Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/p2c7LtyucysNP57QYLSjolmoCNY.roa
File: p2c7LtyucysNP57QYLSjolmoCNY.roa (raw, json)
Hash identifier: Q7FG6LUFMeVpGZuYs39affZXxS4eCOUrWZ+1qRFvxHs=
Subject key identifier: A7:67:3B:2E:DC:AE:73:2B:0D:3F:9E:D0:60:B4:A3:A2:59:A8:08:D6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A0D66FAAD4BCF52CDC2235EAB20F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/p2c7LtyucysNP57QYLSjolmoCNY.roa
Signing time: Thu 02 Jan 2025 13:48:47 +0000
ROA not before: Thu 02 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 31.210.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 15:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a0:d6:6f:aa:d4:bc:f5:2c:dc:22:35:ea:b2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7673b2edcae732b0d3f9ed060b4a3a259a808d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:88:4d:94:77:02:f8:5a:2b:96:da:8c:14:
f5:e2:4b:93:0d:1f:c4:11:fd:ca:fa:cb:dd:8e:da:
5c:97:1f:b2:a3:5f:d7:cd:05:d1:c6:55:31:ec:c8:
dd:d4:62:46:4b:85:78:16:fb:13:92:c0:a5:c6:a7:
18:41:ad:37:5f:fb:bb:d6:04:23:26:0d:79:f1:b4:
6f:0e:84:a1:07:e9:a3:a7:b9:2e:05:f9:40:22:e0:
33:6e:48:d7:bd:f3:43:cc:be:33:dd:f2:2c:a8:83:
5d:10:47:df:3f:c7:92:90:f2:cd:7f:38:78:85:28:
52:6f:2d:e3:8e:24:bc:2e:08:45:6a:c9:8d:cc:b6:
cf:12:94:11:c9:f8:80:f8:e8:45:17:77:2b:0b:60:
32:d2:11:b0:fb:a5:36:8f:b3:21:aa:2f:d7:fc:3e:
e8:5e:bf:05:cb:cb:6a:0a:a6:c3:ee:c2:40:70:17:
22:63:08:23:0c:bd:e1:cc:19:cc:50:bf:ca:22:d7:
25:4a:41:17:bf:7d:59:4b:4e:fe:9a:e0:81:02:6d:
69:f8:a2:bb:29:4e:15:f4:a8:7d:f7:8a:74:71:f5:
0c:2b:35:eb:cd:c2:ae:d6:33:6c:d3:11:b2:08:00:
5c:e7:94:12:99:7f:92:8f:49:81:90:ae:89:24:53:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:3B:2E:DC:AE:73:2B:0D:3F:9E:D0:60:B4:A3:A2:59:A8:08:D6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/p2c7LtyucysNP57QYLSjolmoCNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.43.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6f:8b:44:24:90:0d:99:5a:b4:50:93:ec:0e:ba:89:e8:8c:
0e:72:33:20:4a:25:08:b7:8e:cb:b8:f8:c6:8e:7c:f1:0e:e1:
bf:93:4b:ae:f6:5d:4d:1e:4a:be:d4:b2:30:89:f5:cb:33:5c:
09:16:c5:29:aa:29:f6:67:0e:09:02:fa:12:2e:30:cc:44:c0:
60:e1:bb:be:80:28:ce:58:ab:5b:81:ff:75:7d:80:78:32:4b:
09:21:29:a8:8d:dc:1d:9d:a8:59:fb:db:64:45:7b:d4:62:a9:
92:a7:d0:95:8e:b1:ea:86:f8:1c:ea:f4:c9:7f:66:26:d8:d2:
aa:6e:8d:bd:29:7d:12:6d:36:59:97:a5:ad:aa:f9:28:72:38:
00:3c:21:b6:c7:b2:f1:be:55:b4:45:8f:39:f8:a9:78:1a:65:
85:35:54:46:93:79:dc:b4:84:79:f7:df:d9:2a:2f:3f:30:2b:
0f:cb:a4:39:f2:da:41:e8:95:8c:4e:71:47:69:fa:7e:e2:f0:
e9:bd:e0:00:e8:f7:62:c2:7f:a7:6a:c8:71:88:5d:cc:1d:0a:
63:4d:d2:a2:9d:f1:5b:e8:6a:26:17:6e:4f:d5:bc:95:1e:28:
bc:12:c8:f7:4e:15:49:df:f8:62:0e:7e:7e:34:f0:8f:03:84:
27:6b:e6:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRqDWb6rUvPUs3CI16rIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMTAyMTM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzY3M2IyZWRjYWU3MzJiMGQzZjllZDA2MGI0YTNhMjU5YTgwOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr62ITZR3AvhaK5bajBT14kuTDR/E
Ef3K+svdjtpclx+yo1/XzQXRxlUx7Mjd1GJGS4V4FvsTksClxqcYQa03X/u71gQj
Jg158bRvDoShB+mjp7kuBflAIuAzbkjXvfNDzL4z3fIsqINdEEffP8eSkPLNfzh4
hShSby3jjiS8LghFasmNzLbPEpQRyfiA+OhFF3crC2Ay0hGw+6U2j7Mhqi/X/D7o
Xr8Fy8tqCqbD7sJAcBciYwgjDL3hzBnMUL/KItclSkEXv31ZS07+muCBAm1p+KK7
KU4V9Kh994p0cfUMKzXrzcKu1jNs0xGyCABc55QSmX+Sj0mBkK6JJFNL+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKdnOy7crnMrDT+e0GC0o6JZqAjWMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvcDJjN0x0eXVjeXNOUDU3UVlMU2pvbG1vQ05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9IrMA0G
CSqGSIb3DQEBCwUAA4IBAQA1b4tEJJANmVq0UJPsDrqJ6IwOcjMgSiUIt47LuPjG
jnzxDuG/k0uu9l1NHkq+1LIwifXLM1wJFsUpqin2Zw4JAvoSLjDMRMBg4bu+gCjO
WKtbgf91fYB4MksJISmojdwdnahZ+9tkRXvUYqmSp9CVjrHqhvgc6vTJf2Ym2NKq
bo29KX0SbTZZl6WtqvkocjgAPCG2x7LxvlW0RY85+Kl4GmWFNVRGk3nctIR599/Z
Ki8/MCsPy6Q58tpB6JWMTnFHafp+4vDpveAA6Pdiwn+nashxiF3MHQpjTdKinfFb
6GomF25P1byVHii8Esj3ThVJ3/hiDn5+NPCPA4Qna+YZ
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:00:10 2025 by rpki-client