Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/ImYAMdRb5R3uhTH011eFFgJzyRY.roa
File: ImYAMdRb5R3uhTH011eFFgJzyRY.roa (raw, json)
Hash identifier: v/JfLlQSnwzfKJc2X9VLw97aGs1GD+5mnze/Bh3x7Xk=
Subject key identifier: 22:66:00:31:D4:5B:E5:1D:EE:85:31:F4:D7:57:85:16:02:73:C9:16
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 019150F3EE03E46D6DB8EE9D1534C2094932
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/ImYAMdRb5R3uhTH011eFFgJzyRY.roa
Signing time: Wed 14 Aug 2024 12:54:09 +0000
ROA not before: Wed 14 Aug 2024 12:54:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44710
IP address blocks: 31.131.140.0/24 maxlen: 24
31.131.141.0/24 maxlen: 24
31.131.142.0/24 maxlen: 24
31.131.143.0/24 maxlen: 24
91.217.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 06:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:f3:ee:03:e4:6d:6d:b8:ee:9d:15:34:c2:09:49:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Aug 14 12:54:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22660031d45be51dee8531f4d75785160273c916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:a7:be:6b:53:79:3e:d4:1c:62:13:05:f5:
1a:a4:02:5d:fd:d4:a1:c6:bf:75:56:a6:9d:1c:04:
bc:0e:09:a5:2b:1e:00:99:62:be:f8:1b:b4:b3:27:
f1:03:cf:db:30:b7:fd:3c:94:e2:07:eb:da:f2:b7:
cb:43:f8:29:0c:49:e3:82:7b:79:8c:1a:1d:2a:d5:
f2:dc:b4:3e:f0:1c:04:9b:cc:1f:77:78:04:a3:15:
c2:4e:7f:cf:e8:44:82:ef:94:79:25:2f:ef:34:c9:
36:00:29:41:f2:26:68:d3:a2:2c:db:bc:80:bb:d5:
02:96:31:62:b1:f2:42:a1:e1:8e:bb:cf:b3:dc:e7:
ea:b2:ec:87:bd:92:19:5e:ef:32:68:3f:0d:cf:4f:
50:14:ab:56:11:eb:82:37:ef:d7:fb:5d:c9:9c:dd:
63:ba:3a:84:2b:a5:c4:89:07:07:60:82:ff:d7:48:
90:8a:13:99:54:63:b3:7c:49:51:c9:cb:c9:d6:7e:
20:32:00:e8:69:85:75:82:42:90:cc:8e:28:01:36:
77:46:13:32:d9:f9:34:28:98:f8:a8:80:05:a5:12:
b2:bb:09:c2:e4:d8:f5:b0:57:db:f4:28:0b:5a:5c:
f4:d8:9d:a2:f7:7f:54:34:9f:5d:c2:38:6d:5e:dc:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:66:00:31:D4:5B:E5:1D:EE:85:31:F4:D7:57:85:16:02:73:C9:16
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/ImYAMdRb5R3uhTH011eFFgJzyRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.140.0/22
91.217.244.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3a:df:bd:10:6b:d4:b6:fe:cd:2b:31:40:4a:12:7d:11:bb:
82:cc:46:ca:fd:d6:1f:85:bc:77:48:9a:10:e2:a1:4e:c9:5a:
bf:12:b0:f0:4a:c4:47:c9:c3:ff:ab:85:49:42:83:9e:5c:28:
5a:e7:c6:a0:a2:91:df:13:ba:d1:a5:59:bb:99:e5:b0:51:f8:
e8:81:b9:8e:fd:e2:d7:ea:4a:67:1d:99:13:a2:35:1f:ce:e4:
55:7e:b8:91:82:cd:eb:81:34:86:94:29:be:c2:96:12:78:f6:
5c:1b:e5:46:ac:ab:3c:42:53:0b:d4:52:a9:3c:71:68:10:30:
70:87:bb:87:ac:53:95:a1:02:1e:89:43:e4:11:22:d5:dd:56:
30:c5:41:07:0e:72:71:18:c3:97:d8:76:38:6e:18:9a:fa:d0:
63:97:7e:38:b6:7c:b4:ab:80:92:95:a8:cd:75:3d:08:e0:f9:
76:b2:3c:be:d6:e1:7b:cf:75:f3:2b:86:be:f8:97:8b:69:3a:
c9:5b:24:6a:6d:cd:a5:d9:f7:35:d9:d2:8a:a5:2f:63:d5:32:
56:17:3c:7a:d2:a8:83:54:18:53:2a:66:70:9b:04:6b:dc:de:
e1:d7:f9:b2:17:3c:8d:ad:3b:7e:87:3b:9b:85:81:51:0e:13:
01:35:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:52 2025 by rpki-client