Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/NvbLz4Y7Um3q4qAJu4APZsIOhkk.roa
File: NvbLz4Y7Um3q4qAJu4APZsIOhkk.roa (raw, json)
Hash identifier: josIBSWMWAAXNz07p72oqkmuz4ljXc90kK7gO8LKGjM=
Subject key identifier: 36:F6:CB:CF:86:3B:52:6D:EA:E2:A0:09:BB:80:0F:66:C2:0E:86:49
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 018663A536F914D2CA8184732B6F2B9187B0
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/NvbLz4Y7Um3q4qAJu4APZsIOhkk.roa
Signing time: Sat 18 Feb 2023 08:30:17 +0000
ROA not before: Sat 18 Feb 2023 08:30:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197999
IP address blocks: 193.33.216.0/23 maxlen: 23
31.217.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 01 Mar 2023 17:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:a5:36:f9:14:d2:ca:81:84:73:2b:6f:2b:91:87:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Feb 18 08:30:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36f6cbcf863b526deae2a009bb800f66c20e8649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:9a:eb:a6:13:cb:b1:03:07:0d:cf:5f:d9:
a4:23:6e:aa:5b:02:f4:e4:e1:bd:0d:45:06:6e:2a:
5e:12:d0:81:85:5d:d3:2b:2a:6e:16:0e:5b:48:b1:
91:01:20:d7:ab:dc:97:c7:e8:17:59:13:fb:ef:c3:
4b:e6:2b:81:e8:65:d5:d9:8d:03:0e:0e:49:1b:55:
99:68:cd:59:2e:44:dd:ab:ff:be:4b:43:61:1b:94:
55:bd:52:f4:2f:b0:18:18:f6:1b:8c:a4:46:cd:cc:
b7:99:22:e1:ed:f3:1b:8b:a6:ea:1c:28:28:82:89:
18:b6:5a:00:91:e1:3a:f0:cd:ab:9a:13:fc:de:f8:
2b:57:0b:e1:86:2f:97:ac:7e:68:3e:9d:1a:c2:f5:
f6:23:6e:36:a2:85:2b:06:f1:1a:47:a4:59:12:e5:
50:9c:d5:63:8d:4d:b6:93:c9:d8:e4:7b:0e:ba:47:
38:0e:d9:23:d1:f9:1a:6b:d0:03:6b:f4:f5:a6:d9:
8e:e4:3a:ba:34:aa:e1:37:ad:4f:8d:69:d2:24:4e:
20:7e:1a:44:8d:64:82:e2:61:46:8a:a5:36:0f:8c:
b2:4d:30:0b:12:18:c3:f4:02:87:56:a8:8d:3e:49:
fc:ad:f2:67:50:ed:84:bb:d6:06:14:a5:c3:49:d8:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F6:CB:CF:86:3B:52:6D:EA:E2:A0:09:BB:80:0F:66:C2:0E:86:49
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/NvbLz4Y7Um3q4qAJu4APZsIOhkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.216.0/21
193.33.216.0/23
Signature Algorithm: sha256WithRSAEncryption
48:4b:65:c2:6f:a3:3f:08:ad:47:76:71:c8:92:9c:6a:c0:01:
c6:df:3c:4e:4a:29:e8:5c:6b:56:f3:03:c4:e7:89:3b:f8:06:
07:64:16:8c:94:8b:cd:c6:70:91:b7:bb:d3:43:0a:95:87:77:
60:ad:cb:ac:e4:97:01:91:ac:6f:22:cd:56:75:e4:79:c0:f8:
fe:3b:b4:59:f8:78:d0:25:b6:22:3f:0a:37:10:f7:82:a6:c5:
83:d2:25:75:1a:38:9e:17:51:65:aa:a8:35:56:37:e5:d8:ab:
60:18:3b:ea:f3:a6:34:bb:a5:23:cf:8d:71:07:be:f9:7f:95:
0a:63:a6:70:ca:5d:4b:31:df:f3:e8:d3:96:55:f0:aa:eb:df:
52:45:44:f6:f9:01:9c:7f:c3:98:91:45:a4:eb:78:0a:10:66:
c0:0f:ae:92:07:b7:c8:2c:4e:e9:f0:49:12:03:eb:25:aa:dd:
48:ab:e3:a6:1c:f3:25:f9:29:73:80:79:5b:ff:f5:6b:24:be:
56:19:70:99:53:58:11:41:38:d8:f2:49:b7:4c:9a:fb:f5:56:
40:27:3c:8e:91:0c:fb:95:18:a9:3c:94:b3:4d:7d:46:c5:4c:
6a:e8:71:0b:91:e0:e0:f2:8e:98:e6:18:83:d4:18:1c:63:4a:
8f:ee:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:49 2024 by rpki-client on console-fra.rpki-client.org