Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Ftc2pHjkygStuTjowqR-tydPozM.roa
File: Ftc2pHjkygStuTjowqR-tydPozM.roa (raw, json)
Hash identifier: 5pYrQSDrUMGtJ3VWywAYeJyRAbTEZUKST19BuifzmqU=
Subject key identifier: 16:D7:36:A4:78:E4:CA:04:AD:B9:38:E8:C2:A4:7E:B7:27:4F:A3:33
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195CE0D8E311F7D3C2604131F3BB6A1B8BF
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Ftc2pHjkygStuTjowqR-tydPozM.roa
Signing time: Tue 25 Mar 2025 16:05:49 +0000
ROA not before: Tue 25 Mar 2025 16:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 31.42.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 09:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:0d:8e:31:1f:7d:3c:26:04:13:1f:3b:b6:a1:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 25 16:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16d736a478e4ca04adb938e8c2a47eb7274fa333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:25:00:44:ae:af:3f:83:b0:73:c2:3b:86:
23:76:c4:2c:93:9a:59:ee:d9:5b:d3:0e:d7:b4:9e:
4b:e7:14:2c:8d:83:a2:55:0d:c6:60:d8:cc:0a:12:
81:a9:00:d9:e4:fe:0d:4b:29:e3:56:4d:d2:d0:ad:
da:00:36:5d:c7:f1:34:7a:e8:0b:7d:3b:53:9d:2f:
52:d9:19:37:de:33:d7:9b:fe:fd:76:02:4c:9f:e9:
a7:50:bf:c3:29:0b:fd:e1:70:42:43:27:b9:41:27:
f6:69:d7:51:9e:86:71:19:67:fa:43:3c:2b:0c:cb:
e0:5c:1b:19:4e:19:6b:de:10:cf:56:ff:58:96:b9:
86:94:4c:41:a7:c1:f3:c9:37:95:9f:67:b7:5d:8a:
47:bf:66:d1:ba:88:80:9b:2e:bf:9e:6a:52:6e:c9:
08:3c:87:e4:ee:92:7f:6e:93:a4:db:6d:74:3f:d2:
4e:d7:18:e3:7c:9b:8f:62:75:b0:a2:9e:d9:85:be:
a5:81:db:90:eb:0a:76:2b:56:2a:f7:13:84:d9:f9:
32:6a:51:ba:ef:1a:00:bb:7d:bf:42:26:ff:c2:02:
c4:9d:0b:fa:83:d6:e3:32:c9:22:d9:93:4f:0e:18:
58:88:1a:1a:e7:23:81:2f:33:ed:2f:31:58:e5:91:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D7:36:A4:78:E4:CA:04:AD:B9:38:E8:C2:A4:7E:B7:27:4F:A3:33
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Ftc2pHjkygStuTjowqR-tydPozM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:57:aa:08:73:a9:f1:96:a1:9b:ab:a0:3b:bf:c5:c9:bd:b6:
cd:85:b3:22:79:08:ca:a2:b4:00:55:e9:2d:f9:35:ce:4a:6c:
1f:69:b2:42:9d:a1:2f:cf:a7:c6:b3:f3:4b:61:c0:5d:7a:bc:
10:c4:2d:6b:f7:20:32:04:32:6e:d6:b6:42:94:0d:d5:03:b1:
99:4f:a9:ed:76:0f:b9:14:5b:da:dd:0a:63:7c:62:a5:89:91:
e5:31:5a:9d:07:a0:99:9d:12:97:d9:a1:26:7e:40:ca:32:d8:
30:a4:d5:cf:aa:b1:f1:95:a7:b2:ca:9d:8d:7e:c5:ff:a8:6b:
24:8a:bf:95:a7:f1:e3:32:d0:b8:27:9d:0c:7c:a0:5a:ee:20:
cd:70:ee:23:82:13:37:86:f6:ed:6b:6e:63:6d:f4:b1:cb:a9:
67:ee:98:6d:00:fa:0a:2a:ed:c5:55:9d:38:a1:42:e8:62:51:
06:94:e0:2f:cc:db:e0:59:e6:29:98:77:8f:3b:40:5b:8d:1e:
1b:3e:31:cf:ab:66:e0:d9:73:78:1d:16:b2:41:1c:2e:c0:58:
63:8e:a6:b7:37:a3:2e:30:ab:a1:37:64:c3:e4:ce:f9:b7:3a:
0f:28:06:4b:cb:2d:7b:69:92:1d:85:75:ae:3c:e8:e3:10:97:
de:4f:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:14 2025 by rpki-client