Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G1SHeE1V3zTD2tJF80Rzv-L19dw.roa
File: G1SHeE1V3zTD2tJF80Rzv-L19dw.roa (raw, json)
Hash identifier: Ks5N7aOOe+1dpFuIQ6z7dZi0J/T9kTVjW9lBpS87E/s=
Subject key identifier: 1B:54:87:78:4D:55:DF:34:C3:DA:D2:45:F3:44:73:BF:E2:F5:F5:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824CDDFE7C1EBB3BBFF2C4662F9BF51
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G1SHeE1V3zTD2tJF80Rzv-L19dw.roa
Signing time: Thu 02 Jan 2025 17:51:28 +0000
ROA not before: Thu 02 Jan 2025 17:51:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 09:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:cd:df:e7:c1:eb:b3:bb:ff:2c:46:62:f9:bf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b5487784d55df34c3dad245f34473bfe2f5f5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:4e:e2:84:f9:5d:af:a1:f5:18:8d:d5:56:
5e:ee:f6:47:68:e9:ed:3e:ed:14:51:3f:ba:e5:54:
e1:ee:ae:a4:9f:1e:cc:70:85:fc:60:14:1e:af:da:
ac:ea:83:23:c7:af:32:76:64:47:13:1f:96:48:39:
f5:27:13:3c:eb:a0:c3:79:71:e2:31:93:d7:02:a6:
5e:c6:4d:b4:94:3a:34:8b:9a:11:af:fd:1a:8e:d8:
3f:a4:6e:af:4b:18:5c:28:a8:50:12:02:ee:12:c5:
1c:07:48:33:d9:49:1d:8c:d8:2f:16:cd:49:7d:bf:
11:41:63:56:5f:59:79:6f:84:f0:88:c1:06:a4:f5:
37:4e:14:96:e9:18:fa:00:3e:ec:0c:41:c2:e4:e8:
3e:a2:6b:d9:b1:f0:18:13:f2:57:35:3d:3d:29:43:
9e:1f:7c:87:2a:c6:84:9b:fa:b7:42:85:8a:4e:e1:
fe:ca:cf:9a:05:38:26:46:b5:49:06:e3:7f:cb:e9:
ee:b1:9d:38:c7:13:8d:c1:c5:25:1e:41:86:ad:21:
39:21:7f:9b:98:75:09:b3:35:a0:66:0e:7d:54:f4:
23:01:ed:34:5c:2a:f2:7c:a0:4a:80:c0:a3:a2:fa:
ba:1c:e3:25:e8:75:7f:15:6c:12:58:1b:d9:aa:0c:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:54:87:78:4D:55:DF:34:C3:DA:D2:45:F3:44:73:BF:E2:F5:F5:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G1SHeE1V3zTD2tJF80Rzv-L19dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.165.0-87.120.166.255
87.120.186.0/24
93.123.84.0/24
94.156.112.0/24
94.156.115.0/24
94.156.179.0/24
94.156.237.0/24
171.22.31.0/24
185.246.223.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:30:2d:97:8c:2a:27:5d:42:11:ba:03:ba:9b:51:15:36:71:
ba:35:3d:e2:4b:12:0e:f4:09:59:e5:2d:4c:fc:13:57:7c:e6:
bd:5a:90:44:16:08:f5:31:d5:17:44:60:70:3d:bc:0b:ec:b0:
53:20:72:5b:f7:33:bf:89:26:e9:4f:68:83:d1:73:f5:d0:99:
88:d1:8a:4c:cd:8a:2e:03:79:61:82:5c:cb:fc:67:18:a3:9a:
3c:7a:5e:44:5c:4b:a7:ac:c7:9d:ce:44:80:08:d5:2e:84:ad:
21:80:f7:09:de:ed:06:75:9f:98:44:c6:46:a0:22:de:00:d2:
25:53:fb:5e:ce:20:46:db:9b:89:eb:43:46:e8:69:a9:a6:ce:
73:e9:99:5b:fc:b7:10:e3:f5:20:bd:8b:09:62:3b:c2:06:9d:
e5:88:9a:1c:ea:13:72:3f:83:3e:db:db:6e:1b:e3:95:be:75:
8f:84:2a:be:f7:6c:4f:22:05:88:1b:31:fe:8e:b5:ee:4e:60:
2d:81:e5:d2:b3:fc:b7:e7:3e:ec:00:ab:ca:07:a8:bb:1f:91:
f2:da:34:a0:58:d1:bd:e0:cf:16:23:8a:1d:45:2a:5c:d1:32:
a8:50:d2:0e:f3:0c:ce:82:4f:48:1f:13:90:57:77:ac:da:30:
b1:1c:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:52:11 2025 by rpki-client