Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/rup0tmMFJfXzwIR3S2unlOM5zgE.roa
File: rup0tmMFJfXzwIR3S2unlOM5zgE.roa (raw, json)
Hash identifier: MSFBQXVDMibG3QyXOVMHxwhT1y0lW6HnUGAOs05JL5g=
Subject key identifier: AE:EA:74:B6:63:05:25:F5:F3:C0:84:77:4B:6B:A7:94:E3:39:CE:01
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 01914266E3EF2E95D588FB008508B7E47712
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/rup0tmMFJfXzwIR3S2unlOM5zgE.roa
Signing time: Sun 11 Aug 2024 17:05:24 +0000
ROA not before: Sun 11 Aug 2024 17:05:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32708
IP address blocks: 85.92.100.0/22 maxlen: 22
85.92.100.0/24 maxlen: 24
85.92.101.0/24 maxlen: 24
85.92.102.0/24 maxlen: 24
85.92.103.0/24 maxlen: 24
103.91.56.0/22 maxlen: 22
103.91.56.0/24 maxlen: 24
103.91.57.0/24 maxlen: 24
103.91.58.0/24 maxlen: 24
103.91.59.0/24 maxlen: 24
103.108.188.0/23 maxlen: 23
103.108.188.0/24 maxlen: 24
103.108.189.0/24 maxlen: 24
103.115.204.0/23 maxlen: 23
103.115.204.0/24 maxlen: 24
103.115.205.0/24 maxlen: 24
123.253.104.0/22 maxlen: 22
123.253.104.0/24 maxlen: 24
123.253.105.0/24 maxlen: 24
123.253.106.0/24 maxlen: 24
123.253.107.0/24 maxlen: 24
185.211.78.0/24 maxlen: 24
2a0d:b8c0::/48 maxlen: 48
2a0d:b8c0:1::/48 maxlen: 48
2a11:b000:1::/48 maxlen: 48
2a11:b000:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Oct 2024 00:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:42:66:e3:ef:2e:95:d5:88:fb:00:85:08:b7:e4:77:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Aug 11 17:05:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeea74b6630525f5f3c084774b6ba794e339ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:38:7e:7e:76:71:6c:55:4a:41:ee:59:05:f1:
4e:a3:47:1e:7f:6d:ec:10:13:81:1c:4a:fe:b7:e1:
f3:e3:bb:48:ed:41:ff:57:76:b1:ef:e0:3a:da:71:
88:4b:58:ef:88:04:cd:67:d5:10:fa:78:57:63:81:
71:a6:59:4e:7a:b5:54:91:4b:b6:0b:6f:88:e9:c3:
88:71:e7:4e:4b:51:30:e2:f8:b5:f5:44:62:df:c1:
6b:4f:c3:6e:ac:d4:01:64:67:80:85:0c:db:12:3d:
cd:17:04:e5:fb:f7:0e:ef:9d:36:7d:0b:2a:c8:c2:
83:8d:5e:c0:03:63:24:a4:60:0a:35:89:2e:b9:10:
93:97:98:8f:05:38:1d:06:68:c4:f0:01:bb:55:de:
b2:72:3a:71:a3:34:ba:16:0e:e5:c8:48:74:19:fa:
c5:7f:00:69:59:0e:e0:c8:29:2f:f1:f5:f7:74:b6:
4c:df:61:b4:30:33:48:4b:34:77:da:94:15:00:f3:
73:fa:2a:14:b6:ed:a7:13:dc:30:76:9e:bc:c4:4e:
63:93:53:34:a9:90:b9:49:b3:da:4a:cf:9e:eb:e9:
7b:cb:12:0a:df:df:b1:4c:d7:c3:b6:25:d7:ae:f5:
73:b0:e3:8c:31:dd:dd:92:24:06:b5:97:52:62:fa:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EA:74:B6:63:05:25:F5:F3:C0:84:77:4B:6B:A7:94:E3:39:CE:01
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/rup0tmMFJfXzwIR3S2unlOM5zgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.100.0/22
103.91.56.0/22
103.108.188.0/23
103.115.204.0/23
123.253.104.0/22
185.211.78.0/24
IPv6:
2a0d:b8c0::/47
2a11:b000:1::-2a11:b000:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:d5:72:7a:2a:83:4a:2d:47:19:91:aa:06:e0:c4:86:da:fb:
ac:19:aa:90:c3:f7:7e:45:69:a8:ee:bd:92:88:b7:c4:c6:32:
20:7a:b5:10:06:8e:67:4e:c5:21:de:66:5d:f4:30:6b:38:5c:
38:f7:62:20:58:d2:06:c3:27:aa:76:2d:12:6c:1e:f3:7c:fb:
85:cc:13:5f:62:ad:ea:20:6c:4f:7d:be:d4:87:29:5f:45:b6:
96:27:4a:31:03:3d:4e:84:8b:a6:02:10:d4:68:c1:12:d0:b1:
b6:45:d2:ee:ae:c5:44:6e:1f:85:a8:25:3c:c4:1e:97:79:d1:
ac:4b:a7:bb:05:e3:eb:4b:d1:a5:1b:f1:20:40:31:16:a4:58:
a1:2a:db:ce:ff:fa:97:30:be:2c:a4:28:ab:f6:41:8c:ea:0c:
10:e8:fa:5c:15:ff:02:ec:44:b0:dd:ea:56:09:ce:cd:43:34:
eb:83:d4:f4:6d:dd:02:c9:e9:81:df:76:3f:08:60:9d:ab:b4:
47:40:94:15:9f:f7:1e:21:1f:87:0b:29:f3:a4:57:bc:0c:73:
0a:26:8a:91:74:d0:27:9b:8b:73:b2:55:a8:0e:7e:cd:29:c5:
32:38:b7:e4:bc:72:a9:5f:c7:9f:90:e4:28:38:16:14:4a:fd:
fb:f4:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 02:25:17 2024 by rpki-client on console-fra.rpki-client.org