Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Ii-lB8vzYOWwQ0eaCoVmiLEJhWQ.roa
File: Ii-lB8vzYOWwQ0eaCoVmiLEJhWQ.roa (raw, json)
Hash identifier: aNjUPrQVQJ9OUuurb1Whx5PyboTKMqvjWCFJZLnM+jI=
Subject key identifier: 22:2F:A5:07:CB:F3:60:E5:B0:43:47:9A:0A:85:66:88:B1:09:85:64
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D71E13E4D790B6137DD3D276A7BE3F
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Ii-lB8vzYOWwQ0eaCoVmiLEJhWQ.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214505
IP address blocks: 31.186.250.0/23 maxlen: 24
95.172.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1e:13:e4:d7:90:b6:13:7d:d3:d2:76:a7:be:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=222fa507cbf360e5b043479a0a856688b1098564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:4b:90:22:27:f5:7f:6f:0a:10:35:7d:96:
6d:38:64:77:13:34:96:90:bd:f1:67:a0:ce:ab:4f:
05:bd:81:83:36:81:85:2f:78:5a:33:6c:2e:4e:d4:
b4:c0:d9:1f:6c:27:2e:b2:b6:ef:ca:3d:a4:32:46:
45:cb:e6:c8:a5:18:93:41:7b:81:4c:5d:dd:6c:cc:
c7:bd:13:af:33:34:12:40:e8:56:db:63:b2:47:d5:
05:14:69:c6:b2:3a:22:f7:86:51:81:2c:e8:3e:48:
39:de:5c:da:41:f0:41:c9:ef:82:95:9a:a7:d7:c4:
46:cb:be:fa:ae:13:31:6f:07:a2:53:54:b1:2c:18:
88:10:df:bc:fa:38:a6:24:97:08:ef:90:c9:6b:eb:
4f:f9:d8:ee:d8:42:f3:e8:cd:f8:fc:2c:3a:ec:d0:
72:a4:39:8b:f7:a6:5c:31:92:a6:28:79:e7:11:e9:
16:3e:2c:a2:92:d7:d0:e3:4d:4d:97:d3:bd:a1:54:
25:44:e2:1f:58:8d:38:93:e5:da:fa:80:e0:04:b7:
6f:15:0d:c5:70:07:9d:6b:9c:19:f3:e9:23:40:25:
d1:ce:8b:cd:d0:ff:b6:46:29:23:69:e2:33:61:3f:
61:1c:ca:0d:3a:3d:1b:f5:85:14:75:dc:14:4b:63:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:A5:07:CB:F3:60:E5:B0:43:47:9A:0A:85:66:88:B1:09:85:64
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Ii-lB8vzYOWwQ0eaCoVmiLEJhWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.250.0/23
95.172.92.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8b:5e:8e:40:9d:9d:e9:03:6a:f5:17:6d:87:38:f4:c5:f6:
37:ca:08:e8:22:8f:18:db:ed:aa:91:85:37:a2:7d:4b:c4:07:
db:a3:ed:5f:2b:c7:f6:be:c6:86:b8:f1:7d:de:da:7c:36:76:
19:5d:6f:e6:54:3f:43:7f:66:10:71:ef:81:59:d9:93:cf:ce:
22:dd:70:b4:ed:a3:9d:49:9e:10:57:2b:8d:d2:4e:6d:fa:56:
a7:25:f9:99:73:46:63:32:95:bd:30:02:35:a6:76:53:36:a1:
6c:bc:b8:46:98:a0:1d:10:ee:1c:cb:e9:24:05:d9:49:1d:1d:
2b:4d:ae:c1:db:dc:7e:da:5e:6c:ba:f4:9b:12:a3:9f:61:c3:
46:00:04:b9:5f:de:65:13:5f:8e:be:5d:d4:93:3f:2f:86:c9:
1f:3f:17:cd:5d:78:f1:c5:86:3e:f4:80:5c:ee:a0:43:bd:d0:
3b:f2:83:c3:b6:1c:51:c9:0c:f6:8e:96:09:42:d6:d7:2d:a9:
08:14:20:02:94:79:e6:2c:c1:17:d6:30:4b:5f:f4:2b:8c:c5:
02:5a:9f:84:27:ac:f0:d9:47:d8:54:16:93:51:53:24:98:5c:
7d:c0:0e:fc:b1:73:94:c8:5d:a2:a2:e8:3a:fa:83:47:7a:58:
0d:12:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:07:25 2025 by rpki-client