Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/63jB5ji8RI7Qaxcvk_ftMbDLWA0.roa
File: 63jB5ji8RI7Qaxcvk_ftMbDLWA0.roa (raw, json)
Hash identifier: xUoRaw5ryLo7feXegjbrh7UgeuYm4zDP7GHxWn8HOiU=
Subject key identifier: EB:78:C1:E6:38:BC:44:8E:D0:6B:17:2F:93:F7:ED:31:B0:CB:58:0D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01952FA9F7379331A371AB7CB18945A57DE0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/63jB5ji8RI7Qaxcvk_ftMbDLWA0.roa
Signing time: Sat 22 Feb 2025 21:57:02 +0000
ROA not before: Sat 22 Feb 2025 21:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 31.210.42.0/24 maxlen: 24
31.210.55.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.82.0/24 maxlen: 24
78.135.83.0/24 maxlen: 24
78.135.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 13:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2f:a9:f7:37:93:31:a3:71:ab:7c:b1:89:45:a5:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 22 21:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb78c1e638bc448ed06b172f93f7ed31b0cb580d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fb:70:79:6e:aa:35:bd:00:d5:e7:a2:7d:60:
86:f0:d1:41:3d:65:a9:23:a5:02:18:7e:bc:ed:ab:
2c:9a:0f:5b:2b:45:d1:d9:57:7c:13:3f:97:7a:df:
80:3e:66:79:6e:b9:3b:d2:e7:70:3f:28:e5:1a:39:
cc:d5:99:d5:eb:6a:28:8b:9d:55:e5:d8:2c:3f:21:
a7:90:8b:57:e3:05:45:cd:c8:b3:a5:fb:f2:a5:aa:
8d:c3:1f:ea:c5:22:15:24:23:e8:bb:c3:e1:55:0e:
07:06:6b:42:7e:7f:58:93:5c:67:43:41:9b:03:cb:
02:e7:a8:eb:32:84:54:84:9f:3c:a4:37:56:87:c4:
9b:d2:e0:b1:77:c9:10:b8:8c:d9:74:58:1c:f8:66:
42:5d:b7:d6:cb:f4:50:d9:bd:2c:f9:2a:72:2e:67:
82:12:14:25:fa:2a:46:e3:e4:ed:8c:e0:e0:cf:37:
0d:83:85:63:bc:95:ad:fe:54:49:24:6f:02:b8:da:
04:67:59:f7:a9:55:3d:7a:71:c9:65:e8:f5:7a:9c:
c1:a0:c2:59:df:41:12:38:d4:b8:39:91:38:27:28:
73:8f:14:09:41:56:83:26:6b:be:4f:e0:fb:a3:10:
8a:77:92:ae:1d:56:bd:f3:ea:e4:34:d2:5e:c0:a0:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:C1:E6:38:BC:44:8E:D0:6B:17:2F:93:F7:ED:31:B0:CB:58:0D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/63jB5ji8RI7Qaxcvk_ftMbDLWA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.42.0/24
31.210.55.0/24
78.135.67.0/24
78.135.81.0-78.135.83.255
78.135.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:42:a0:27:55:87:b1:e4:c2:ff:d1:96:63:ae:a6:7c:d3:d2:
c0:ea:d1:ff:51:2b:8d:7f:c9:76:2d:11:c6:84:7a:42:99:72:
62:7d:07:85:fb:eb:dc:de:2f:11:1d:0e:58:d4:a9:34:fa:1a:
71:3b:1f:f9:5d:b3:c0:60:9b:bf:e6:d5:68:75:7b:74:13:ca:
4d:df:be:a6:f0:02:4b:f1:a5:34:d6:a1:32:7d:ed:d2:d3:0e:
b3:d9:16:46:64:c6:7f:60:37:53:5a:6b:43:19:ea:c1:2b:f9:
94:86:6f:22:f7:b4:e1:55:13:32:e5:95:0b:4b:74:c3:bc:68:
dc:73:de:f6:bf:9f:20:75:20:aa:fd:6c:6f:a4:dd:71:2f:d4:
6d:44:43:0b:c6:eb:5b:81:db:7c:47:a9:cf:a8:50:cd:05:5b:
bd:49:d4:17:fe:7c:78:46:63:62:5f:84:9e:f8:a0:2d:38:cb:
8b:52:dc:76:e5:69:4d:2b:51:41:12:26:67:69:7a:dc:2a:e9:
95:52:43:69:8e:46:99:14:55:fd:cd:92:7f:7e:41:3c:76:53:
33:8c:3d:b4:db:e3:e6:9d:90:cd:d8:65:2a:3b:5d:a2:0f:6a:
ff:de:fa:e5:b8:37:38:9b:a6:39:7c:65:96:b5:0d:e5:ac:81:
f8:30:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:53:06 2025 by rpki-client