Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/pSNfybSaBJ6LZtAmdZwsQSq9L0A.roa
File: pSNfybSaBJ6LZtAmdZwsQSq9L0A.roa (raw, json)
Hash identifier: 6Swlk8SQZQyyfiNpUpRDictg+DoP69w31JGc+RbK2GM=
Subject key identifier: A5:23:5F:C9:B4:9A:04:9E:8B:66:D0:26:75:9C:2C:41:2A:BD:2F:40
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 018F8016725CEE3A8831F6FECC198C8C1FFE
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/pSNfybSaBJ6LZtAmdZwsQSq9L0A.roa
Signing time: Thu 16 May 2024 06:28:25 +0000
ROA not before: Thu 16 May 2024 06:28:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8286
IP address blocks: 31.193.96.0/21 maxlen: 21
82.145.64.0/19 maxlen: 19
109.69.95.0/24 maxlen: 24
212.14.0.0/19 maxlen: 19
212.14.32.0/20 maxlen: 20
2001:4c58::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 16 May 2024 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:16:72:5c:ee:3a:88:31:f6:fe:cc:19:8c:8c:1f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: May 16 06:28:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5235fc9b49a049e8b66d026759c2c412abd2f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:48:0a:bc:7f:a3:b8:4b:ec:8f:f6:dd:6b:
24:58:ba:a0:6f:8f:38:f6:82:5d:c6:d4:db:9b:26:
c0:98:95:1d:be:73:7a:6b:78:52:87:8c:39:bd:c3:
08:03:a9:01:3d:4f:6b:98:50:cc:3e:44:a0:2c:68:
03:a3:e4:f1:3a:59:f3:25:4f:4a:6c:f3:a4:e9:b5:
75:93:4a:3e:43:bd:d0:ff:bc:c3:01:52:4e:33:22:
dd:b9:44:d7:73:31:11:91:a4:43:19:04:89:97:e7:
4c:4b:48:e6:27:2e:c5:47:d9:00:17:25:89:f3:f4:
94:f1:ae:e8:af:0c:4c:b2:c7:21:c1:dd:d3:15:68:
87:05:54:25:1d:5d:51:5f:1a:0c:9b:1d:ec:0d:00:
95:40:83:ed:87:8d:bf:38:71:6f:4a:c5:d0:86:d3:
8b:80:14:01:5d:ba:62:89:a1:2f:7d:83:34:db:7e:
c0:b5:0e:d7:6f:22:71:f5:19:48:a9:56:a0:49:f4:
56:35:4f:eb:fd:6a:b7:ff:cd:b4:d0:6e:8f:53:13:
45:2b:f2:07:2d:57:8c:c4:2e:da:8e:47:df:04:e2:
f8:21:d4:2f:43:b1:a1:36:d2:d9:4a:32:c7:f9:54:
4e:2b:ff:b0:5a:10:57:32:4a:04:bf:91:6b:8c:a1:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:5F:C9:B4:9A:04:9E:8B:66:D0:26:75:9C:2C:41:2A:BD:2F:40
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/pSNfybSaBJ6LZtAmdZwsQSq9L0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.96.0/21
82.145.64.0/19
109.69.95.0/24
212.14.0.0-212.14.47.255
IPv6:
2001:4c58::/30
Signature Algorithm: sha256WithRSAEncryption
35:0e:aa:5f:80:ad:35:39:85:4f:41:ba:95:26:84:3c:65:79:
89:c8:32:49:af:7f:4a:4f:fd:c3:53:e4:47:33:6a:e9:90:64:
66:d4:b8:a6:05:08:cb:df:f0:04:3a:18:7c:9d:aa:04:17:0e:
1b:2b:ba:f9:a6:7d:cc:ed:71:af:53:09:e7:f3:35:78:69:e0:
6a:1b:ec:ee:1c:89:49:15:eb:0a:1f:a1:0a:7c:65:21:cd:da:
74:fd:1b:08:4f:30:43:34:9e:12:22:1f:a2:cf:02:f8:a1:89:
6d:63:73:97:03:7d:77:b3:ea:fd:f7:27:5f:d5:02:f6:27:3e:
c8:98:a7:bf:89:d2:eb:be:15:3a:73:c9:e2:e6:0b:f9:29:05:
30:fa:75:82:00:0c:17:71:88:f7:4a:2c:7c:c9:35:9f:b7:da:
c2:2b:26:e6:5b:ae:48:22:61:ce:a0:18:9e:dc:c6:77:f7:0d:
5a:83:63:d6:23:fa:a2:aa:a1:99:79:57:9c:c7:cf:a9:32:61:
7a:d5:c9:89:34:a4:1d:60:33:05:6d:f8:74:0d:ef:0c:be:ee:
da:d3:74:5d:9a:c3:ed:b9:17:16:29:d5:9d:d6:1e:b5:58:90:
d1:a9:b3:89:8c:00:1f:70:85:ec:7c:01:b1:90:f9:ee:c7:3e:
5c:d1:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 08:57:55 2024 by rpki-client on console-fra.rpki-client.org