Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HVjc50MGX1FQEsBIxGSs0NTMzJ4.roa
File: HVjc50MGX1FQEsBIxGSs0NTMzJ4.roa (raw, json)
Hash identifier: I/BCLlk3Ty3mMGww1DJZjCL2b9SbNxoZBTk4QKm54Wc=
Subject key identifier: 1D:58:DC:E7:43:06:5F:51:50:12:C0:48:C4:64:AC:D0:D4:CC:CC:9E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193CE46175F6D171F14A07344B3C8795065
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HVjc50MGX1FQEsBIxGSs0NTMzJ4.roa
Signing time: Mon 16 Dec 2024 07:02:00 +0000
ROA not before: Mon 16 Dec 2024 07:02:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60230
IP address blocks: 31.13.244.0/24 maxlen: 24
31.13.244.99/32 maxlen: 32
87.120.236.0/24 maxlen: 24
2a00:1728:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:46:17:5f:6d:17:1f:14:a0:73:44:b3:c8:79:50:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 16 07:02:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d58dce743065f515012c048c464acd0d4cccc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:1a:6e:fe:90:7d:2d:ab:11:d5:90:86:98:
a0:99:a4:9b:65:d3:5a:f9:a2:20:68:21:4e:0f:04:
02:ce:de:2d:70:8f:1e:ad:1a:27:b3:ce:47:f2:58:
57:c6:66:73:2e:42:27:65:14:22:ea:9b:08:d0:ad:
4c:27:7c:88:ef:26:20:79:31:31:ac:6a:77:13:64:
da:73:a5:53:42:a8:fd:ff:0c:02:b7:27:db:fa:94:
e3:30:1b:cc:ac:21:a8:8f:3b:b6:22:26:34:6e:d7:
0b:99:5f:7d:63:67:e9:9c:ce:89:5b:ae:51:2f:6f:
b5:56:c3:38:3b:fa:31:48:09:d1:0a:46:e4:56:46:
24:68:24:6b:1e:07:34:87:36:eb:eb:d7:12:f6:20:
3f:9b:81:3f:8e:93:a4:cc:6f:74:ab:e4:0c:23:36:
fd:bb:dc:e2:58:2e:bd:bb:49:2e:40:81:ad:55:7e:
41:49:37:d1:f8:10:cb:34:1d:3c:39:8d:1c:43:97:
58:4a:1f:9e:c2:d3:27:f8:3e:2d:c3:dc:9e:af:85:
8a:ef:4c:5a:af:6e:e6:dd:71:33:66:42:49:39:d3:
2b:2d:d2:ae:aa:9d:98:74:da:0c:7f:78:b5:7f:cf:
e6:f2:3d:92:9c:73:2a:9a:40:7e:f3:2b:35:29:78:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:DC:E7:43:06:5F:51:50:12:C0:48:C4:64:AC:D0:D4:CC:CC:9E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HVjc50MGX1FQEsBIxGSs0NTMzJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.244.0/24
87.120.236.0/24
IPv6:
2a00:1728:a::/48
Signature Algorithm: sha256WithRSAEncryption
04:df:43:77:df:2d:02:7c:a3:e2:d9:1e:48:8a:9c:1e:71:dc:
4d:01:d1:57:34:9a:33:80:9b:6f:6e:57:0f:9a:bf:b3:32:75:
eb:02:7e:45:ae:3a:26:d2:d6:48:af:29:b8:d6:69:5b:33:ff:
10:5f:28:1c:2d:b1:09:bf:2c:4b:cb:ef:a1:60:0f:f2:5c:c3:
30:fc:76:7f:01:b2:4e:a8:0c:64:5b:d9:25:fb:69:6c:3d:15:
aa:31:08:6f:ea:09:e4:3e:ad:84:05:05:4a:5f:0f:a0:f4:84:
e9:56:5f:ce:83:60:8b:4f:52:ee:e8:00:05:15:50:75:59:52:
58:0d:e0:a9:0d:16:36:25:89:d5:d9:60:56:a0:e8:dc:c4:1c:
b9:5c:bd:8a:fa:e0:76:23:5a:e3:a5:f3:1a:9d:27:ac:ad:a3:
f5:29:38:bc:75:5e:36:db:7a:db:be:bb:e4:24:78:49:62:7d:
a2:3d:86:7b:b5:a5:60:1c:c5:1a:8c:48:e3:ce:99:17:ac:20:
d9:cc:19:78:ae:56:e8:39:15:ee:10:5d:24:92:f9:82:3c:e3:
ac:a0:a9:d1:14:7d:2e:44:5d:50:53:83:49:67:6f:71:d2:ad:
79:e2:d1:44:e8:40:7e:5a:66:31:ff:d1:12:18:95:ee:66:a6:
e2:35:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:35:44 2025 by rpki-client