Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kzCmQZAVJXgLKU203v6-ZeBUreg.roa
File: kzCmQZAVJXgLKU203v6-ZeBUreg.roa (raw, json)
Hash identifier: J9rEJvHhKSwN4zPsf6XJBbf86lkGxcuzfQ7kfi4lrbA=
Subject key identifier: 93:30:A6:41:90:15:25:78:0B:29:4D:B4:DE:FE:BE:65:E0:54:AD:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01937802CF4C8CB282E583299C5401470FF5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kzCmQZAVJXgLKU203v6-ZeBUreg.roa
Signing time: Fri 29 Nov 2024 13:01:10 +0000
ROA not before: Fri 29 Nov 2024 13:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64490
IP address blocks: 31.148.50.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:78:02:cf:4c:8c:b2:82:e5:83:29:9c:54:01:47:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 29 13:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9330a641901525780b294db4defebe65e054ade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:07:7e:20:37:95:4e:b2:1c:9a:e2:48:c2:
7e:13:46:00:ed:ca:dd:ea:f4:ca:92:cf:f5:2f:a7:
5c:fd:59:04:50:fc:d8:e9:d2:70:f0:23:54:74:4a:
b5:2a:46:cb:46:2e:0d:69:6e:a8:40:34:f9:b6:69:
8f:0c:7f:47:59:90:89:65:a8:62:4e:98:aa:94:43:
98:ee:3e:bb:c9:eb:e0:5c:8a:1f:33:31:5c:94:50:
df:ad:07:7d:a3:fd:af:d6:e7:a8:12:b1:15:bf:ec:
de:06:7b:1d:a3:59:4b:78:02:2b:fb:bd:83:7e:61:
b5:15:6b:93:89:ef:27:2a:c3:b5:d1:c3:bb:fd:68:
9e:ea:c8:a2:6e:c8:ca:7c:3e:1a:68:ca:0e:40:cb:
45:7b:84:27:78:69:d4:ff:15:d3:29:b6:d5:65:3d:
8f:b8:91:c2:97:3f:68:54:b8:57:d9:7a:11:b5:33:
a2:40:22:9b:10:f8:c1:53:60:6d:4e:d2:fa:26:43:
9d:d2:3e:a2:eb:27:97:87:cd:ab:a0:ea:71:77:81:
8d:17:d4:36:83:6c:df:17:91:76:1b:87:66:d1:1f:
21:30:5e:bd:5d:e1:75:46:e9:ee:9d:28:3a:34:90:
98:7b:53:0b:a1:e9:d9:6e:e0:d2:a7:dd:d9:bc:09:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:A6:41:90:15:25:78:0B:29:4D:B4:DE:FE:BE:65:E0:54:AD:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kzCmQZAVJXgLKU203v6-ZeBUreg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.50.0/23
Signature Algorithm: sha256WithRSAEncryption
49:36:87:1b:17:b7:4a:70:50:0a:f3:a9:a1:32:76:0b:88:6a:
ae:11:df:f9:3e:49:af:4f:22:60:a4:64:62:1a:ca:50:32:a7:
4c:6e:c7:84:59:14:ff:49:fc:5a:5d:86:3b:e7:50:9d:6c:30:
c2:da:7e:d5:8e:2a:7a:7d:3e:a3:70:c2:62:dc:cd:30:96:93:
2b:ff:3e:43:5b:09:14:c6:72:ac:2c:b6:a5:b2:1e:d8:67:7d:
46:69:ce:62:a3:81:88:2d:4b:c0:95:23:cf:0b:6f:bd:80:2a:
16:0b:8a:d4:b4:93:46:ba:60:b3:78:ec:96:88:a3:e3:60:fd:
03:f5:b0:62:cd:65:62:5e:6e:24:1f:f5:5c:9e:7b:4e:f5:90:
2c:1c:59:24:ed:40:b9:6c:f1:f3:a7:ca:0d:58:52:2c:6e:38:
d9:d0:63:60:ce:1e:18:18:d6:90:f7:61:e2:b4:46:e3:84:ae:
ac:41:5b:9b:01:8b:13:53:c5:6a:af:00:22:0d:e0:f1:a7:26:
22:5d:eb:00:3d:74:95:26:ed:43:9d:6c:45:80:d0:5b:16:83:
32:7e:f2:13:8a:46:04:b4:13:00:55:c4:44:70:c4:40:9e:78:
f6:01:98:45:70:fe:99:b3:b0:79:4a:3b:2b:04:45:c5:4d:d7:
9a:82:dd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:12:32 2025 by rpki-client