Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MdmvWB4F0zivKPgTSc6EWOZtFjY.roa
File: MdmvWB4F0zivKPgTSc6EWOZtFjY.roa (raw, json)
Hash identifier: XHySWb9+tAvOYkdZSBY1cBDICyLj8QGFrwgtlkXh4Pk=
Subject key identifier: 31:D9:AF:58:1E:05:D3:38:AF:28:F8:13:49:CE:84:58:E6:6D:16:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B0903FC826C16708ECAD9454E9E383B6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MdmvWB4F0zivKPgTSc6EWOZtFjY.roa
Signing time: Tue 10 Dec 2024 12:34:23 +0000
ROA not before: Tue 10 Dec 2024 12:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57634
IP address blocks: 31.13.192.0/24 maxlen: 24
31.13.199.0/24 maxlen: 24
31.13.209.0/24 maxlen: 24
85.217.168.0/23 maxlen: 23
87.120.67.0/24 maxlen: 24
87.120.156.0/23 maxlen: 23
93.123.9.0/24 maxlen: 24
94.156.0.0/23 maxlen: 23
94.156.7.0/24 maxlen: 24
94.156.76.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.171.0/24 maxlen: 24
212.73.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:90:3f:c8:26:c1:67:08:ec:ad:94:54:e9:e3:83:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 10 12:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31d9af581e05d338af28f81349ce8458e66d1636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:c5:a2:52:e8:10:e6:12:19:88:8e:82:d8:
ce:b1:ed:eb:14:93:21:18:84:25:ea:72:02:60:1f:
30:67:96:1d:4a:bf:a6:d3:46:c6:89:7c:36:e3:20:
2c:74:66:84:68:e2:2c:43:b3:d4:86:c4:3a:8b:18:
d7:f8:60:3f:90:a5:11:46:f5:e8:5f:e5:af:b5:f4:
91:c4:b9:fd:1a:cb:20:e4:ce:9a:30:e8:d3:ec:3d:
36:c1:48:98:06:55:da:cb:c7:dc:45:59:73:38:4b:
8b:57:44:9c:21:6a:7b:c6:5f:8f:aa:22:3b:ae:08:
22:52:63:d7:c4:a2:e7:6a:0e:b8:50:76:e1:c9:ec:
dd:24:ac:2e:65:91:df:c3:a0:ba:07:a2:78:15:12:
0a:16:ca:1a:cf:0e:8a:82:6a:60:a6:ca:59:d2:06:
35:ff:fc:e8:30:6c:16:de:5a:22:32:8c:62:42:fa:
a1:31:35:ab:28:e1:df:d5:8f:23:96:df:9e:95:9c:
22:94:a7:38:01:c5:21:e5:d1:1c:74:73:d6:99:98:
bf:e7:d5:fe:d1:06:64:13:84:62:44:c6:84:e4:f9:
c6:86:51:0f:ef:57:4b:fb:68:7a:29:8f:9e:15:9c:
6c:a1:67:38:57:e8:d6:94:2d:a4:68:4c:b0:45:17:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:AF:58:1E:05:D3:38:AF:28:F8:13:49:CE:84:58:E6:6D:16:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MdmvWB4F0zivKPgTSc6EWOZtFjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.192.0/24
31.13.199.0/24
31.13.209.0/24
85.217.168.0/23
87.120.67.0/24
87.120.156.0/23
93.123.9.0/24
94.156.0.0/23
94.156.7.0/24
94.156.76.0/24
94.156.170.0/23
212.73.151.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7f:27:db:21:56:94:2c:39:81:ba:09:e8:b8:62:f0:d6:b1:
18:be:63:8b:f8:08:81:71:75:28:05:c6:b0:0b:94:62:27:06:
1f:b6:bd:ef:38:70:b1:7c:25:8c:b3:31:af:a2:cc:75:0f:50:
18:83:b8:96:a7:3c:f4:eb:4f:38:2f:16:f6:60:27:aa:46:0e:
82:5e:f2:51:a1:b9:fa:24:95:af:a9:67:82:27:8f:ad:27:62:
32:00:b3:79:f9:6a:41:be:1d:35:1c:ee:a6:49:85:0d:91:13:
7d:cc:85:a4:91:cd:76:29:8e:d1:ba:93:98:90:1c:a3:75:21:
29:f5:b3:0d:cc:18:ba:d8:25:d8:ea:ec:10:b7:75:42:c6:d2:
93:b0:4e:24:1f:2a:14:59:ca:c0:71:e7:b1:d5:cb:b2:a0:72:
80:72:86:87:b4:1e:89:e5:44:3e:0f:44:c4:29:0e:bc:b4:e1:
53:3d:e2:68:84:4a:82:67:69:73:4d:5e:28:47:83:c6:08:82:
f5:47:cd:ee:2b:21:47:eb:1a:62:65:55:6d:3a:71:8a:57:16:
23:20:80:2d:08:48:e4:f2:2d:fd:e7:ff:15:22:8b:32:48:cf:
75:59:dd:50:1c:b8:7b:64:f1:88:6c:c0:db:a6:02:b5:bb:aa:
86:9d:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:07:09 2025 by rpki-client