Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RCqvCm8f1sQQoQg4d2O0zXRsYQ8.roa
File: RCqvCm8f1sQQoQg4d2O0zXRsYQ8.roa (raw, json)
Hash identifier: M2teZ2ujQikC2O9N1KQXgdZIr7Zq0uE/09B0npa2YVE=
Subject key identifier: 44:2A:AF:0A:6F:1F:D6:C4:10:A1:08:38:77:63:B4:CD:74:6C:61:0F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824CECFF9EA9A26BC84CDD33142C7C0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RCqvCm8f1sQQoQg4d2O0zXRsYQ8.roa
Signing time: Thu 02 Jan 2025 17:51:28 +0000
ROA not before: Thu 02 Jan 2025 17:51:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215539
IP address blocks: 31.13.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 00:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ce:cf:f9:ea:9a:26:bc:84:cd:d3:31:42:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=442aaf0a6f1fd6c410a108387763b4cd746c610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:59:1f:3a:a8:44:73:be:3d:95:05:c6:ee:
c8:ee:50:8c:2f:e6:a0:b4:da:96:26:53:ec:d3:d2:
b2:88:9d:90:5d:63:00:99:56:4b:40:f9:37:f5:40:
46:ed:e7:2c:18:61:91:31:92:73:d3:3f:d3:98:16:
bc:0f:74:c3:df:d9:24:09:8a:40:e1:3b:3d:47:d4:
1b:f0:9c:9e:e0:b6:41:22:3d:a5:44:35:ca:ba:96:
2f:fb:83:7d:0a:d8:a3:0a:80:c9:fe:d4:cf:74:07:
39:e2:30:bf:07:d3:37:e4:f5:fc:53:ea:55:ab:c0:
27:fd:d3:6c:dd:4d:ee:42:6e:b9:e0:10:de:3b:56:
4d:8e:5e:15:91:a4:34:ee:3b:a1:52:32:c1:da:7f:
dc:0d:a2:e9:1a:48:b4:a9:4e:6b:8f:f5:be:b0:20:
c3:d1:f3:4c:ac:fa:e4:bf:06:a7:a2:d5:97:59:26:
6e:63:c7:a8:91:b8:79:c8:9f:a3:9f:b3:c2:75:31:
94:8c:d6:8b:6b:29:e4:ef:54:40:43:5e:70:10:6b:
eb:dc:df:8e:28:f3:b5:47:8e:0d:e5:97:35:0a:28:
ff:c4:3d:fc:49:06:e9:0d:67:5e:c3:ce:9c:36:e5:
44:0f:da:59:15:26:5e:01:77:1d:b5:11:2f:92:14:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:AF:0A:6F:1F:D6:C4:10:A1:08:38:77:63:B4:CD:74:6C:61:0F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RCqvCm8f1sQQoQg4d2O0zXRsYQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
Signature Algorithm: sha256WithRSAEncryption
39:df:88:c8:b1:37:42:da:11:1a:a8:b4:92:01:e8:db:9d:7a:
0b:99:01:d5:07:e6:f3:db:15:5a:fc:78:94:56:f3:a1:c6:f2:
29:c4:b0:f6:79:dc:17:68:91:26:79:86:5f:49:18:33:39:15:
46:cd:67:26:87:9d:72:75:32:41:2d:d1:92:41:8b:84:57:fd:
dd:2a:5c:53:4d:09:07:d3:78:7b:16:b2:11:24:ee:8b:39:44:
55:bb:e1:93:93:ad:c7:37:6e:b3:1c:ae:9a:0a:78:d8:34:3c:
cc:a5:65:a7:a5:0e:a1:30:9c:ca:b6:92:1c:85:dd:eb:5f:29:
dd:08:ae:86:b1:71:f3:10:3d:f0:9a:79:c5:90:33:0f:00:e6:
af:98:c1:97:34:61:f5:f9:80:c7:8d:f3:8d:35:b4:90:e5:11:
e7:a3:ab:cc:a8:65:c7:f4:cf:51:3d:b1:b6:c3:b6:af:e0:b2:
d8:76:dd:ce:cb:1e:66:be:90:03:e3:85:b8:7e:23:11:f8:70:
ba:e1:5f:0b:17:54:d4:2b:d4:af:a5:9a:ff:3a:8b:ef:c4:83:
4b:fa:b9:a2:54:7c:50:00:a4:07:14:8c:25:b5:ac:cd:27:bd:
87:98:d9:51:35:37:d2:74:66:9d:f7:b9:91:6e:0f:18:1b:f5:
0f:59:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:28:47 2025 by rpki-client