d7:d7:3f:56:8a:09:
03:e0:fc:3d:69:ae:75:03:94:91:e1:8a:e0:43:b4:66:e9:cd:
bd:aa:f6:9b:c7:b5:31:d8:f1:fd:ef:a9:18:b2:a5:79:4e:a3:
95:89:9a:6d:30:96:6a:70:77:57:15:b0:7f:bf:1d:fc:fe:24:
e1:0e:42:7f:34:49:31:5e:73:ea:df:31:14:60:94:ed:98:d9:
4b:fd:2e:40:71:0b:0e:c2:7c:12:2e:5c:a3:89:4a:a6:d9:6a:
01:65:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org