Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/5pJBWNuQh4_ZTSMYi6l1GQgLM-c.roa
File: 5pJBWNuQh4_ZTSMYi6l1GQgLM-c.roa (raw, json)
Hash identifier: vgtpEcL4oObbAQeQ7ugTFty4h/B8UwK2BJW69eSSxp8=
Subject key identifier: E6:92:41:58:DB:90:87:8F:D9:4D:23:18:8B:A9:75:19:08:0B:33:E7
Certificate issuer: /CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Certificate serial: 0191B2131D7155411B7F52044563DFFBE22C
Authority key identifier: 76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/5pJBWNuQh4_ZTSMYi6l1GQgLM-c.roa
Signing time: Mon 02 Sep 2024 09:31:22 +0000
ROA not before: Mon 02 Sep 2024 09:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12637
IP address blocks: 31.14.183.0/24 maxlen: 24
77.81.143.0/24 maxlen: 24
78.40.111.0/24 maxlen: 24
86.106.75.0/24 maxlen: 24
86.106.76.0/24 maxlen: 24
91.233.180.0/23 maxlen: 24
188.211.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 13:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:13:1d:71:55:41:1b:7f:52:04:45:63:df:fb:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Validity
Not Before: Sep 2 09:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6924158db90878fd94d23188ba97519080b33e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:79:19:17:0b:66:f8:3c:29:d9:8a:7f:bf:
26:e8:80:8d:56:fd:ec:9b:c1:d0:ee:e5:82:21:e7:
d6:08:95:07:61:77:ef:3a:34:1e:3b:ba:63:3e:b9:
1e:da:d3:f8:55:2f:9b:5c:fd:06:57:f2:a4:3a:65:
0e:a7:6a:bb:05:4e:2b:f7:d5:67:44:85:01:8e:98:
9e:8e:f1:e1:a3:d0:05:04:1c:4b:b8:a8:2f:9b:ec:
24:80:b0:e7:39:7b:cb:45:a9:6f:f1:b7:f4:ba:6c:
85:12:d3:c9:51:b1:d9:4d:39:c4:de:58:16:d9:bf:
3a:1b:67:ac:a0:0e:12:4b:48:4b:88:9a:b8:27:1f:
0d:61:f0:17:ee:23:46:d8:41:1b:ac:f4:15:65:87:
e3:43:18:81:4b:52:5b:11:e3:5c:11:98:d0:fc:39:
8f:9a:78:b4:c7:aa:b4:09:96:61:7f:d7:f4:01:8b:
63:d8:3b:7f:e4:f0:3a:b7:f2:62:5b:eb:6e:2a:af:
d1:62:20:87:9f:a1:c4:f7:b2:4b:af:20:f8:d6:69:
b1:f4:d4:51:e1:ed:a9:82:22:07:61:bb:3a:ed:0c:
0a:57:a2:cc:41:26:0b:06:b3:c8:84:53:8c:9a:f9:
4b:19:3c:62:23:11:31:eb:35:de:2b:58:b1:23:4c:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:41:58:DB:90:87:8F:D9:4D:23:18:8B:A9:75:19:08:0B:33:E7
X509v3 Authority Key Identifier:
keyid:76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/5pJBWNuQh4_ZTSMYi6l1GQgLM-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.183.0/24
77.81.143.0/24
78.40.111.0/24
86.106.75.0-86.106.76.255
91.233.180.0/23
188.211.169.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6b:12:3f:8d:26:55:2b:96:6c:f2:05:dd:e5:e8:83:32:5b:
d1:fe:ca:a6:e9:55:0f:0c:6e:a4:14:2f:76:5b:a1:d0:6a:9f:
67:fe:cc:ac:e3:6b:d7:fe:69:29:b7:d8:86:a8:ee:2b:86:56:
97:07:95:b4:cc:e0:d5:9b:c3:a6:37:32:ec:a1:34:54:93:cc:
4f:e2:14:82:54:56:a4:8f:f3:fc:aa:e2:fe:6a:84:c4:a5:4c:
24:10:f8:0d:30:08:44:55:fa:4e:bd:69:8a:9c:a9:24:50:06:
e9:d4:11:e5:d6:a7:96:50:da:e5:9b:4c:8c:73:a1:d9:6e:8b:
48:91:40:c3:01:b9:f2:e1:23:3b:11:6e:fe:6f:09:44:ff:90:
cd:83:eb:2c:f3:ca:8f:87:62:f5:9d:7c:e2:8b:50:61:3d:23:
d3:3c:51:be:b0:c6:03:b0:d4:40:46:81:33:b0:b4:43:63:ff:
7f:69:05:79:90:ef:b5:f9:67:d1:8b:41:bd:82:fa:e8:b5:0f:
64:da:1e:96:79:e7:c8:c2:30:b5:d4:85:ff:97:55:29:f8:e9:
a9:7d:f5:cb:9f:92:68:f8:e6:8b:60:f6:45:e6:37:b4:db:1c:
2b:79:50:28:74:cf:3d:71:37:bc:67:a6:db:a4:7e:68:86:f9:
6b:df:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 17:08:26 2024 by rpki-client on console-fra.rpki-client.org