Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/mlQ9G3O7Wtaj_2aZZ08tQnA6xPM.roa
File: mlQ9G3O7Wtaj_2aZZ08tQnA6xPM.roa (raw, json)
Hash identifier: ecq8lOG6Od0wcfRLeZapw7HEWUMcW2x9OrZnrHGyIEg=
Subject key identifier: 9A:54:3D:1B:73:BB:5A:D6:A3:FF:66:99:67:4F:2D:42:70:3A:C4:F3
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0192F0F59DF015D5CA5EC04B2C17472828AD
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/mlQ9G3O7Wtaj_2aZZ08tQnA6xPM.roa
Signing time: Sun 03 Nov 2024 07:38:01 +0000
ROA not before: Sun 03 Nov 2024 07:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57292
IP address blocks: 31.184.130.0/23 maxlen: 24
31.184.130.0/24 maxlen: 24
31.184.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f0:f5:9d:f0:15:d5:ca:5e:c0:4b:2c:17:47:28:28:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Nov 3 07:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a543d1b73bb5ad6a3ff6699674f2d42703ac4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:99:5b:1a:a1:e1:e7:6c:cf:b5:14:95:a0:0b:
bb:70:e1:80:e4:34:50:90:a7:cc:4f:13:e4:8a:2c:
27:27:8c:05:81:d9:f6:6c:0b:fd:93:84:05:c2:29:
12:25:fe:71:69:4e:e4:68:69:28:a6:a4:d8:12:47:
9a:80:16:eb:47:47:a3:9d:a2:69:41:4d:6f:33:f1:
02:dc:92:50:95:0c:d6:43:c5:46:9f:72:60:77:57:
55:82:4e:bf:a0:b1:4f:9e:21:3d:e6:70:d0:80:5a:
e1:ec:f8:d2:d8:d4:46:b3:fa:aa:bb:0b:0f:67:0b:
35:b0:92:15:30:0e:14:a4:15:da:91:b9:05:5d:50:
6c:18:e9:57:c6:2e:ef:c9:06:6d:6d:8d:2b:76:c9:
ce:94:da:3b:eb:d5:44:35:1c:a2:05:a5:cd:82:f0:
9e:5a:ed:c9:9d:43:fe:fc:6b:10:f8:34:5f:44:90:
80:39:a0:81:d8:27:88:f7:30:d0:d5:cc:1d:a8:6f:
06:3c:ab:07:99:61:b2:35:4b:4e:91:58:90:9e:c5:
cb:14:37:4b:f6:47:11:e2:e8:e6:9d:7f:49:58:8c:
84:07:96:9d:39:01:a9:99:62:3e:13:fb:d0:3e:3f:
c2:21:2d:82:f4:85:f1:57:ac:b1:78:ef:43:2e:ff:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:3D:1B:73:BB:5A:D6:A3:FF:66:99:67:4F:2D:42:70:3A:C4:F3
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/mlQ9G3O7Wtaj_2aZZ08tQnA6xPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.130.0/23
Signature Algorithm: sha256WithRSAEncryption
75:d3:4e:0e:a1:ae:7a:d7:b8:4d:98:26:68:61:79:11:38:12:
31:29:28:f4:50:fe:a8:65:6a:91:59:f4:74:54:a1:d7:66:7f:
e2:34:2a:ee:1b:8c:0a:8f:e8:f8:1e:19:6b:fd:b5:1f:98:85:
7d:5b:27:e0:1b:93:c9:81:b6:74:0d:38:79:e3:60:ef:b6:1f:
d4:1e:0b:bc:a2:d8:ab:d3:a8:9e:d5:43:b7:8e:6e:0d:32:ab:
0c:4f:74:07:29:f8:28:ea:ee:34:5a:8f:88:a0:ad:6e:f6:e1:
6c:02:a6:4e:2c:08:c2:62:5b:c1:9d:bc:7f:d5:26:bf:76:63:
44:48:c7:4d:fe:49:0a:17:8f:02:a5:dd:79:b8:07:4a:a3:f9:
39:6b:2e:ef:a8:0a:a7:7f:63:6e:8c:9b:b9:56:11:e9:58:c9:
e4:9a:ac:56:8e:a4:d9:ef:33:74:1c:42:ea:6d:8a:57:5e:cf:
d9:e3:d3:88:fe:df:3c:d3:a5:e4:e5:8d:7c:ee:28:4f:21:4c:
d2:6b:63:06:d9:5e:0b:b3:90:b5:16:c6:df:4b:30:ba:94:65:
43:8f:d2:02:62:c0:7a:28:e2:51:d1:73:58:5f:2e:03:95:8a:
8b:0f:6a:4e:9a:60:c2:c0:26:06:4d:12:66:41:fb:e9:d8:91:
50:6a:d8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:24 2025 by rpki-client