Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/X0OoMNjyIKtmpcjKBPZHd3GoYFg.roa
File: X0OoMNjyIKtmpcjKBPZHd3GoYFg.roa (raw, json)
Hash identifier: XQcvKU7wSMxHpVlQcGw0n+5DQonF66GzgT5HVGDGdOU=
Subject key identifier: 5F:43:A8:30:D8:F2:20:AB:66:A5:C8:CA:04:F6:47:77:71:A8:60:58
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0189014CCC763F550E359A882E0B0356E1C2
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/X0OoMNjyIKtmpcjKBPZHd3GoYFg.roa
Signing time: Wed 28 Jun 2023 09:19:17 +0000
ROA not before: Wed 28 Jun 2023 09:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44493
IP address blocks: 31.192.233.0/24 maxlen: 24
31.192.232.0/24 maxlen: 24
31.192.238.0/24 maxlen: 24
31.192.237.0/24 maxlen: 24
31.192.236.0/24 maxlen: 24
31.192.235.0/24 maxlen: 24
31.192.234.0/24 maxlen: 24
31.192.239.0/24 maxlen: 24
2a0a:eec0:6::/48 maxlen: 48
2a0a:eec0:5::/48 maxlen: 48
2a0a:eec0::/48 maxlen: 48
2a0a:eec0:3::/48 maxlen: 48
2a03:a0e0::/32 maxlen: 32
2a0a:eec0:4::/48 maxlen: 48
2a0a:eec0:7::/48 maxlen: 48
2a0a:eec0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:4c:cc:76:3f:55:0e:35:9a:88:2e:0b:03:56:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jun 28 09:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f43a830d8f220ab66a5c8ca04f6477771a86058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:c3:9f:9c:a9:73:7f:85:dc:21:10:44:d7:
c8:b8:5b:98:c5:88:62:28:e9:a0:89:d2:66:b6:8e:
1c:e4:96:f8:81:46:a0:e6:64:57:fc:dc:43:64:c2:
a7:74:5a:6f:0c:4c:29:c4:d9:e5:50:c4:19:25:53:
9b:8c:1d:f8:ea:bc:a0:1c:86:08:77:15:6f:af:d6:
08:94:7c:9f:2c:4f:4d:c1:e2:68:8b:63:51:fe:9c:
6a:11:fd:ab:ba:c8:12:be:57:4b:31:56:20:ef:1e:
51:41:82:ff:e2:e8:28:7b:66:47:59:ac:11:98:5a:
e0:24:40:30:c3:e9:37:9b:4b:67:fa:35:e0:d0:dc:
5c:eb:f7:fa:75:b5:10:44:5d:06:1e:9e:18:ac:b4:
bc:ce:73:28:2f:60:c2:e0:20:74:91:ce:f0:b4:76:
a5:96:7d:97:4f:ca:70:6f:41:e9:e4:f6:66:61:47:
ee:25:01:7e:73:18:a9:6e:7f:bc:f3:4d:50:16:04:
c7:cb:cd:fd:3d:64:9f:ad:2d:15:11:28:0c:a8:9d:
62:49:e9:c4:c2:c0:ad:44:9a:b3:7a:83:1d:69:80:
c2:bf:9b:9a:e1:2d:21:d8:bd:12:54:30:4e:d9:fe:
09:c5:f8:c9:45:ae:cd:14:34:63:fb:31:a1:ce:8d:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:A8:30:D8:F2:20:AB:66:A5:C8:CA:04:F6:47:77:71:A8:60:58
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/X0OoMNjyIKtmpcjKBPZHd3GoYFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.232.0/21
IPv6:
2a03:a0e0::/32
2a0a:eec0::/48
2a0a:eec0:2::-2a0a:eec0:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:78:d3:18:60:18:85:23:e7:b9:da:7f:cb:40:4e:76:97:45:
63:00:1d:f4:6d:a2:aa:17:aa:00:df:39:0a:ab:4e:44:36:08:
45:89:c1:1b:51:cf:80:c6:00:d6:e8:de:07:ca:cb:a4:0c:81:
7e:8e:2e:5c:ac:2c:33:be:69:a6:89:76:7c:89:d7:2b:ba:41:
5f:a0:d0:06:8b:43:9c:10:ba:b1:e7:05:14:ca:3f:9d:a5:d1:
e5:fd:6b:d7:ad:9c:47:4f:b5:10:d9:5a:ad:e7:c2:2a:bf:34:
6a:14:de:3a:21:e1:1e:5e:e4:2a:49:c7:6c:a3:2a:ed:67:69:
a1:5f:8a:42:42:84:f8:2a:b2:a6:f6:e8:0c:80:4c:c1:95:fb:
56:05:56:f3:75:b2:50:d5:9a:b4:44:67:0f:9b:80:72:24:86:
46:cd:8f:47:68:2b:a6:d3:e3:d5:ae:ac:2e:d0:d7:42:54:9c:
a0:fd:ec:5e:8a:7e:a4:76:4e:77:9c:fc:c7:08:d9:2d:62:7f:
e5:9f:10:20:18:9e:f0:31:c3:e5:c6:1e:87:b6:1b:b1:87:bb:
c1:cd:de:2c:e2:59:8b:38:f6:c7:62:91:ac:f2:77:34:ef:8a:
e2:11:5d:e5:9f:8f:ad:b3:f9:33:cd:0e:28:ca:3b:2b:86:37:
8a:6d:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:20 2024 by rpki-client on console-fra.rpki-client.org