Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M4HNJccRKwWgAVTHX9daVLFkZvE.roa
File: M4HNJccRKwWgAVTHX9daVLFkZvE.roa (raw, json)
Hash identifier: WQNCaArLj0caFgJuSLvGb+6lwz4y2GxO4ODj9OHMevM=
Subject key identifier: 33:81:CD:25:C7:11:2B:05:A0:01:54:C7:5F:D7:5A:54:B1:64:66:F1
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE40DA2DDDAFAEB9ADE5707B8BA5F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M4HNJccRKwWgAVTHX9daVLFkZvE.roa
Signing time: Thu 02 Jan 2025 05:49:34 +0000
ROA not before: Thu 02 Jan 2025 05:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64490
IP address blocks: 31.148.50.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 16:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e4:0d:a2:dd:da:fa:eb:9a:de:57:07:b8:ba:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3381cd25c7112b05a00154c75fd75a54b16466f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:db:a5:9d:a1:ae:3d:13:f1:5d:a9:76:b1:
f2:ad:ee:71:03:d8:f6:e3:55:a6:ba:42:2d:8f:af:
4b:15:d6:ac:83:5d:a3:b6:d4:d6:df:76:a9:06:8a:
ab:4d:40:b0:6a:52:a4:54:88:e6:8e:a2:c1:32:3f:
c5:42:6d:3d:02:c3:63:07:18:7a:6a:7d:7a:d1:23:
fd:54:47:ac:d9:e1:b3:fb:a6:20:22:0b:7e:28:4a:
52:d4:a1:56:ee:4d:ca:d8:80:98:79:b8:d4:81:01:
f7:64:b8:e3:17:f8:00:0d:2c:37:2e:2b:4d:e5:52:
c2:30:f1:45:fb:e6:32:83:3b:de:42:22:52:72:e6:
45:ef:71:7b:72:4a:e3:70:b1:ad:68:51:f7:7c:0b:
7f:c6:b4:4e:f7:8c:2f:81:e6:80:66:87:40:f4:52:
8f:bf:ae:f0:42:5b:3d:0c:ba:cf:7a:35:d2:5f:07:
c8:c8:ca:3b:df:02:b8:35:f0:c8:62:2b:e3:fc:35:
5c:13:8c:69:ee:dc:49:fd:aa:9c:86:19:08:fa:aa:
e6:ab:ad:81:a5:7d:50:3f:a1:95:1f:22:a9:0c:40:
76:ea:bd:c1:8a:0d:87:c8:0a:d9:33:b6:8d:85:54:
8c:69:98:5a:44:fc:d9:a8:d6:2d:50:d2:b8:f9:ee:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:CD:25:C7:11:2B:05:A0:01:54:C7:5F:D7:5A:54:B1:64:66:F1
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M4HNJccRKwWgAVTHX9daVLFkZvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.50.0/23
Signature Algorithm: sha256WithRSAEncryption
23:58:d3:42:a5:c7:aa:3d:63:14:ab:c6:e3:40:a6:24:2d:96:
59:e8:24:db:8f:8f:9b:09:b8:a9:36:b0:d7:d1:58:f0:07:0a:
45:93:c9:7c:ac:9f:2a:60:3e:a8:4f:44:ff:e2:eb:28:38:3c:
cc:93:f1:ea:72:af:55:74:95:6c:b3:de:c0:ac:5f:9a:67:0c:
9b:28:37:0a:b1:7b:78:bc:01:98:41:8c:d8:c8:7c:d2:30:ca:
fb:86:c1:d8:a7:01:f7:58:47:d2:c5:fd:ab:3a:d4:43:d1:0e:
28:8c:c9:a3:d3:b6:df:12:cc:42:3a:d5:82:a9:88:93:30:65:
6d:90:a5:37:5a:51:a0:79:23:44:77:f8:a2:2b:db:d4:d4:ea:
8e:f4:35:9b:60:87:ec:37:86:6e:2b:1a:2b:70:ff:7f:4b:aa:
08:c2:8b:21:11:60:1c:82:ad:15:2c:78:7b:01:7e:d7:c2:21:
4e:49:2e:52:20:f2:ff:26:98:01:e3:3f:9c:3e:60:00:9b:69:
b5:0f:be:6f:ea:e0:c9:85:8f:96:df:a9:94:6a:c2:be:60:31:
1c:1f:b4:c7:30:52:1f:ca:78:8f:fe:73:c8:d7:4b:67:86:94:
22:4e:1d:3a:b8:8d:91:6a:e7:4d:fb:c9:5d:9c:17:3c:04:57:
7d:08:05:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj+QNot3a+uua3lcHuLpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzgxY2QyNWM3MTEyYjA1YTAwMTU0Yzc1ZmQ3NWE1NGIxNjQ2NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrzbpZ2hrj0T8V2pdrHyre5xA9j2
41WmukItj69LFdasg12jttTW33apBoqrTUCwalKkVIjmjqLBMj/FQm09AsNjBxh6
an160SP9VEes2eGz+6YgIgt+KEpS1KFW7k3K2ICYebjUgQH3ZLjjF/gADSw3LitN
5VLCMPFF++YygzveQiJScuZF73F7ckrjcLGtaFH3fAt/xrRO94wvgeaAZodA9FKP
v67wQls9DLrPejXSXwfIyMo73wK4NfDIYivj/DVcE4xp7txJ/aqchhkI+qrmq62B
pX1QP6GVHyKpDEB26r3Big2HyArZM7aNhVSMaZhaRPzZqNYtUNK4+e47KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOBzSXHESsFoAFUx1/XWlSxZGbxMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvTTRITkpjY1JLd1dnQVZUSFg5ZGFWTEZrWnZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH5QyMA0G
CSqGSIb3DQEBCwUAA4IBAQAjWNNCpceqPWMUq8bjQKYkLZZZ6CTbj4+bCbipNrDX
0VjwBwpFk8l8rJ8qYD6oT0T/4usoODzMk/Hqcq9VdJVss97ArF+aZwybKDcKsXt4
vAGYQYzYyHzSMMr7hsHYpwH3WEfSxf2rOtRD0Q4ojMmj07bfEsxCOtWCqYiTMGVt
kKU3WlGgeSNEd/iiK9vU1OqO9DWbYIfsN4ZuKxorcP9/S6oIwoshEWAcgq0VLHh7
AX7XwiFOSS5SIPL/JpgB4z+cPmAAm2m1D75v6uDJhY+W36mUasK+YDEcH7THMFIf
yniP/nPI10tnhpQiTh06uI2RaudN+8ldnBc8BFd9CAU8
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:49 2025 by rpki-client