Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/2tenc3-_1CVuuYcAQM5Vbm_9ABo.roa
File: 2tenc3-_1CVuuYcAQM5Vbm_9ABo.roa (raw, json)
Hash identifier: 8uMSvP3k+fEXE8FgxV0YtE7q4GMzEu0QYWSS7nSTrPU=
Subject key identifier: DA:D7:A7:73:7F:BF:D4:25:6E:B9:87:00:40:CE:55:6E:6F:FD:00:1A
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 0192FBA6203B97589D497F9BAAB43B0601C7
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/2tenc3-_1CVuuYcAQM5Vbm_9ABo.roa
Signing time: Tue 05 Nov 2024 09:27:01 +0000
ROA not before: Tue 05 Nov 2024 09:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61152
IP address blocks: 31.133.120.0/21 maxlen: 21
31.133.120.0/22 maxlen: 22
31.133.124.0/24 maxlen: 24
31.133.126.0/24 maxlen: 24
31.133.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:a6:20:3b:97:58:9d:49:7f:9b:aa:b4:3b:06:01:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Nov 5 09:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dad7a7737fbfd4256eb9870040ce556e6ffd001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:f2:50:3d:2b:99:f8:c1:83:b4:0f:74:92:
3d:01:2e:eb:8f:cc:fa:26:66:35:d5:fa:f1:65:2f:
32:ab:7b:39:3f:55:ff:e8:8d:f1:0e:5f:22:79:2a:
a3:0d:43:42:8e:32:28:ef:a3:53:77:e0:a2:b9:4a:
47:06:58:48:17:08:c3:e1:95:24:7b:e0:e4:e9:ef:
aa:91:71:9c:59:be:34:b6:ed:96:bb:b3:a6:21:f7:
28:66:8f:b4:7a:01:48:0f:7b:43:85:af:84:34:0c:
49:d0:34:dc:11:3a:cc:fb:13:e3:6a:fc:39:e8:be:
a7:af:c6:fa:8c:86:d3:80:ab:11:b4:c2:e5:72:ee:
34:e5:e4:84:4c:cc:f6:bb:cf:51:eb:75:93:59:67:
de:c6:f4:04:b6:0f:d1:b4:33:57:d0:89:fe:81:db:
e2:c9:f2:22:98:cc:2d:06:0d:50:6a:de:e5:bd:93:
4b:89:f4:51:26:7f:a0:2e:00:0b:63:44:cd:2f:e3:
2e:ca:af:a9:98:aa:b5:43:0e:68:58:0e:78:06:ce:
b9:22:27:de:81:32:3a:66:b4:8a:d5:30:00:a2:77:
98:09:50:51:49:f5:ec:98:62:d9:27:8b:55:35:9e:
69:05:45:a7:20:d3:91:57:46:dc:02:d0:a4:20:27:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:A7:73:7F:BF:D4:25:6E:B9:87:00:40:CE:55:6E:6F:FD:00:1A
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/2tenc3-_1CVuuYcAQM5Vbm_9ABo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.120.0/21
Signature Algorithm: sha256WithRSAEncryption
56:02:eb:18:1f:84:74:ad:7c:51:0d:02:64:cf:1a:aa:cd:89:
1e:fd:3b:7c:5b:48:64:63:97:9e:ba:e9:3a:92:4f:2f:d3:61:
1b:7c:6f:14:8d:10:82:fd:32:33:8a:76:7e:9e:98:70:6f:a0:
e9:12:16:9c:70:40:64:ae:e9:43:be:28:6c:34:da:3d:65:a4:
43:dd:7e:25:ba:06:27:c5:70:18:49:ff:35:9b:82:40:cf:e6:
c5:55:2a:ea:e5:76:ab:33:2f:8c:82:35:46:88:1e:90:4f:34:
84:da:47:8f:c2:1f:1e:ba:5e:b8:6d:52:10:47:ce:af:78:06:
51:60:0b:b9:c9:24:60:30:e8:00:eb:82:e4:60:63:f1:8c:6a:
ed:ca:75:f4:29:ef:74:e3:c6:3b:36:f7:d0:7e:42:64:e5:01:
73:70:b4:3e:bf:79:27:f4:72:32:2b:c6:b1:de:d8:49:77:1f:
8d:6e:93:1c:c4:f7:74:65:17:d1:89:c0:df:75:68:42:58:77:
17:84:d3:39:6f:67:28:6a:ec:12:f6:25:25:03:b3:69:34:57:
ed:87:48:19:8e:7c:63:fa:5c:f4:38:6b:1f:cf:f0:cc:59:d1:
f1:5b:02:e5:d5:09:c8:2c:6d:94:7f:72:90:a4:31:6c:0a:b6:
f8:15:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:40 2025 by rpki-client