Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/AuPZiiSeXRJ5t8l5NQxKq3LKelE.roa
File: AuPZiiSeXRJ5t8l5NQxKq3LKelE.roa (raw, json)
Hash identifier: 2c3aqnyNnSBF9HmvtmEQtIGZbBEFrdHGsw0gJW2zNNA=
Subject key identifier: 02:E3:D9:8A:24:9E:5D:12:79:B7:C9:79:35:0C:4A:AB:72:CA:7A:51
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 018571FA1AC6321D01719FE7FF038A47BDFC
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/AuPZiiSeXRJ5t8l5NQxKq3LKelE.roa
Signing time: Mon 02 Jan 2023 10:14:54 +0000
ROA not before: Mon 02 Jan 2023 10:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 45.113.239.0/24 maxlen: 24
79.132.194.0/24 maxlen: 24
31.223.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:1a:c6:32:1d:01:71:9f:e7:ff:03:8a:47:bd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Jan 2 10:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02e3d98a249e5d1279b7c979350c4aab72ca7a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:fd:32:75:9b:4e:54:1d:25:7e:84:22:7a:
16:0c:0f:b8:8a:d8:81:a7:23:78:8f:32:b3:a1:40:
38:49:30:fc:2a:b5:30:14:af:8f:5d:e1:e8:88:43:
3d:19:7c:9e:d4:ea:4d:99:a4:22:5a:f1:45:2b:6f:
a1:0d:df:63:53:4d:17:19:2f:9b:95:8b:9b:31:ab:
dd:8c:04:53:dc:8b:ee:36:98:00:4b:2b:04:e2:a6:
49:76:f0:57:5e:f1:f1:1c:01:18:37:13:01:88:3b:
cf:12:eb:0d:26:0b:f1:46:e6:2c:6a:97:f5:bf:36:
09:48:18:a8:24:ff:86:4b:62:71:2d:e6:6c:9a:ba:
18:88:f8:4f:4b:d9:b5:a5:8f:31:e1:9f:51:8b:fe:
1f:90:7c:91:b8:8c:25:c0:49:66:b8:2d:7e:f3:28:
73:1f:ec:27:ca:08:3a:2e:23:82:6e:31:57:af:c0:
23:4e:6b:b2:55:0f:d0:1e:c1:65:4f:cb:86:ae:cb:
2b:9c:a0:84:54:35:86:74:48:1a:50:fd:5a:ab:4e:
c4:b6:fa:41:0e:0a:c8:95:ae:fc:90:73:c0:e9:84:
c1:5f:4a:c9:aa:da:88:c6:cc:eb:94:fb:0a:da:85:
25:9f:c6:5f:30:98:67:e7:b7:8c:64:16:72:79:f6:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:D9:8A:24:9E:5D:12:79:B7:C9:79:35:0C:4A:AB:72:CA:7A:51
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/AuPZiiSeXRJ5t8l5NQxKq3LKelE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.185.0/24
45.113.239.0/24
79.132.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e8:c1:7e:14:28:f7:9e:cc:6c:d6:52:76:91:12:bb:59:82:
a0:1c:e3:e0:af:e0:8d:5e:f0:ae:85:32:87:b9:c5:bc:99:b2:
e3:38:f1:8f:73:16:37:56:db:31:93:e0:02:3c:00:c2:28:a6:
07:da:a0:0e:7d:0b:4c:0d:01:99:c9:4e:e3:41:86:c7:a0:e4:
bb:6f:c9:df:7f:d2:2f:cc:2e:b1:e6:d8:37:30:8b:96:78:59:
6d:ec:fa:aa:29:ef:25:ee:c2:82:cd:f4:f0:99:0c:53:c9:86:
a3:c7:96:1d:d0:17:aa:64:5e:02:44:9a:96:32:71:d8:7b:7b:
98:73:32:2a:ae:2e:91:9e:16:c0:e1:0d:01:9e:d3:09:1e:1c:
79:36:18:a1:62:26:9d:4a:99:34:28:7a:25:00:87:9c:71:c4:
55:22:b9:05:0f:a2:3e:53:95:de:ad:b0:88:75:9e:3b:fc:b3:
65:39:ae:a8:a2:5a:96:a3:a7:f4:79:8f:07:e5:cc:4b:1d:65:
ab:72:e5:5a:7d:5c:90:86:62:a0:3d:f5:96:60:83:b8:0d:30:
ab:4a:9b:2a:aa:44:16:27:15:81:7d:51:10:a2:09:ae:51:74:
13:62:10:b5:f6:d7:bc:94:30:07:87:b9:2c:3e:f5:1c:75:92:
d9:7e:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:08 2024 by rpki-client on console-fra.rpki-client.org