Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VeLuq7fXcokWvtUNwTpc7DLkEL4.roa
File: VeLuq7fXcokWvtUNwTpc7DLkEL4.roa (raw, json)
Hash identifier: WcCRpf/Lf/Y9ZxIx1BSWcdJKz2qPb+R4c6YIGz/inug=
Subject key identifier: 55:E2:EE:AB:B7:D7:72:89:16:BE:D5:0D:C1:3A:5C:EC:32:E4:10:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B0243784EE2FF4E1D308A1715D9436E1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VeLuq7fXcokWvtUNwTpc7DLkEL4.roa
Signing time: Tue 10 Dec 2024 10:36:23 +0000
ROA not before: Tue 10 Dec 2024 10:36:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 194.31.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:24:37:84:ee:2f:f4:e1:d3:08:a1:71:5d:94:36:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 10 10:36:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55e2eeabb7d7728916bed50dc13a5cec32e410be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:3b:87:be:8b:cb:5e:99:98:aa:5a:76:1a:
7e:3d:e6:6b:6c:31:ca:0f:6e:32:c8:20:73:76:93:
ca:82:18:9d:87:00:1e:cc:e6:3e:15:1f:46:9a:a5:
db:52:a4:59:8c:4c:29:01:53:34:1e:cd:c8:71:ad:
27:f4:86:2a:81:68:2c:ff:ae:12:bb:6a:89:bf:e7:
54:9e:a0:ae:a3:2e:d7:5f:23:03:42:22:d6:02:81:
d3:62:94:36:c3:94:a0:11:93:14:42:a1:75:6f:9d:
7f:d2:a7:00:b5:35:cb:33:e7:a6:3a:a6:06:82:1b:
d2:22:93:21:9e:d6:87:33:14:33:c2:4a:8a:e3:07:
1a:d5:f3:77:f1:c8:61:42:5e:27:5e:b0:5f:90:aa:
a6:2b:4f:1b:31:ff:71:f2:c3:3d:b1:83:ca:8e:ba:
b8:36:6f:b1:35:ce:07:82:67:34:84:89:8b:34:df:
21:f2:d7:86:f2:15:5b:59:fb:8a:a1:cf:e8:f7:d4:
4c:d1:94:d0:a9:5e:eb:ac:d0:22:a0:9e:14:2b:6e:
43:be:79:61:23:46:56:89:62:a7:43:dc:63:cf:99:
b2:82:4c:39:57:08:26:f6:9e:dc:d9:2f:fb:e7:1c:
f5:34:39:71:c4:f2:1e:ca:e1:c8:ad:20:6f:40:1b:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E2:EE:AB:B7:D7:72:89:16:BE:D5:0D:C1:3A:5C:EC:32:E4:10:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VeLuq7fXcokWvtUNwTpc7DLkEL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.222.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ba:d5:8b:28:76:c6:6a:86:c7:8d:93:9a:fb:0b:c0:42:d1:
60:5e:cd:2a:01:68:e9:5a:65:ad:11:80:b2:41:76:13:e4:28:
f5:f9:d6:84:fb:98:ba:b0:8a:65:b7:ea:31:b2:39:da:53:46:
c9:6d:6e:88:d6:d8:d2:c4:4d:85:c0:4e:72:aa:f1:71:06:10:
41:47:9f:09:df:e4:5d:a2:81:bb:92:f4:7a:36:66:c7:36:3b:
28:68:85:90:c0:1c:c6:d5:11:55:84:b5:07:fe:63:d4:0d:18:
5d:58:2b:0a:f5:c4:c8:0d:4f:39:64:ea:60:21:61:1e:b2:2f:
95:2f:a5:7b:73:a0:82:49:a3:54:cf:d4:e9:f9:47:cb:01:9a:
20:6a:e2:5f:9e:9e:01:27:8e:12:68:a7:0d:9f:83:0d:88:0d:
82:75:01:5b:a4:93:69:28:b4:77:7e:5f:81:10:94:b9:a7:cd:
17:85:0b:75:49:fe:a8:d2:8e:2f:ca:94:d0:e9:d3:19:2c:5f:
22:c0:08:e6:96:4b:13:dc:12:6b:16:26:7a:fe:6c:eb:9c:85:
43:14:44:87:4d:63:d6:a2:05:d0:56:56:8d:4d:bc:b1:4b:9b:
5d:f2:1b:ff:e0:18:34:f2:78:27:b0:42:8e:36:6b:b6:fb:19:
97:70:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:43:37 2025 by rpki-client