Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/gDp8xyS_godNUGSud8Qh1FfijB4.roa
File: gDp8xyS_godNUGSud8Qh1FfijB4.roa (raw, json)
Hash identifier: qItLPXRXvnm8hoa7JaAcuVh4+RazkODjPAEbV5B3dq4=
Subject key identifier: 80:3A:7C:C7:24:BF:82:87:4D:50:64:AE:77:C4:21:D4:57:E2:8C:1E
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01909C18613084828BADDEF5D4CE526EFBAE
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/gDp8xyS_godNUGSud8Qh1FfijB4.roa
Signing time: Wed 10 Jul 2024 10:02:41 +0000
ROA not before: Wed 10 Jul 2024 10:02:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.42.131.0/24 maxlen: 24
31.42.144.0/24 maxlen: 24
31.42.145.0/24 maxlen: 24
31.42.153.0/24 maxlen: 24
185.206.56.0/24 maxlen: 24
185.206.57.0/24 maxlen: 24
185.206.58.0/24 maxlen: 24
185.206.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 11:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:18:61:30:84:82:8b:ad:de:f5:d4:ce:52:6e:fb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jul 10 10:02:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=803a7cc724bf82874d5064ae77c421d457e28c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:ba:e4:4a:c9:9d:bf:ca:70:c2:d0:26:2e:
a1:6f:70:81:9d:4e:78:34:ba:55:63:06:65:df:d4:
93:55:5a:5f:92:09:23:b5:ab:a2:52:d1:69:08:27:
ab:f6:7f:3b:1a:96:3e:4f:25:5e:94:21:77:07:22:
6b:dd:21:14:69:0c:30:d5:69:34:40:bc:f6:86:a0:
5c:89:a0:81:4f:a3:3b:e1:ca:c4:43:d7:7a:22:a2:
a4:28:11:89:0f:68:7e:db:1a:7d:b4:62:12:ba:b4:
95:d9:84:fe:6a:cd:2c:30:49:e6:86:8e:18:4d:49:
57:66:d9:c8:50:99:8f:8c:27:e6:1c:f2:51:e3:40:
b8:7c:20:75:92:26:d6:ea:1c:8b:a9:81:5c:55:a8:
82:90:c6:d4:38:d3:bb:0d:bc:b8:33:79:04:a7:3c:
f8:b8:3f:5e:59:5a:e7:10:e0:16:24:c1:51:a7:67:
27:0b:d3:4e:cd:f6:c3:e9:72:18:55:01:c5:3d:79:
40:c9:0e:8f:f8:22:75:c7:ae:b2:a0:1d:bb:9e:40:
95:1f:6e:bf:08:3d:0a:72:ee:73:c4:7c:f4:07:03:
bb:03:78:51:8d:32:16:2d:b0:dc:01:6b:7b:da:3c:
b4:e2:42:12:cf:90:80:49:16:26:af:2e:0b:f4:b5:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3A:7C:C7:24:BF:82:87:4D:50:64:AE:77:C4:21:D4:57:E2:8C:1E
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/gDp8xyS_godNUGSud8Qh1FfijB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.131.0/24
31.42.144.0/23
31.42.153.0/24
185.206.56.0/22
Signature Algorithm: sha256WithRSAEncryption
92:64:8a:74:07:ae:92:fd:eb:e8:71:f9:6f:02:f9:80:0d:0e:
77:71:2e:d4:53:0f:87:22:52:9f:63:34:f8:bc:d9:d0:ea:a7:
08:30:15:e6:dc:89:f6:f7:35:67:6f:44:38:77:b6:8b:1c:59:
21:5f:cc:84:65:14:51:ca:e9:a8:6f:f0:02:07:f5:ba:83:08:
5e:93:26:f3:c3:9e:b7:8b:a2:4b:0e:d5:60:e1:1a:7e:76:e8:
ba:68:75:f5:51:37:1c:27:df:b7:9f:49:8e:b4:49:8f:04:6f:
d4:89:1f:e6:ca:69:e0:e7:52:67:fa:ef:ee:de:25:d0:4a:40:
e5:1a:20:12:ed:2a:20:80:db:e2:46:f4:97:a7:06:6a:e4:aa:
af:ac:40:0f:9f:37:5b:f6:15:9a:06:48:62:e4:42:74:d0:d3:
8c:d3:5e:5d:d0:e6:60:13:b3:44:bf:6f:f9:d7:2d:ff:eb:f8:
21:d4:46:7f:5c:1c:73:89:08:6b:52:28:27:f2:10:06:db:a6:
6d:49:30:39:3c:47:57:65:5a:7e:ba:72:f0:04:5a:43:39:8f:
4c:4d:9b:bc:a6:7a:44:cc:76:48:4e:72:4b:1f:a6:d4:95:c7:
01:88:66:57:d2:61:06:de:c2:cb:e5:23:30:49:b4:0d:85:b5:
ee:52:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 14:42:36 2024 by rpki-client on console-ams.rpki-client.org