Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/Sx29zf3VQ51HkPhIVnLxXEvebJk.roa
File: Sx29zf3VQ51HkPhIVnLxXEvebJk.roa (raw, json)
Hash identifier: YOCo9+qnAci3DkawWg2Kh4gz1da+Y7Uh6rI5oA5TiN4=
Subject key identifier: 4B:1D:BD:CD:FD:D5:43:9D:47:90:F8:48:56:72:F1:5C:4B:DE:6C:99
Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial: 01856EB8EFEABC11617C857A861C7C1B7CC6
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/Sx29zf3VQ51HkPhIVnLxXEvebJk.roa
Signing time: Sun 01 Jan 2023 19:04:51 +0000
ROA not before: Sun 01 Jan 2023 19:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199283
IP address blocks: 31.169.119.0/24 maxlen: 24
185.87.208.0/22 maxlen: 22
185.87.208.0/24 maxlen: 24
185.87.209.0/24 maxlen: 24
185.87.210.0/24 maxlen: 24
185.87.211.0/24 maxlen: 24
31.169.112.0/23 maxlen: 23
31.169.114.0/24 maxlen: 24
31.169.115.0/24 maxlen: 24
31.169.116.0/24 maxlen: 24
31.169.117.0/24 maxlen: 24
31.169.112.0/21 maxlen: 21
31.169.118.0/24 maxlen: 24
95.87.104.0/24 maxlen: 24
95.87.105.0/24 maxlen: 24
95.87.104.0/21 maxlen: 21
95.87.109.0/24 maxlen: 24
95.87.110.0/24 maxlen: 24
95.87.111.0/24 maxlen: 24
95.87.106.0/24 maxlen: 24
95.87.107.0/24 maxlen: 24
95.87.108.0/24 maxlen: 24
2a04:2140::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:ef:ea:bc:11:61:7c:85:7a:86:1c:7c:1b:7c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
Validity
Not Before: Jan 1 19:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b1dbdcdfdd5439d4790f8485672f15c4bde6c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:96:65:14:a6:12:86:85:f0:e8:81:b1:bd:
19:f6:fa:b0:a2:70:4d:ef:c1:6f:fe:56:6b:8e:ba:
5e:03:00:c3:8b:4e:6b:ba:d9:86:ab:e5:71:c0:e7:
03:ad:63:9f:1b:22:12:c8:f9:26:57:11:e5:fd:b3:
49:57:94:da:9e:61:8c:69:05:50:a7:f6:20:46:88:
f7:24:8b:eb:20:25:05:1d:a5:f4:80:ca:71:12:60:
76:c4:e9:4b:3f:51:8a:ee:d4:d5:81:50:c5:5f:8c:
7b:b5:4c:e0:e0:f3:df:a4:28:60:75:2e:ea:86:76:
1c:12:46:91:1a:c9:14:30:df:01:4a:0d:84:98:49:
59:82:21:20:57:ae:18:f3:d0:26:44:6b:13:46:11:
0a:cc:ea:15:b4:c0:0f:6f:4c:bd:e3:ee:2d:b2:5c:
86:cb:31:16:15:da:4f:a6:39:b4:65:52:3e:97:df:
84:cf:a9:82:8d:a7:57:6c:e5:05:12:64:90:fe:1d:
a6:72:60:9e:67:ce:9e:2a:12:77:54:1e:ff:ad:7e:
0e:ae:69:b5:64:79:7f:e8:37:b9:e9:a2:de:b6:fe:
b6:4c:0b:4b:39:9b:01:6b:9f:12:ea:5e:fe:0d:d2:
4b:aa:bd:c9:2a:c2:98:f5:93:3a:13:f5:b7:78:51:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:BD:CD:FD:D5:43:9D:47:90:F8:48:56:72:F1:5C:4B:DE:6C:99
X509v3 Authority Key Identifier:
keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/Sx29zf3VQ51HkPhIVnLxXEvebJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.112.0/21
95.87.104.0/21
185.87.208.0/22
IPv6:
2a04:2140::/29
Signature Algorithm: sha256WithRSAEncryption
55:fd:aa:2d:d7:fc:b4:c2:6b:10:15:67:20:d9:fa:c1:d2:47:
eb:36:e4:56:87:cb:61:3b:83:95:5b:37:15:59:1a:ab:8f:10:
c9:24:ba:7c:81:be:eb:47:18:33:59:ac:2e:98:7e:8e:ee:91:
d6:94:3f:34:3f:20:a4:bc:58:33:ec:8c:d6:33:64:d6:ab:37:
ce:7c:33:8b:83:26:19:dd:05:6a:cb:09:d5:61:0a:76:7d:20:
f3:92:96:da:02:02:1b:60:b3:50:d7:10:ac:f0:8a:7c:4b:d5:
ac:b6:3c:df:0a:36:34:c2:6a:d1:d2:e7:0a:2a:84:4b:a8:67:
00:49:e0:1a:8d:ef:91:35:9d:79:d7:99:e0:28:9f:d5:39:c8:
de:03:c7:71:da:53:be:6f:23:2b:4c:4e:02:33:ab:71:d3:fe:
9a:e8:78:e1:2c:62:3f:bd:5b:6c:9a:37:e8:c9:29:b9:a1:52:
2c:d9:57:3b:0d:36:e4:80:36:ee:eb:38:bb:6f:2a:c3:d2:de:
2f:d6:93:f1:88:b9:fc:de:8f:63:89:af:56:16:e3:af:12:5e:
bf:0b:dc:2e:2f:a5:8a:f3:f1:81:81:d8:ba:96:cd:70:a6:6d:
16:aa:72:f6:8c:9d:e2:7f:ad:a7:ae:f6:88:51:50:25:09:5a:
f6:ae:78:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org