Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/ns31VvLXnGbSMzj8cwb1ltS_7WY.roa
File: ns31VvLXnGbSMzj8cwb1ltS_7WY.roa (raw, json)
Hash identifier: 8NB1vqZtOS6Ku54elhZhqoA2qzkjev6hsTxdfx263rg=
Subject key identifier: 9E:CD:F5:56:F2:D7:9C:66:D2:33:38:FC:73:06:F5:96:D4:BF:ED:66
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 018CC5DC08B83A49B01A3B8C3847849346C7
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/ns31VvLXnGbSMzj8cwb1ltS_7WY.roa
Signing time: Mon 01 Jan 2024 16:29:40 +0000
ROA not before: Mon 01 Jan 2024 16:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60415
IP address blocks: 185.31.92.0/24 maxlen: 24
185.31.95.0/24 maxlen: 24
185.31.92.0/22 maxlen: 22
185.31.94.0/24 maxlen: 24
185.31.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:08:b8:3a:49:b0:1a:3b:8c:38:47:84:93:46:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ecdf556f2d79c66d23338fc7306f596d4bfed66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:d4:14:72:3b:3e:2a:2c:71:1f:c7:87:ca:
4a:da:c0:8f:f4:c9:52:5d:5b:d4:5f:e3:65:ea:c3:
60:b1:62:bd:1a:54:7d:9a:53:7f:ff:b1:73:4c:0f:
b4:be:11:b5:61:de:b8:ab:a8:56:c0:cb:93:c3:4c:
88:86:f2:1c:71:fe:32:b7:a0:6d:aa:01:6e:12:84:
94:36:a1:c2:fe:e7:03:26:70:65:b1:f1:fe:60:67:
92:f0:e7:97:e8:ab:0e:72:af:04:6c:76:bc:5e:71:
a6:0d:a4:bd:ef:31:83:62:01:03:50:44:a0:83:42:
d1:2d:48:b5:b3:8a:2f:76:35:fd:a0:9a:6f:5c:d1:
cd:b7:c5:8d:eb:e8:9f:2a:f1:7f:5b:bb:63:a2:22:
a2:3b:17:3f:bb:14:81:9a:90:31:7a:38:9d:f5:01:
86:15:aa:b0:f3:13:67:4c:e5:f0:29:aa:fe:59:fb:
4e:8b:e3:98:5c:18:70:da:c8:43:fe:b0:87:71:ad:
f6:d3:89:8b:39:39:c6:d3:6c:88:1c:3d:a6:8e:ea:
1d:35:4f:2c:71:60:40:06:28:f1:d4:8b:f2:a1:e0:
a7:c0:db:55:cc:b7:fa:e6:8b:d7:01:d3:05:a1:85:
93:fa:d2:08:a0:33:61:8d:4c:8a:65:53:c4:51:b4:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:F5:56:F2:D7:9C:66:D2:33:38:FC:73:06:F5:96:D4:BF:ED:66
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/ns31VvLXnGbSMzj8cwb1ltS_7WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a7:fd:65:c0:16:5b:01:25:35:64:4b:62:43:02:f2:87:fe:
04:df:ad:df:af:e3:31:3b:29:47:1a:f0:93:bc:c9:d0:7b:16:
f9:c2:4c:4f:82:46:1d:d1:b2:12:de:fa:0a:83:d1:fe:3f:33:
12:45:6f:3b:d3:ea:fa:03:e7:ff:b6:20:11:66:a7:5c:76:5d:
14:f3:19:3a:29:9f:33:51:b8:df:fe:ce:bf:67:9e:95:58:f8:
5c:1a:81:e2:44:3e:d8:96:67:af:0a:95:ee:95:a1:7d:e0:64:
f1:26:02:03:df:e1:f5:87:29:3a:39:13:8d:6f:86:d7:09:28:
ed:f6:1f:f9:c5:9e:0f:d0:13:a8:c8:25:14:c2:bd:86:3c:3e:
5f:c2:5f:22:cf:38:30:97:4a:2d:71:4e:f2:80:91:42:98:ce:
8b:9e:16:1f:b1:51:1b:1f:a8:6e:b5:b2:37:4b:f5:1b:d6:d6:
5c:7d:e8:13:e5:4b:e1:04:61:3d:be:71:14:2a:62:41:92:03:
f9:e8:8d:fc:a0:bf:9d:63:b4:5e:b1:4d:73:bc:26:1f:ef:e7:
97:77:39:82:23:b8:d6:06:23:a2:5a:db:87:e5:bf:8e:ce:33:
1e:34:62:49:b8:c7:97:eb:2b:4a:8e:26:de:45:bb:4d:ec:9c:
c1:d4:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:31 2025 by rpki-client