Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/gMlOG10XDVxkT9lynkd26xsEnyA.roa
File: gMlOG10XDVxkT9lynkd26xsEnyA.roa (raw, json)
Hash identifier: rXhgA8aA9aW1tSykjs/2qgO8dhD2q6dA6H54iFfRYJw=
Subject key identifier: 80:C9:4E:1B:5D:17:0D:5C:64:4F:D9:72:9E:47:76:EB:1B:04:9F:20
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018CC26D3723FE185F089D1BC50D5AF69886
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/gMlOG10XDVxkT9lynkd26xsEnyA.roa
Signing time: Mon 01 Jan 2024 00:29:46 +0000
ROA not before: Mon 01 Jan 2024 00:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43531
IP address blocks: 31.217.130.0/24 maxlen: 24
31.217.128.0/24 maxlen: 24
31.217.128.0/19 maxlen: 24
31.217.129.0/24 maxlen: 24
185.55.16.0/22 maxlen: 24
89.30.68.0/22 maxlen: 24
91.196.184.0/22 maxlen: 24
83.243.16.0/21 maxlen: 24
89.30.0.0/17 maxlen: 24
46.18.168.0/21 maxlen: 24
2a01:8200::/32 maxlen: 48
2a02:27f0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 10:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:37:23:fe:18:5f:08:9d:1b:c5:0d:5a:f6:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80c94e1b5d170d5c644fd9729e4776eb1b049f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:c4:56:fe:b1:29:5c:93:c5:3f:46:6c:91:
7e:17:f2:69:12:c5:f2:0c:66:9b:c1:8f:ea:7d:83:
49:07:ce:cf:6f:44:34:1e:64:f3:c1:40:f3:bf:f1:
cb:cf:8e:59:d8:96:c9:a0:67:b8:36:1d:9a:28:d0:
7b:68:87:03:42:a4:f1:4b:e6:36:0b:b7:32:77:1f:
21:ca:b9:1e:99:d7:49:8d:d3:f8:6b:b1:e9:be:d5:
a6:9d:2c:b7:3e:dc:8e:9f:7c:23:9c:e3:21:e8:03:
19:8a:fc:bc:82:60:27:b2:b5:fd:ed:ec:99:ac:c0:
3c:a2:15:92:41:72:33:eb:f0:4b:ae:be:5d:27:97:
ed:3e:7c:a6:01:18:a2:9c:5a:1e:92:a7:2b:54:63:
4e:0e:b6:c5:f5:a4:2c:5b:96:4e:00:6f:8a:ae:c9:
c8:37:4b:ac:6c:81:59:41:96:f1:80:88:2e:55:e0:
8e:2e:64:c7:93:f7:1e:10:16:27:6d:ca:95:c9:62:
7c:05:03:b0:86:83:2e:8a:04:99:01:68:65:79:3a:
ac:c0:a4:83:f4:fc:02:d9:f7:59:8b:21:c4:a9:98:
68:d5:3c:8c:de:b4:8a:27:08:58:36:54:eb:f8:ed:
8e:a4:d5:ec:e0:ae:f4:54:81:64:90:4f:c2:76:bf:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:4E:1B:5D:17:0D:5C:64:4F:D9:72:9E:47:76:EB:1B:04:9F:20
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/gMlOG10XDVxkT9lynkd26xsEnyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.128.0/19
46.18.168.0/21
83.243.16.0/21
89.30.0.0/17
91.196.184.0/22
185.55.16.0/22
IPv6:
2a01:8200::/32
2a02:27f0::/32
Signature Algorithm: sha256WithRSAEncryption
92:29:03:31:4c:a6:21:95:d0:cc:40:0f:f8:ca:aa:6b:59:49:
28:28:d3:8f:0e:79:89:34:17:1d:15:bc:4e:74:15:8b:94:ee:
a5:88:1f:1a:b4:ee:c5:cf:23:fa:53:96:e4:57:2d:8f:f9:91:
eb:27:ba:a4:f3:27:96:91:3d:e8:56:74:2f:27:46:2e:c8:de:
ae:6b:46:9d:ff:54:7b:04:69:a3:46:49:10:24:fc:90:58:e0:
09:9e:48:a9:e3:27:cf:09:ec:18:e3:d5:d0:4e:6a:fa:1a:4f:
3e:d7:eb:b2:4e:f2:79:44:b4:76:a9:9c:dd:5e:3b:19:ec:2a:
79:88:dc:ea:e9:56:6b:29:70:91:ca:6a:b0:7b:93:2b:04:52:
ff:b2:41:2a:c0:1b:b1:a7:ad:ed:a7:99:f0:9c:52:f7:cb:c3:
1c:c6:a0:d9:42:35:ce:7a:11:fe:fe:a9:9c:f0:30:18:63:49:
9e:0e:db:83:e8:6a:7e:12:af:f6:e5:cb:79:2f:5e:aa:30:0f:
28:a6:34:68:ac:7b:6a:67:98:fd:65:1e:3e:df:cb:8c:27:20:
1d:94:fb:ad:c1:6a:97:39:60:71:c5:8f:66:06:82:1c:02:68:
3d:bc:9a:93:0a:9d:4e:9d:c2:3d:5a:4d:84:3a:ee:a5:10:68:
0c:83:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:47 2025 by rpki-client