Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BEu-5qP_Sr0VKxRyNIfgS7F15ks.roa
File: BEu-5qP_Sr0VKxRyNIfgS7F15ks.roa (raw, json)
Hash identifier: 6dLw+xCUwPi63Ye/vk76L09YpFfbYRmVm5yecZpXBXE=
Subject key identifier: 04:4B:BE:E6:A3:FF:4A:BD:15:2B:14:72:34:87:E0:4B:B1:75:E6:4B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019416BA0D17ADF7D986327B2CC6629E7E67
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BEu-5qP_Sr0VKxRyNIfgS7F15ks.roa
Signing time: Mon 30 Dec 2024 08:41:19 +0000
ROA not before: Mon 30 Dec 2024 08:41:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:ba:0d:17:ad:f7:d9:86:32:7b:2c:c6:62:9e:7e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 30 08:41:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=044bbee6a3ff4abd152b14723487e04bb175e64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:4c:b9:86:f1:2c:92:d1:79:e7:ff:21:dc:
4e:38:28:10:9a:ce:23:96:8f:e1:c7:ce:c2:1d:62:
87:cf:9f:2e:3c:42:55:96:8f:e8:1a:5f:26:2f:11:
48:fa:29:0c:94:ba:08:ef:ac:37:40:ef:26:15:a2:
78:26:e5:b1:51:f6:e9:32:6d:d1:46:f2:d2:d0:ca:
4d:fc:87:29:f2:ab:1c:7d:99:ef:3a:06:c6:b8:40:
ee:44:b7:d5:1e:48:14:bd:b6:dc:3a:00:d7:16:82:
b6:ee:2b:fe:6d:a2:75:3a:56:f6:a9:d9:eb:85:a9:
d2:aa:68:5d:cc:4f:9a:18:17:6c:b9:d6:cc:df:84:
30:13:58:27:26:3d:0a:0c:58:b7:2a:ce:cc:b5:1a:
f0:fd:9b:6d:93:76:db:d9:10:e0:1a:1a:18:ba:f6:
50:32:c7:e7:27:a0:ab:b9:a5:2d:23:d7:d5:c9:c5:
ff:b9:55:78:3c:7b:08:f0:de:72:84:bf:c7:3c:09:
dd:06:d0:49:1f:a3:e6:e1:cf:28:56:48:20:84:5a:
eb:eb:87:50:07:d0:3b:9d:06:54:d6:96:91:03:e9:
f6:f4:03:6c:4a:5f:36:09:93:fc:08:1b:e7:aa:99:
5d:2f:22:ff:dd:b0:e8:42:db:9c:d6:37:36:8e:45:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:BE:E6:A3:FF:4A:BD:15:2B:14:72:34:87:E0:4B:B1:75:E6:4B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BEu-5qP_Sr0VKxRyNIfgS7F15ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.92.0/23
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.153.0/24
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
58:b6:bb:0a:f3:91:16:e4:60:c2:4a:17:f6:a0:f4:6d:03:19:
64:2e:dc:58:65:85:b5:38:60:5d:d3:97:b5:a9:3b:04:f1:49:
ce:9f:12:de:04:0a:b6:58:07:f8:aa:d3:52:b2:75:56:0f:45:
56:8b:ea:0b:8f:9a:ae:a9:09:c0:28:36:0f:6a:c6:d7:38:bd:
d5:58:7d:49:3a:80:65:4e:2b:a3:a7:78:76:06:5a:93:eb:8e:
67:71:31:19:9e:30:94:7a:57:a4:3a:74:35:7b:56:5a:55:ff:
65:6b:9f:48:5c:ee:70:61:03:c1:02:02:dd:20:8f:92:36:01:
59:a0:7e:70:ee:d3:09:7e:1b:24:57:69:61:6c:93:b9:b2:a5:
b8:9f:57:71:0d:0f:71:58:c9:c1:cf:1c:51:de:4b:22:12:b2:
fa:e7:fa:dd:de:64:d2:6e:08:99:38:32:77:a5:31:9b:21:12:
23:c4:c8:4c:2e:7c:d2:97:be:a5:6b:dc:c8:40:9e:a6:28:38:
e9:4b:70:2f:1e:80:db:35:f0:50:04:ba:67:b3:15:14:61:51:
03:10:67:97:68:59:54:48:f0:84:4c:ca:2e:89:db:3d:46:bf:
3d:f7:0e:46:f6:ec:4f:57:c2:be:4e:13:95:57:a3:1b:0d:32:
7d:0e:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:26:48 2025 by rpki-client