Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/M9bIvQw7TGjJAwYHjIIW3lHr6m0.roa
File: M9bIvQw7TGjJAwYHjIIW3lHr6m0.roa (raw, json)
Hash identifier: Q970q8CGVu00/Otu6cxllogwEc7U+Rkv9dzRqSx9BWY=
Subject key identifier: 33:D6:C8:BD:0C:3B:4C:68:C9:03:06:07:8C:82:16:DE:51:EB:EA:6D
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 018A3B3D7CF192DD6B6AFC2A8CF7433D7081
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/M9bIvQw7TGjJAwYHjIIW3lHr6m0.roa
Signing time: Mon 28 Aug 2023 08:23:19 +0000
ROA not before: Mon 28 Aug 2023 08:23:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57829
IP address blocks: 91.196.240.0/22 maxlen: 24
91.196.240.0/23 maxlen: 24
217.16.192.0/20 maxlen: 24
91.196.242.0/23 maxlen: 24
31.25.64.0/21 maxlen: 24
31.25.64.0/22 maxlen: 24
31.25.68.0/22 maxlen: 24
2a02:7720::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Aug 2023 07:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:3d:7c:f1:92:dd:6b:6a:fc:2a:8c:f7:43:3d:70:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Aug 28 08:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33d6c8bd0c3b4c68c90306078c8216de51ebea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:50:95:e2:e4:73:19:f4:d3:55:6c:b1:49:
cd:68:2b:f8:66:ed:8c:d5:ee:c8:18:26:b8:73:51:
c6:94:37:a6:70:bd:39:7d:ac:61:ab:3d:a3:5f:f9:
52:c8:aa:03:9c:65:f8:a5:5f:08:85:b7:34:36:39:
ad:5f:44:7e:61:aa:5e:74:58:87:0b:1e:fb:32:3e:
c6:69:b4:83:f2:5f:53:3c:1d:ce:08:52:b8:2d:c5:
ab:b3:4f:c8:44:47:95:86:2b:f1:10:fe:73:3e:73:
94:29:b7:36:6d:16:80:a5:13:3a:25:67:bb:35:cb:
55:96:ab:17:88:6f:6a:97:53:3b:51:92:4c:25:f2:
dc:c9:f9:bc:ba:e9:e1:2f:11:4a:b5:66:2d:3c:82:
f7:e3:3c:bd:47:49:0c:c3:29:c3:01:2c:f3:b5:d5:
d3:6c:a9:90:08:fd:3b:2e:89:5f:89:f3:1e:e6:34:
d1:2a:f1:f1:a9:ef:f1:d4:dd:df:51:8d:c0:a4:01:
87:26:c2:e6:65:86:91:5a:e1:68:a9:a6:6c:ae:31:
79:e4:bc:45:b0:81:35:8c:69:c3:7a:11:ad:80:d4:
90:27:ac:79:86:78:b8:fe:ff:3a:b6:f3:64:83:e0:
41:18:71:e3:c3:bd:e3:5d:e2:24:d4:4d:25:c9:a1:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D6:C8:BD:0C:3B:4C:68:C9:03:06:07:8C:82:16:DE:51:EB:EA:6D
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/M9bIvQw7TGjJAwYHjIIW3lHr6m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.64.0/21
91.196.240.0/22
217.16.192.0/20
IPv6:
2a02:7720::/32
Signature Algorithm: sha256WithRSAEncryption
72:c2:42:b3:0d:c3:28:b7:d4:93:61:2d:36:0b:0e:73:a8:36:
21:c6:de:1d:29:50:01:ac:3e:5e:c7:95:e9:25:e0:52:14:81:
c0:df:96:88:d4:4b:08:b6:04:12:84:a7:37:b6:7d:c8:0c:18:
27:0e:c9:70:c7:fd:bd:7e:6a:8a:bd:8e:7c:f6:3e:34:60:37:
26:f9:89:de:ff:b7:7e:d9:e4:f3:db:f6:e2:6f:60:53:97:21:
d9:ec:c9:c3:e8:66:61:3b:fd:da:e6:b2:63:10:37:b9:46:99:
0e:3a:c3:83:cc:7b:56:a7:4d:7e:e9:ab:b5:b7:3d:43:0e:bd:
e7:9a:45:9c:a1:11:14:0a:03:32:75:53:89:8d:f1:8f:62:95:
2f:94:0b:49:fa:2c:58:ee:2c:07:30:f3:26:f0:2d:a1:3c:aa:
e7:69:07:c3:21:e4:02:63:a4:c6:02:70:39:ca:4a:3f:c5:c5:
c8:99:e3:e8:3d:c1:0f:c0:a3:24:3e:a8:9c:07:02:01:28:87:
53:7a:78:8e:f8:ee:06:24:59:b5:53:18:5b:38:41:60:5c:a3:
ce:21:28:85:87:5d:1e:de:35:8b:eb:58:36:68:0d:09:9c:12:
f7:c9:b8:fc:10:54:43:2c:f6:a3:4f:bf:96:37:cb:4b:59:a1:
e5:1d:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:28 2024 by rpki-client on console-fra.rpki-client.org