Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/skP-wpo3pwpCVEENr-q1Wrmvvgk.roa
File: skP-wpo3pwpCVEENr-q1Wrmvvgk.roa (raw, json)
Hash identifier: L5YAjTZWUMg8g1usxxBOulKU0HeWv6EjapKKvBZhpGM=
Subject key identifier: B2:43:FE:C2:9A:37:A7:0A:42:54:41:0D:AF:EA:B5:5A:B9:AF:BE:09
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 0187235C2F19DD1054B2697AD8EA2D91D8DD
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/skP-wpo3pwpCVEENr-q1Wrmvvgk.roa
Signing time: Mon 27 Mar 2023 13:57:36 +0000
ROA not before: Mon 27 Mar 2023 13:57:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42109
IP address blocks: 91.103.24.0/24 maxlen: 24
31.7.161.0/24 maxlen: 24
31.7.160.0/21 maxlen: 21
31.7.160.0/24 maxlen: 24
31.7.164.0/24 maxlen: 24
31.7.163.0/24 maxlen: 24
31.7.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 14:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:5c:2f:19:dd:10:54:b2:69:7a:d8:ea:2d:91:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 13:57:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b243fec29a37a70a4254410dafeab55ab9afbe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:ad:8f:d3:bf:e5:32:d7:40:83:bc:b8:a6:
52:c1:f7:f4:31:a5:22:e7:92:2a:f8:43:be:0a:73:
04:2d:31:65:86:36:9c:c6:da:52:13:ea:01:fa:00:
d2:57:a7:af:ad:e1:72:93:9f:32:43:ea:ef:55:e3:
b5:c9:6c:72:43:1b:fd:80:52:66:f8:12:88:2b:8c:
6e:b7:8b:fd:d8:eb:c9:58:05:38:47:7d:e1:ac:e8:
da:4b:0e:6e:b9:15:16:76:18:f9:a9:47:d1:b7:58:
44:ef:9e:ce:70:05:a2:30:cc:75:d7:98:c0:fd:55:
5b:9f:81:85:71:a0:1c:12:c5:e0:86:c4:65:07:57:
e7:91:76:f4:d6:26:95:05:cc:69:70:e9:26:97:74:
7e:e3:fe:6e:39:53:88:1d:fd:17:1e:a8:3e:7c:56:
67:62:21:da:46:52:81:21:41:e7:25:80:36:08:a0:
28:26:15:9f:b4:11:44:f6:e0:bc:9e:a7:2b:1a:55:
61:2a:5d:8a:5d:53:1e:c1:78:be:90:c0:7f:00:82:
b1:e4:1d:f6:07:62:78:a6:45:0a:e2:4b:82:74:73:
e4:5e:88:99:7f:36:60:ca:37:a1:4b:38:a0:1e:3f:
d1:90:b0:58:29:b1:80:40:50:c4:59:b1:d2:c1:1c:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:FE:C2:9A:37:A7:0A:42:54:41:0D:AF:EA:B5:5A:B9:AF:BE:09
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/skP-wpo3pwpCVEENr-q1Wrmvvgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.160.0/21
91.103.24.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c4:80:75:60:b7:b7:c7:c0:83:4d:83:72:cc:6f:38:40:40:
79:3e:bc:43:22:f2:1f:10:a1:b5:c1:0b:22:6b:e2:31:9b:10:
eb:89:f0:1d:3b:ee:d9:ea:dc:54:45:98:c1:cf:2a:00:d1:7e:
42:c2:25:47:3c:b3:97:6f:d2:95:79:dc:b4:ca:5b:fe:fa:13:
df:53:16:fa:7e:c6:8b:4a:81:37:7e:5d:ec:69:3b:83:dd:b4:
3f:57:eb:1a:54:24:02:51:76:b5:80:64:73:e3:e9:ea:a9:90:
dd:ae:6e:a6:fc:98:b2:4d:03:4f:2e:85:4c:7a:a5:d5:c3:e0:
f2:43:9b:80:41:e5:7a:8e:c3:df:10:2b:46:81:f5:84:99:cb:
b2:72:45:88:95:45:31:b8:13:6f:af:13:8e:a3:ac:86:ac:b0:
39:57:c3:f0:f7:9a:f9:be:40:05:71:93:5d:34:a9:42:07:14:
5b:bd:c7:15:ad:b6:5a:90:88:30:ce:61:21:a6:0e:a6:b1:96:
a1:7f:da:0d:47:b0:78:35:44:35:51:86:8e:6c:61:08:8f:1f:
8e:d1:5e:11:f2:d4:d5:34:e4:5c:94:91:7d:f6:1f:aa:00:c6:
7e:ab:16:f0:cb:d6:ce:82:7d:04:c0:29:01:58:7b:b3:3e:bf:
13:60:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org