Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eJioFNRqXJ-YtNIdu6lLzpJ01Ds.roa
File: eJioFNRqXJ-YtNIdu6lLzpJ01Ds.roa (raw, json)
Hash identifier: hnDH+LxnNMnwAoQGn1e3lHiT3sarYpJSiN161wV9Uxc=
Subject key identifier: 78:98:A8:14:D4:6A:5C:9F:98:B4:D2:1D:BB:A9:4B:CE:92:74:D4:3B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01869BDB9A68618F1FA1867D28B64BF72C2E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eJioFNRqXJ-YtNIdu6lLzpJ01Ds.roa
Signing time: Wed 01 Mar 2023 06:28:25 +0000
ROA not before: Wed 01 Mar 2023 06:28:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35298
IP address blocks: 31.173.176.0/20 maxlen: 20
37.29.76.0/22 maxlen: 22
78.41.100.0/22 maxlen: 22
178.176.154.0/23 maxlen: 23
2a03:d000:8741::/48 maxlen: 48
2a03:d000:8704::/48 maxlen: 48
2a03:d000:8740::/48 maxlen: 48
2a03:d000:8703::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:db:9a:68:61:8f:1f:a1:86:7d:28:b6:4b:f7:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Mar 1 06:28:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7898a814d46a5c9f98b4d21dbba94bce9274d43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:7c:c2:3b:0d:bf:2f:8d:eb:ee:f6:83:bf:
70:39:53:d1:c5:e7:ce:45:d7:9b:b3:29:33:5f:19:
39:80:dd:8d:13:dc:68:c3:b3:84:84:f3:cd:5f:f5:
a7:2f:fa:f7:58:90:9f:7e:b7:91:f3:e4:89:53:78:
35:df:6f:c9:20:89:54:4d:a3:ab:be:ca:1b:e5:d0:
c6:19:07:0b:c9:7c:98:f4:fc:90:50:16:ab:77:5b:
b6:85:0b:f5:ee:e1:43:80:93:2d:ce:84:7d:aa:b3:
7f:76:10:91:1b:13:12:be:29:7f:22:b0:d5:d0:4a:
51:42:a6:57:9c:0c:c6:f6:18:15:ab:34:09:10:6d:
d0:c0:5e:de:97:ba:3c:af:8b:ec:ea:ab:6d:a9:cc:
2a:e5:2e:96:9d:71:47:13:9e:78:09:f6:b0:f4:2f:
3b:b6:98:e3:f4:bf:f0:60:5d:b5:c2:06:55:a4:b8:
78:37:cb:db:0d:97:4d:74:fe:2a:eb:26:f8:82:69:
25:02:14:5e:2e:ac:81:d3:2b:c9:65:60:8d:1d:86:
00:22:3d:e0:94:05:7e:8e:e9:b5:90:fd:c8:aa:01:
36:1b:d1:fe:53:79:4a:fa:cf:4d:8a:71:e1:7c:a4:
2d:4f:af:7c:4b:b4:3f:5d:5f:9f:c8:72:c0:35:5e:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:98:A8:14:D4:6A:5C:9F:98:B4:D2:1D:BB:A9:4B:CE:92:74:D4:3B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eJioFNRqXJ-YtNIdu6lLzpJ01Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
178.176.154.0/23
IPv6:
2a03:d000:8703::-2a03:d000:8704:ffff:ffff:ffff:ffff:ffff
2a03:d000:8740::/47
Signature Algorithm: sha256WithRSAEncryption
51:61:c0:92:b3:fb:84:25:77:11:f3:17:cc:5b:76:97:a6:71:
a9:0c:6a:4e:02:9d:53:e5:6a:35:f0:1b:db:f8:76:82:3a:bf:
d8:d4:96:42:4e:70:f9:b2:88:cf:44:72:8a:7d:9e:62:6c:06:
9d:d5:09:1e:9e:fd:c4:8f:8b:b4:80:87:1d:c5:fa:c9:8f:0a:
02:30:49:30:05:5b:7d:34:60:67:fd:e7:4d:58:85:f8:b2:d0:
18:e5:3b:ba:08:1a:b3:7c:cd:c2:2a:32:30:61:74:b8:3a:c7:
6e:82:32:d7:72:62:cf:01:fe:94:99:56:19:ee:de:68:f4:8a:
fd:25:69:42:9e:56:57:5b:8e:26:98:36:58:7b:1f:b8:ed:93:
83:53:ef:5e:b3:62:4f:ff:ae:4c:e7:1a:f1:5c:25:19:ff:da:
9e:63:d0:7a:eb:3c:d9:b3:2c:3c:c3:5a:9b:69:03:5b:5c:96:
c3:53:9d:fd:9d:09:0f:10:b2:e0:b7:b3:25:c7:ae:19:68:10:
60:4d:0b:47:4f:1c:a7:a7:57:99:b8:0c:ef:ee:8c:fc:f0:e5:
6f:4e:96:b7:b6:ce:ec:3d:75:22:1f:90:cc:df:03:d1:58:3f:
4f:15:5c:e0:c3:04:1c:5a:40:58:0d:2d:42:81:d2:d0:e5:09:
05:6f:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org