Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/PfRtFIpa3DkLOJoSmnAwXHnHqCY.roa
File: PfRtFIpa3DkLOJoSmnAwXHnHqCY.roa (raw, json)
Hash identifier: OcgcdfMuPZj9VG2exRNZFcIMryuzYwdHgrEnD7BXTR4=
Subject key identifier: 3D:F4:6D:14:8A:5A:DC:39:0B:38:9A:12:9A:70:30:5C:79:C7:A8:26
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 0192E2A739CDC3A166203E42B68ED870D9DD
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/PfRtFIpa3DkLOJoSmnAwXHnHqCY.roa
Signing time: Thu 31 Oct 2024 12:57:43 +0000
ROA not before: Thu 31 Oct 2024 12:57:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57718
IP address blocks: 31.135.160.0/23 maxlen: 23
31.135.162.0/24 maxlen: 24
31.135.163.0/24 maxlen: 24
31.135.164.0/23 maxlen: 23
31.135.166.0/24 maxlen: 24
31.135.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:a7:39:cd:c3:a1:66:20:3e:42:b6:8e:d8:70:d9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Oct 31 12:57:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3df46d148a5adc390b389a129a70305c79c7a826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:45:d8:cc:dd:b0:bf:58:3e:4e:75:46:1d:
76:6c:ca:a9:7c:66:81:f9:db:87:e3:04:92:05:5e:
75:98:e7:8d:3f:b7:a3:44:cc:ef:41:7b:04:ae:1e:
4c:a9:d1:f7:c2:ed:7b:d2:a1:23:7c:0c:ab:3d:f3:
5e:21:50:3d:b6:80:0c:7b:68:88:44:2e:25:ed:1f:
9a:67:31:c5:72:c8:68:11:94:20:b9:30:b4:e3:6a:
f4:37:86:29:11:48:e5:78:da:2d:f2:53:e2:9c:2e:
d9:92:2c:6c:4c:4f:7a:c7:b6:19:61:a6:43:0e:55:
17:1b:e3:39:7b:21:8d:c3:ed:20:cc:b0:d4:ec:94:
a2:40:2f:aa:bf:f4:52:f8:7c:ec:9f:2f:eb:18:61:
80:cd:c3:a9:bf:a5:21:8a:d6:66:3d:b6:69:4c:c9:
7a:48:c6:f0:78:77:d2:31:39:4a:0d:9a:9c:db:91:
21:d8:5b:73:25:ad:48:42:9c:50:ef:63:a8:38:06:
67:83:cd:ef:49:a1:c0:de:76:a2:c4:0c:2c:5a:a2:
b0:70:43:9d:5f:28:e5:ef:f2:86:ab:49:a1:f8:1f:
e7:1f:04:f5:6f:38:9c:9d:17:a2:5f:5d:5f:af:e0:
94:bf:8f:76:05:c3:3f:6c:cb:6b:62:27:0f:86:93:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:6D:14:8A:5A:DC:39:0B:38:9A:12:9A:70:30:5C:79:C7:A8:26
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/PfRtFIpa3DkLOJoSmnAwXHnHqCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.160.0/21
Signature Algorithm: sha256WithRSAEncryption
13:95:ce:2d:a2:13:05:00:6e:d6:c0:36:4b:8c:cf:0d:bd:82:
86:59:51:58:99:2e:39:de:bb:e4:2c:c5:de:1d:da:1f:c0:c7:
26:50:b8:0b:32:f7:6d:d5:2f:c2:da:c3:21:4e:7f:bc:df:59:
97:8a:ec:a6:d4:32:ae:c5:65:51:05:b9:d8:2c:17:6d:ab:b3:
ba:eb:0d:8c:36:5f:a9:e6:ac:91:56:26:24:ec:e6:4f:be:cd:
c6:5a:cd:da:0a:68:8f:5d:68:1e:1c:7f:b4:e7:36:12:1d:8a:
6b:73:9f:08:fe:ee:d4:8c:4d:c0:21:ed:f1:40:1b:4d:0d:41:
4a:8b:fb:4b:c6:43:60:3f:52:10:2d:49:a6:d4:8a:f9:e7:c4:
03:5b:d9:1a:ce:35:e0:f0:f4:ce:03:2b:37:0f:7f:b9:f2:9f:
75:ba:18:84:cc:d5:7a:e4:1a:c8:62:7c:21:96:89:53:90:aa:
39:f7:db:8a:bf:54:cb:25:84:2f:28:8c:6d:27:89:2e:dd:b0:
8c:4c:5b:c0:43:ee:e3:c9:73:67:81:9f:ef:fa:2b:f1:18:d5:
c2:09:13:f6:61:cf:fe:07:98:e5:a6:d7:67:0d:27:43:8c:b1:
c9:27:65:52:45:c6:09:02:23:cf:4f:c9:b0:09:9c:42:11:79:
ea:69:af:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:23 2025 by rpki-client