Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1XKx_MaX4fMbHAGOAd8Ob2dC7ww.roa
File: 1XKx_MaX4fMbHAGOAd8Ob2dC7ww.roa (raw, json)
Hash identifier: tTYJKUrVDmyKHCV7KF80kvBUSxuPHehvXTIYrxULM8A=
Subject key identifier: D5:72:B1:FC:C6:97:E1:F3:1B:1C:01:8E:01:DF:0E:6F:67:42:EF:0C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194E096B55599F29EAF4DD5408C8EA9B137
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1XKx_MaX4fMbHAGOAd8Ob2dC7ww.roa
Signing time: Fri 07 Feb 2025 13:26:00 +0000
ROA not before: Fri 07 Feb 2025 13:26:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213499
IP address blocks: 31.148.202.0/23 maxlen: 24
146.158.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 11:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:96:b5:55:99:f2:9e:af:4d:d5:40:8c:8e:a9:b1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 7 13:26:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d572b1fcc697e1f31b1c018e01df0e6f6742ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:4b:26:57:71:75:e3:ec:e3:11:1a:c1:4d:
41:a9:b7:e8:3b:6b:90:3c:f0:ba:04:e4:e0:1d:00:
a1:de:73:5b:7c:3e:60:53:f1:8e:54:4e:e7:8f:38:
5b:c5:d3:a7:74:7a:b1:19:ab:20:71:2a:95:7d:c8:
ea:9b:ff:25:52:1d:da:80:37:29:25:22:b1:e6:01:
9a:06:a5:cc:e9:b4:71:d8:ae:21:a8:be:a9:b0:46:
f4:2b:10:1c:d6:9a:26:8b:11:17:c3:bb:71:3d:a7:
37:ab:bf:f6:09:02:02:a9:50:c1:73:b3:76:4d:97:
7d:15:4c:d6:20:3c:37:95:b8:33:88:0e:a1:d1:cb:
bf:37:5b:85:8b:e3:07:44:d1:7f:f6:be:d0:c3:03:
fd:00:a9:ae:c6:50:71:c8:cd:26:5a:dd:83:0e:03:
84:0e:01:d4:4f:d3:18:9a:71:a3:93:cc:37:51:40:
c9:eb:68:2a:e4:1e:c6:60:f4:ba:3b:51:d1:f0:15:
24:cc:82:8c:0e:ad:6d:65:54:d3:00:a5:fe:b9:1a:
d1:25:fe:e5:91:a5:a3:87:38:e4:5d:81:5a:c3:5b:
b9:6b:9f:e5:46:39:bd:ba:8f:06:cc:5e:8f:72:db:
8b:68:59:6f:79:c5:50:20:b7:2c:4a:74:00:03:a2:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:B1:FC:C6:97:E1:F3:1B:1C:01:8E:01:DF:0E:6F:67:42:EF:0C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1XKx_MaX4fMbHAGOAd8Ob2dC7ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.202.0/23
146.158.92.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:0b:45:ea:6d:f5:71:1e:31:b8:4a:e6:c5:f4:ed:d3:58:d4:
40:a3:1d:c7:8f:a1:e7:48:38:68:6d:f4:f2:2a:86:ce:cc:24:
0c:54:a1:de:9f:a0:68:9d:d1:4d:61:cb:34:cb:67:8e:00:df:
bf:83:bd:bf:9f:20:62:20:31:8a:97:b3:66:75:ee:9e:59:90:
8b:a2:af:94:56:68:e2:d7:03:62:9d:47:ac:6b:b3:3c:1e:ed:
ab:5a:7b:b7:bd:b2:77:0a:84:f8:93:7a:be:ed:9a:f1:bd:6f:
a9:c2:97:9d:f3:eb:d9:fd:7a:11:70:31:65:8e:a6:71:21:69:
b2:cf:94:4e:3b:74:58:c1:cc:76:21:62:a6:e1:a7:06:11:b4:
71:ff:53:10:0f:bc:32:67:63:c9:b4:40:d6:f8:ae:9e:e3:38:
59:b7:ec:be:43:5b:11:42:68:97:89:55:eb:4d:5e:c9:a1:44:
ad:c1:4e:47:9f:92:e5:4c:ab:ad:15:5a:1a:62:2e:3b:52:37:
c1:9f:46:e4:96:17:7e:52:10:2e:ea:f1:1f:83:73:8b:45:68:
c6:7d:0e:0a:90:aa:62:8e:7a:85:0b:61:15:aa:5d:24:43:c0:
10:56:8e:3f:9b:2a:8a:c7:54:3c:c8:bc:50:d6:7c:e5:4a:c2:
a4:78:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:07 2025 by rpki-client