Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/oC5WeiEdvCKQ-ZYv0tSdvg_FhRA.roa
File: oC5WeiEdvCKQ-ZYv0tSdvg_FhRA.roa (raw, json)
Hash identifier: jfeJzMk2M6HPQ4i03DZBErLOxIh01qxR/JzembbgNl8=
Subject key identifier: A0:2E:56:7A:21:1D:BC:22:90:F9:96:2F:D2:D4:9D:BE:0F:C5:85:10
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01940AD8AAFEF7C163A27DDFD9B186C50003
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/oC5WeiEdvCKQ-ZYv0tSdvg_FhRA.roa
Signing time: Sat 28 Dec 2024 01:19:19 +0000
ROA not before: Sat 28 Dec 2024 01:19:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.46.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
212.68.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0a:d8:aa:fe:f7:c1:63:a2:7d:df:d9:b1:86:c5:00:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 28 01:19:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a02e567a211dbc2290f9962fd2d49dbe0fc58510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:da:f5:29:02:9c:60:1a:d0:64:a5:f2:b1:
2b:0f:76:4e:7b:52:21:ec:12:d7:7c:a4:c9:f9:01:
95:a5:d4:c3:90:62:73:21:5a:e7:fa:8a:e8:ff:97:
2a:d8:a1:48:10:ef:75:b9:2a:66:c1:e9:16:bb:68:
bf:7a:11:dc:35:34:ed:42:74:39:8f:94:00:15:df:
e9:00:18:ce:d2:2a:69:ed:d0:b1:c7:e3:1d:2c:a0:
76:9e:4e:51:8d:cb:5e:a0:35:5a:ca:77:4f:74:c4:
94:df:88:6d:13:b5:51:5e:97:eb:90:6d:4e:24:26:
dc:5c:75:af:55:75:f2:df:63:06:cd:8d:27:d4:f9:
3e:e5:84:c5:11:36:0d:50:22:c7:35:7e:a4:1c:70:
8d:2d:d0:1e:13:f3:b1:dc:c0:b7:16:44:4b:f1:f5:
a2:d9:ee:d0:1c:92:b9:f5:8f:26:1b:74:95:8d:2c:
00:00:72:ea:db:1c:26:a5:25:d0:35:a4:7e:a7:ae:
18:e0:08:5e:07:37:9c:7c:64:97:c6:a9:b8:d7:73:
dd:5a:db:ce:02:83:46:58:50:0c:80:45:a3:a1:69:
d0:cb:eb:02:4e:eb:6f:66:a8:00:38:6f:70:0a:ba:
a2:f2:51:f9:ab:eb:d0:48:d1:c1:b8:7a:a1:6a:e9:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:56:7A:21:1D:BC:22:90:F9:96:2F:D2:D4:9D:BE:0F:C5:85:10
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/oC5WeiEdvCKQ-ZYv0tSdvg_FhRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.46.0/24
31.210.50.0/23
31.210.53.0-31.210.54.255
77.92.148.0/24
188.132.170.0/24
188.132.215.0/24
188.132.227.0-188.132.229.255
212.68.36.0/24
212.68.49.0/24
212.68.56.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4d:73:e8:05:39:fd:90:46:70:96:52:52:6b:40:fa:f5:6c:
08:98:65:92:4d:b1:f0:34:3f:61:56:43:e2:45:08:29:28:ac:
d3:6e:97:fa:34:0f:81:0d:78:aa:88:52:88:f5:44:f2:d2:e1:
ff:b9:f3:76:d4:63:eb:c9:9d:e8:96:d8:54:70:d6:6a:cd:ce:
fe:1b:9d:7d:44:de:d7:eb:95:ca:04:3a:14:41:40:54:bc:81:
4b:7f:84:43:d8:bb:f4:e4:38:3a:4e:f3:5e:10:eb:9e:c7:44:
8a:c8:9c:b0:fe:19:0b:7a:46:29:85:da:5f:6d:1a:8c:ec:ec:
c9:3c:bd:1c:ce:8f:80:0c:54:08:78:97:f5:16:13:2a:48:84:
0c:27:71:18:c1:14:fa:8d:ed:9f:40:0b:f0:99:59:10:b7:bb:
84:f1:01:e1:c2:96:68:2e:48:77:48:7f:fe:b8:5b:4d:34:10:
6a:40:ce:81:fc:eb:8f:04:fe:e7:fd:e1:28:a1:9b:d0:67:a4:
ee:ca:74:80:cc:b6:98:91:9f:a9:e7:89:6f:1c:73:c3:c4:b6:
82:7e:6c:5f:80:73:46:77:aa:35:f2:35:de:83:43:f7:dc:16:
ee:93:95:03:3d:97:59:22:a0:6a:f5:95:1b:1d:bf:b4:64:8a:
b5:af:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:09:23 2025 by rpki-client