Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/eNipXbh4pz0-tvMfHtEtn9Gl6UI.roa
File: eNipXbh4pz0-tvMfHtEtn9Gl6UI.roa (raw, json)
Hash identifier: Ml98JVGRIe1h27k4X5Li8f6xOd7hvXWwBtPae9tmOLI=
Subject key identifier: 78:D8:A9:5D:B8:78:A7:3D:3E:B6:F3:1F:1E:D1:2D:9F:D1:A5:E9:42
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0191E5D7C5DC38A34707E5D7F359B770BC9D
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/eNipXbh4pz0-tvMfHtEtn9Gl6UI.roa
Signing time: Thu 12 Sep 2024 10:46:48 +0000
ROA not before: Thu 12 Sep 2024 10:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214218
IP address blocks: 31.41.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:d7:c5:dc:38:a3:47:07:e5:d7:f3:59:b7:70:bc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Sep 12 10:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78d8a95db878a73d3eb6f31f1ed12d9fd1a5e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:2d:db:ee:e8:f0:7b:14:d2:68:65:5a:bb:
54:4c:62:01:ec:aa:21:bd:2a:ab:cb:2a:8b:99:47:
8e:ae:e2:5a:4c:9a:8a:51:12:4a:7c:18:28:2f:68:
c0:3c:d6:db:39:bb:36:b7:9f:a1:10:c1:7a:28:c4:
23:0f:e9:33:32:b2:b2:cd:be:95:d6:fa:7e:bf:ea:
5a:2d:75:e8:d8:c6:e7:d8:51:a4:1d:c0:02:97:7b:
41:51:1b:cc:0c:eb:65:41:2d:15:2f:6a:eb:b7:c7:
f0:02:ba:a7:37:5d:a2:92:b4:a7:77:98:96:f1:ef:
b2:8a:e9:1e:7e:90:a5:1b:01:70:4a:8c:4b:75:74:
23:2b:31:27:0b:d9:b2:4c:27:17:29:a8:65:26:e1:
7b:92:27:2f:73:55:b9:be:aa:0f:dc:74:af:4f:1c:
db:45:c0:a6:2e:71:01:f7:cf:3c:1d:9b:1e:bb:39:
d5:d8:7e:db:df:e8:a6:27:91:2e:cf:60:69:89:97:
44:7e:90:b3:9c:60:d3:fc:ac:92:a8:e0:e4:47:06:
2e:7f:62:a1:00:6c:ef:db:4c:84:85:8d:bc:13:f6:
3d:78:96:56:ee:4f:fd:61:6f:0c:67:ff:c9:71:2d:
7b:a9:82:14:40:46:de:0c:5e:8f:e9:d3:7b:b8:8e:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:A9:5D:B8:78:A7:3D:3E:B6:F3:1F:1E:D1:2D:9F:D1:A5:E9:42
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/eNipXbh4pz0-tvMfHtEtn9Gl6UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.14.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6b:2f:e9:40:b8:f6:14:3f:cb:66:55:5b:24:89:fc:12:c6:
e2:da:c8:d7:dd:df:9f:69:7e:4b:96:e0:d1:69:0a:9d:9e:2d:
d9:9a:44:f3:a6:76:fb:71:3a:7d:75:c8:0b:46:0d:d5:12:ef:
fc:22:ca:4f:85:f5:04:94:a7:b1:26:b4:88:5c:a3:53:08:bf:
69:06:53:35:c8:d3:31:0f:cc:52:19:61:b7:eb:30:ad:5f:a4:
55:85:d6:34:96:99:40:3b:70:17:ed:c0:1d:6a:15:a0:43:bb:
b5:ec:a0:21:86:2d:36:1e:af:5a:8b:b0:22:24:10:6c:9b:08:
3b:17:3b:6e:c6:fd:b0:1b:66:ec:49:d3:32:4d:9d:8d:8a:ef:
fa:83:62:55:6b:55:06:cc:24:7f:45:47:0a:e5:fe:fa:1e:37:
d7:81:db:38:0d:6e:8d:2d:50:21:45:04:0e:4c:f2:6f:ec:42:
f1:b7:0e:2f:8c:e8:a7:44:bf:56:11:b1:38:21:06:26:66:ad:
d8:b6:34:92:71:53:36:37:10:2d:aa:5d:b3:da:e6:7d:dd:27:
7a:5a:8c:97:00:9c:e0:cd:d7:75:1c:aa:f6:ce:14:67:0b:66:
25:fd:81:6f:52:0e:28:80:6d:e1:46:74:a2:3a:95:90:3a:bb:
fb:f5:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:01:28 2025 by rpki-client