Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/gzue7sY2tZrqD2-_KYgGY7MBAyY.roa
File: gzue7sY2tZrqD2-_KYgGY7MBAyY.roa (raw, json)
Hash identifier: qBY2ijl4Zx2wKZ0belztSqzlEqTSN+W3APLNK/DZjW4=
Subject key identifier: 83:3B:9E:EE:C6:36:B5:9A:EA:0F:6F:BF:29:88:06:63:B3:01:03:26
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521AF05ACB6A02371BA4DD43E0C0ACE
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/gzue7sY2tZrqD2-_KYgGY7MBAyY.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208435
IP address blocks: 31.133.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 14:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:af:05:ac:b6:a0:23:71:ba:4d:d4:3e:0c:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=833b9eeec636b59aea0f6fbf29880663b3010326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:b3:0b:f9:22:17:11:58:8b:e8:0e:e3:e9:
0d:89:53:01:28:0c:a9:c1:0d:e5:82:a8:32:b9:b1:
82:98:a3:44:b7:a1:f3:b9:20:4e:53:ac:d4:35:6c:
df:da:98:35:c7:cb:75:d5:9e:fc:64:a6:91:9a:4b:
77:15:2a:60:67:58:b9:ef:51:0f:32:db:b9:7f:9e:
28:e4:4a:ca:e0:11:0e:db:67:9a:ae:5c:9f:e1:8c:
95:5c:1b:22:93:b4:73:8b:e1:73:d7:57:3a:f1:c7:
c7:11:74:c5:4a:14:09:2d:8c:fc:b8:57:b8:85:5f:
e5:6b:62:f2:b8:17:39:c5:15:56:c6:f9:f3:a8:18:
4a:14:7a:68:bc:99:22:24:a0:09:06:32:0c:12:3b:
4a:3f:c2:0d:26:70:77:b0:8c:5a:75:61:d1:52:01:
65:e2:10:71:03:13:af:b2:4b:aa:a8:54:f7:a4:2e:
36:e0:ad:3f:3a:eb:33:73:1c:4f:0f:89:a1:b3:f9:
5d:47:38:87:f6:7f:5c:b5:aa:7c:70:b4:31:fb:05:
47:27:33:99:06:f2:8c:ad:86:ad:57:d4:9a:f7:9b:
bd:89:1c:eb:a5:aa:5e:e2:05:82:a3:3f:17:ed:fb:
87:1b:1e:c5:7c:cf:9c:a9:ad:49:c9:0c:05:4a:2e:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3B:9E:EE:C6:36:B5:9A:EA:0F:6F:BF:29:88:06:63:B3:01:03:26
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/gzue7sY2tZrqD2-_KYgGY7MBAyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f1:a7:47:09:f7:ec:00:f3:48:02:93:93:23:85:4a:25:eb:
1a:60:fc:9e:b3:7d:60:e5:8b:67:77:77:f5:e0:0c:86:73:a7:
78:31:a0:5a:db:36:26:63:96:9f:8f:82:99:82:42:a5:4d:e5:
4a:6e:fa:b0:f6:c5:2c:47:b6:16:d4:7d:dc:bc:ad:b3:96:b6:
92:85:54:e7:ea:a4:c1:cd:38:1d:6c:a5:38:3c:af:e5:81:56:
3e:11:87:9d:4d:98:aa:4f:f5:85:6c:6b:83:cc:17:b9:28:db:
27:f7:e5:dd:1e:f5:a7:1a:3e:07:be:13:95:9a:67:a8:0c:9f:
6d:aa:c8:a0:95:f7:3b:49:93:9f:00:42:b5:78:28:1e:ac:53:
ee:53:8f:5f:4d:3f:04:d1:be:7f:e2:85:30:e1:29:54:5c:cd:
ba:8a:2b:e7:68:48:58:25:8c:cf:e1:5e:02:7d:cb:02:69:25:
18:99:6e:2e:a9:63:e9:89:87:7a:e4:e4:8b:ea:34:9a:64:18:
36:ff:aa:99:61:06:67:03:bc:00:7c:76:d9:9b:bb:3e:41:cc:
80:cd:03:93:2d:07:b6:d7:27:96:39:5f:4d:f7:41:f7:78:c3:
f1:39:12:59:b4:78:a9:b8:bb:d7:97:c1:28:c4:df:6d:d9:e6:
6f:2e:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:11 2025 by rpki-client