Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7DOWL0T-X_t1iq2eYMVNZkq_YYI.roa
File: 7DOWL0T-X_t1iq2eYMVNZkq_YYI.roa (raw, json)
Hash identifier: J9X+30h5E2pD2QEOujECoFxsBvpd59jWibNoPwyGu/o=
Subject key identifier: EC:33:96:2F:44:FE:5F:FB:75:8A:AD:9E:60:C5:4D:66:4A:BF:61:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019390FA1CDCEF6F03C400D2AF8349C3C390
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7DOWL0T-X_t1iq2eYMVNZkq_YYI.roa
Signing time: Wed 04 Dec 2024 09:22:10 +0000
ROA not before: Wed 04 Dec 2024 09:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212177
IP address blocks: 31.13.246.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:fa:1c:dc:ef:6f:03:c4:00:d2:af:83:49:c3:c3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 4 09:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec33962f44fe5ffb758aad9e60c54d664abf6182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:36:3e:c1:c3:8b:38:2a:a2:b7:a9:d3:57:
fc:2b:78:ce:8d:3d:2d:99:1e:7d:62:58:00:33:e7:
db:d4:c5:88:ac:ff:c7:e5:cd:48:25:9d:30:3a:f0:
bc:50:7f:22:6d:c0:2a:e0:6c:4c:b0:fb:6c:30:b1:
2c:4d:29:ea:ed:ee:4b:24:fc:30:15:de:84:bc:eb:
db:b3:8f:8c:9d:ad:27:c8:f6:93:92:12:cc:36:26:
d6:06:2d:d8:75:f3:d9:3c:8b:cc:ce:f2:9e:9a:08:
ff:be:7f:a9:a6:70:cf:70:31:be:e0:17:90:48:2d:
de:e0:d9:a3:8f:9c:05:6d:ef:55:db:9c:3e:33:7c:
a7:50:87:be:55:57:0d:38:b1:0a:e1:dc:9c:5d:80:
88:0d:5f:de:2e:9e:da:bd:6f:47:c2:b7:f9:a0:43:
ba:d4:1a:4a:a0:60:68:4f:2f:ba:13:d5:38:0f:16:
85:d3:d2:e9:6b:31:ab:7c:aa:de:41:0c:3e:af:b2:
c6:03:c9:37:68:c9:2f:91:49:c6:34:3f:bc:57:54:
c3:45:5e:3c:45:72:02:8a:28:4b:52:f5:68:1e:5f:
1e:9b:8f:db:5b:14:8f:5f:06:04:c2:73:e4:2a:41:
f5:55:d1:33:08:7c:26:06:2e:cf:3a:13:46:f3:89:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:96:2F:44:FE:5F:FB:75:8A:AD:9E:60:C5:4D:66:4A:BF:61:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7DOWL0T-X_t1iq2eYMVNZkq_YYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.246.0/24
92.119.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:56:02:54:89:ba:fb:32:e7:d9:c4:a0:9f:98:55:38:6b:9a:
56:ad:f0:d4:9c:54:80:e0:90:c0:d8:23:88:46:8d:9f:93:73:
d0:ff:1c:ff:18:28:42:e2:61:64:c5:c5:de:eb:38:bb:f2:13:
e1:c3:e7:5b:95:be:b5:98:23:c2:05:52:62:10:18:ae:58:1c:
81:47:f3:ef:e8:de:3f:ed:bd:ef:93:2c:ae:2e:c4:05:d5:e3:
cd:ce:88:32:ca:22:21:01:23:bb:f8:7b:f9:79:47:58:f7:65:
6e:96:0c:fc:1e:95:80:2f:8c:95:31:c3:0d:45:d6:c7:23:97:
9e:6e:44:a2:46:d4:2c:ef:47:22:73:06:e2:c7:f2:ba:dc:c3:
49:ab:e1:ea:66:90:7d:80:31:3a:c2:c8:3a:01:83:15:23:e9:
9a:43:ce:85:da:67:7b:57:80:98:0e:94:34:17:50:73:68:11:
c5:91:f9:b8:04:fb:2a:52:ec:ca:45:ec:79:da:e9:6f:86:f6:
19:59:90:8f:12:15:d0:a7:4c:47:d3:55:35:fb:8e:fd:c3:34:
0e:81:bb:96:df:87:4e:d7:6d:f9:33:74:d2:8e:14:0b:13:79:
ce:b4:ad:46:65:3d:e1:87:d9:24:62:33:f4:57:91:c5:72:3b:
3a:66:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:18:09 2025 by rpki-client