Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/ZUW3Jtvh6XQFNIcrY1txmhfPRY8.roa
File: ZUW3Jtvh6XQFNIcrY1txmhfPRY8.roa (raw, json)
Hash identifier: UsxWopLtwc+VamG1lO+wTXfl6d+3iqnisdIx4EDeZQU=
Subject key identifier: 65:45:B7:26:DB:E1:E9:74:05:34:87:2B:63:5B:71:9A:17:CF:45:8F
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 018570D5382B8B95A5279CD442F5F2793F8B
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/ZUW3Jtvh6XQFNIcrY1txmhfPRY8.roa
Signing time: Mon 02 Jan 2023 04:54:59 +0000
ROA not before: Mon 02 Jan 2023 04:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197720
IP address blocks: 31.186.28.0/24 maxlen: 24
31.186.29.0/24 maxlen: 24
31.186.2.0/24 maxlen: 24
31.186.4.0/24 maxlen: 24
31.186.3.0/24 maxlen: 24
31.186.7.0/24 maxlen: 24
31.186.9.0/24 maxlen: 24
31.186.11.0/24 maxlen: 24
31.186.10.0/24 maxlen: 24
31.186.5.0/24 maxlen: 24
31.186.13.0/24 maxlen: 24
31.186.12.0/24 maxlen: 24
31.186.15.0/24 maxlen: 24
31.186.14.0/24 maxlen: 24
31.186.16.0/24 maxlen: 24
31.186.17.0/24 maxlen: 24
31.186.21.0/24 maxlen: 24
31.186.23.0/24 maxlen: 24
31.186.18.0/24 maxlen: 24
31.186.20.0/24 maxlen: 24
31.186.19.0/24 maxlen: 24
2a0d:a000:0:1400::/56 maxlen: 56
2a0d:a000:0:f00::/56 maxlen: 56
2a0d:a000:0:1800::/56 maxlen: 56
2a0d:a000:0:b00::/56 maxlen: 56
2a0d:a000:0:1500::/56 maxlen: 56
2a0d:a000:0:1100::/56 maxlen: 56
2a0d:a000:0:1000::/56 maxlen: 56
2a0d:a000:0:1900::/56 maxlen: 56
2a0d:a000:0:c00::/56 maxlen: 56
2a0d:a000:0:1600::/56 maxlen: 56
2a0d:a000:0:1200::/56 maxlen: 56
2a0d:a000:0:1a00::/56 maxlen: 56
2a0d:a000:0:d00::/56 maxlen: 56
2a0d:a000:0:a00::/56 maxlen: 56
2a0d:a000:0:1300::/56 maxlen: 56
2a0d:a000:0:e00::/56 maxlen: 56
2a0d:a000:0:1700::/56 maxlen: 56
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:38:2b:8b:95:a5:27:9c:d4:42:f5:f2:79:3f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jan 2 04:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6545b726dbe1e9740534872b635b719a17cf458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:7f:ad:1d:a2:28:c7:02:e2:28:5a:87:e9:
a5:f6:c9:fd:28:99:9e:9c:fe:6e:cc:51:4f:82:cf:
b3:89:ce:5b:4d:23:71:2c:de:c8:bc:12:0c:92:25:
f1:15:dd:48:19:7b:50:78:8c:a0:fd:15:e4:da:09:
2f:03:b1:68:e0:34:f6:07:47:ca:83:27:f8:e1:e2:
8f:6c:d6:10:7e:de:07:b3:8b:12:b9:ef:39:84:ec:
78:85:2d:65:06:52:ed:27:8f:c6:3d:50:c5:18:9a:
c4:c2:66:cf:de:60:0d:c1:c6:fa:35:b3:98:d1:63:
8e:01:d6:a4:ef:d2:7f:57:84:a5:3c:9d:91:6f:d0:
1e:32:49:e3:96:6c:3a:94:1d:8e:1c:bf:a7:21:60:
b0:91:79:a4:ff:7a:bd:5f:62:d4:fd:e5:ea:d4:55:
a0:4c:34:00:2f:53:5a:0c:63:de:54:14:63:89:9e:
25:b9:4e:c2:e7:67:c3:2d:ab:81:ff:14:7d:f8:fc:
92:f2:d5:e6:93:a9:e3:f0:c8:1e:cc:2d:37:ce:96:
61:2e:38:ed:a7:02:8b:fd:af:d5:a4:dc:4e:72:4c:
a9:3c:78:00:f6:7a:70:c2:e9:92:42:70:b1:2d:15:
e3:3e:d6:3e:ab:b4:09:db:c9:a8:dc:7d:54:81:e8:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:B7:26:DB:E1:E9:74:05:34:87:2B:63:5B:71:9A:17:CF:45:8F
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/ZUW3Jtvh6XQFNIcrY1txmhfPRY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.2.0-31.186.5.255
31.186.7.0/24
31.186.9.0-31.186.21.255
31.186.23.0/24
31.186.28.0/23
IPv6:
2a0d:a000:0:a00::-2a0d:a000:0:1aff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:73:3e:58:09:6c:0f:17:f7:97:39:33:66:96:c4:80:5f:67:
5f:8b:ff:22:07:c9:b0:71:ae:34:be:b1:17:b7:bd:6c:4e:a9:
51:99:95:d4:30:08:c9:a4:0f:dd:cf:94:26:36:52:ef:c7:ab:
0a:9d:73:93:7f:f4:ea:07:14:2b:46:6e:be:7c:cd:ff:0b:be:
34:d2:5f:13:5b:81:a9:d5:aa:f4:f7:e5:eb:54:3b:84:bd:46:
25:8b:8f:33:11:76:eb:90:df:04:b0:8f:58:19:a2:9d:85:a3:
8a:d1:59:83:9e:aa:92:74:ec:02:b0:e5:5e:f0:8d:77:5a:3c:
a2:14:a6:95:1e:f6:cc:1e:1b:af:18:ab:c8:92:ef:8a:a5:d1:
e8:41:0c:81:fd:71:4b:86:19:27:5c:57:9c:b9:69:7b:71:c2:
51:cc:4a:66:65:4e:21:62:56:1b:5a:9e:82:21:33:a6:a1:64:
86:d8:41:74:4f:ef:5f:73:23:4c:62:78:22:60:27:6a:fd:c8:
51:db:c0:24:2b:a2:ae:3d:87:14:06:23:e4:5b:20:d6:cf:9d:
6e:a2:01:11:2a:51:02:d9:28:48:84:b2:b0:05:8c:df:d9:9c:
66:02:e8:98:71:35:c2:e4:0e:a4:b1:13:39:cc:1e:b1:43:79:
58:ae:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:34 2024 by rpki-client on console-fra.rpki-client.org