Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/iN7xHgqgCrIJFX6hLw-Ge7Hn-p4.roa
File: iN7xHgqgCrIJFX6hLw-Ge7Hn-p4.roa (raw, json)
Hash identifier: nxC4Dpo2LONMiZkoxUE10UGnNhhL4MV2Fcdpdexp7sE=
Subject key identifier: 88:DE:F1:1E:0A:A0:0A:B2:09:15:7E:A1:2F:0F:86:7B:B1:E7:FA:9E
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 01944E9780292A3999047D6F48213353CD73
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/iN7xHgqgCrIJFX6hLw-Ge7Hn-p4.roa
Signing time: Fri 10 Jan 2025 05:02:18 +0000
ROA not before: Fri 10 Jan 2025 05:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44493
IP address blocks: 31.192.232.0/24 maxlen: 24
31.192.234.0/24 maxlen: 24
31.192.235.0/24 maxlen: 24
31.192.236.0/24 maxlen: 24
31.192.237.0/24 maxlen: 24
31.192.238.0/24 maxlen: 24
31.192.239.0/24 maxlen: 24
80.85.152.0/23 maxlen: 23
80.85.154.0/24 maxlen: 24
80.85.156.0/22 maxlen: 22
185.118.164.0/22 maxlen: 22
185.144.30.0/23 maxlen: 23
2a03:a0e0::/32 maxlen: 32
2a0a:eec0::/48 maxlen: 48
2a0a:eec0:2::/48 maxlen: 48
2a0a:eec0:3::/48 maxlen: 48
2a0a:eec0:4::/48 maxlen: 48
2a0a:eec0:5::/48 maxlen: 48
2a0a:eec0:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Feb 2025 15:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4e:97:80:29:2a:39:99:04:7d:6f:48:21:33:53:cd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jan 10 05:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88def11e0aa00ab209157ea12f0f867bb1e7fa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:70:41:70:15:66:bc:24:61:dd:f9:b9:60:
27:3c:c6:48:e9:56:73:6c:7d:26:05:0b:76:8a:9e:
d3:c3:a6:32:d0:85:82:88:8d:7c:d9:97:21:5f:c7:
5d:1f:5b:a0:f1:05:7a:bd:d7:3a:82:da:9c:41:7b:
c2:e8:b1:cc:92:06:a1:5f:06:ef:a7:9f:af:09:2f:
53:25:53:0d:16:53:1b:8f:a7:60:fa:26:fa:20:5e:
48:6f:bc:40:df:36:6d:7e:4e:2e:31:e8:ea:b6:1a:
6c:88:dd:3d:fc:c7:d4:d0:d2:0e:e1:55:b9:8d:fe:
42:c5:84:19:21:79:a7:d3:b4:ca:29:b9:0b:d3:f6:
02:5f:60:4b:f3:ac:d0:01:d7:c8:66:96:72:9b:b0:
d1:a8:ab:d1:d2:e3:d9:7a:f6:91:1f:a2:e7:b4:a3:
09:ee:78:5a:40:47:e2:86:26:c9:6c:2f:d2:f9:01:
7b:ba:fb:c3:f0:ec:0f:35:b3:ce:fb:26:f8:02:62:
40:52:e3:24:87:f3:3d:76:ac:42:0c:dc:bb:1b:2d:
3b:10:ee:3a:5b:5b:d7:93:d3:fd:64:68:8c:3c:62:
a2:2f:a2:bc:62:84:da:cc:f7:21:ef:88:90:02:f5:
bc:3c:54:a9:85:c2:4b:69:f6:2e:ea:bd:4d:59:30:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DE:F1:1E:0A:A0:0A:B2:09:15:7E:A1:2F:0F:86:7B:B1:E7:FA:9E
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/iN7xHgqgCrIJFX6hLw-Ge7Hn-p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.232.0/24
31.192.234.0-31.192.239.255
80.85.152.0-80.85.154.255
80.85.156.0/22
185.118.164.0/22
185.144.30.0/23
IPv6:
2a03:a0e0::/32
2a0a:eec0::/48
2a0a:eec0:2::-2a0a:eec0:5:ffff:ffff:ffff:ffff:ffff
2a0a:eec0:7::/48
Signature Algorithm: sha256WithRSAEncryption
92:35:8d:21:3c:c6:9d:32:a5:ee:f3:55:09:2d:b2:77:c9:d6:
2b:b5:24:84:86:80:d3:c4:37:92:e1:ed:c3:12:1b:c3:b8:ca:
79:2b:ad:0a:ed:2e:5e:31:53:42:7c:a8:46:9b:7f:a7:24:8f:
49:57:dc:53:96:57:ef:97:16:62:88:6d:cd:8d:9d:20:dc:46:
08:8a:cb:f8:ea:c9:89:f9:77:73:e1:9f:03:12:c6:fd:47:fa:
7b:e1:1c:b8:12:97:3b:53:f4:85:70:40:58:9f:87:ff:9b:84:
12:db:86:8f:f0:06:15:52:14:73:09:59:d7:ea:b6:d8:9d:0a:
b9:00:6e:05:2b:0b:dc:c9:c8:15:cc:6a:18:e5:6c:a4:85:b3:
3c:ba:f4:78:84:ff:df:e2:ca:20:b8:02:c4:e3:0c:ae:95:19:
5a:b8:45:7d:e7:4f:df:cb:0c:67:3a:54:47:71:49:94:f6:9c:
be:db:e1:d6:2b:2d:7c:83:ab:48:53:e3:db:20:ac:89:1c:59:
55:e6:71:32:ee:b3:4d:09:ff:8c:ad:3d:49:8a:63:62:90:08:
34:6d:85:10:f6:b5:9a:31:c6:36:21:1c:f4:d7:90:40:97:37:
ff:d1:10:7e:48:7f:b9:c1:88:76:bf:13:79:df:77:fd:12:26:
ba:35:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:33 2025 by rpki-client