Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/31TQ2teVfmK9qPxrjufR0cv17LU.roa
File: 31TQ2teVfmK9qPxrjufR0cv17LU.roa (raw, json)
Hash identifier: 9LQFSAbiWms9sHX1Su/m71UxwpDEI7QPi8+oFjh/U7c=
Subject key identifier: DF:54:D0:DA:D7:95:7E:62:BD:A8:FC:6B:8E:E7:D1:D1:CB:F5:EC:B5
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 01953DA781BCA34C81A6BC310DF3ED9FD9B1
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/31TQ2teVfmK9qPxrjufR0cv17LU.roa
Signing time: Tue 25 Feb 2025 15:09:02 +0000
ROA not before: Tue 25 Feb 2025 15:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212895
IP address blocks: 194.180.219.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Mar 2025 08:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:a7:81:bc:a3:4c:81:a6:bc:31:0d:f3:ed:9f:d9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Feb 25 15:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df54d0dad7957e62bda8fc6b8ee7d1d1cbf5ecb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:1d:88:d4:ae:fc:92:f1:d2:c2:26:c0:29:
81:58:28:39:ee:bb:c0:71:dd:aa:cf:8d:a7:29:d0:
bd:60:df:1c:35:04:d9:fc:b8:00:b1:e8:20:e9:2b:
e5:49:52:18:6c:a1:6b:42:45:13:6a:2e:6b:39:d6:
91:ec:65:aa:c4:fe:82:06:57:a3:85:66:41:bf:42:
d1:2c:76:9e:bf:18:e1:ba:98:09:39:07:86:8e:ed:
54:7b:95:83:c7:44:86:e3:72:27:a8:f2:fa:9e:b9:
53:9f:3a:13:b7:91:41:d0:f8:69:72:8a:e0:2d:16:
3f:e3:74:ab:5d:30:b3:4e:04:cc:c7:c2:24:0c:7f:
f4:09:30:78:40:fa:c6:10:2f:bb:cd:c1:f6:69:ac:
2e:2d:04:b8:7b:ae:30:b5:8a:db:28:e6:4e:06:93:
68:f8:5b:86:46:a7:0a:d8:64:05:61:2c:98:cb:93:
63:1a:67:6a:2a:b4:50:33:83:cc:14:c1:86:cf:29:
d4:8e:8c:fd:d4:60:6e:94:41:ad:01:53:cf:df:c5:
86:ef:5c:06:e7:ad:8e:58:b9:26:f4:80:76:e3:b7:
9b:89:47:28:06:d7:72:e6:82:21:a1:cb:21:d3:4e:
ef:bf:f6:95:a4:bb:d6:b7:06:1e:19:14:39:d9:20:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:D0:DA:D7:95:7E:62:BD:A8:FC:6B:8E:E7:D1:D1:CB:F5:EC:B5
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/31TQ2teVfmK9qPxrjufR0cv17LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d6:8b:71:24:40:c5:c9:1c:ba:55:fc:b7:7f:51:c1:e4:41:
16:fb:c1:8c:64:17:43:df:47:60:2e:5f:6b:d6:d2:0a:9c:9a:
c3:63:24:3d:1a:62:04:87:d2:91:15:b6:49:f3:50:53:76:3e:
31:04:03:28:2d:3a:0c:ef:3a:2b:f5:1c:1e:be:a2:2d:cc:5a:
17:a0:40:bb:41:a4:f6:2d:7e:d9:41:bb:49:2f:2c:7f:55:00:
25:54:f8:5c:f4:b3:b7:ff:83:29:fc:82:a0:76:6e:50:0f:b9:
29:3a:3e:23:15:c2:05:86:b8:84:47:de:27:49:ef:d0:90:3c:
7e:0e:5b:0a:d7:29:ce:f9:fd:19:83:1b:77:99:4b:2e:42:7f:
34:23:30:67:5b:63:db:e0:e1:ee:73:c6:5c:1f:96:be:c6:3a:
db:0a:5d:08:fc:e1:b3:b7:a2:d7:ab:2a:48:23:1e:77:9c:29:
da:c0:c5:4b:e9:d3:a8:46:ed:34:f8:8d:e9:0e:7d:e3:35:f8:
18:eb:af:3d:4f:c3:67:79:a7:2e:79:c8:b2:71:b0:02:b4:c6:
1d:fd:81:e3:05:70:8e:56:16:73:ba:04:54:d7:be:82:6e:02:
a3:57:b3:a8:c8:c1:81:56:06:c9:7f:33:c6:13:bb:54:8d:70:
b0:65:07:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU9p4G8o0yBprwxDfPtn9mxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTFmNDcxMzAyNDgwNGM0NDU0MDNhZjYzZmE2NDRiMmE5
MzVkMjQwHhcNMjUwMjI1MTUwOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjU0ZDBkYWQ3OTU3ZTYyYmRhOGZjNmI4ZWU3ZDFkMWNiZjVlY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uEdiNSu/JLx0sImwCmBWCg57rvA
cd2qz42nKdC9YN8cNQTZ/LgAsegg6SvlSVIYbKFrQkUTai5rOdaR7GWqxP6CBlej
hWZBv0LRLHaevxjhupgJOQeGju1Ue5WDx0SG43InqPL6nrlTnzoTt5FB0Phpcorg
LRY/43SrXTCzTgTMx8IkDH/0CTB4QPrGEC+7zcH2aawuLQS4e64wtYrbKOZOBpNo
+FuGRqcK2GQFYSyYy5NjGmdqKrRQM4PMFMGGzynUjoz91GBulEGtAVPP38WG71wG
562OWLkm9IB247ebiUcoBtdy5oIhocsh007vv/aVpLvWtwYeGRQ52SCgBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN9U0NrXlX5ivaj8a47n0dHL9ey1MB8GA1UdIwQY
MBaAFKyh9HEwJIBMRFQDr2P6ZEsqk10kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgt
NWNhMDE2YTEwMDU0LzEvMzFUUTJ0ZVZmbUs5cVB4cmp1ZlIwY3YxN0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgtNWNhMDE2YTEwMDU0
LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrTbMA0G
CSqGSIb3DQEBCwUAA4IBAQCM1otxJEDFyRy6Vfy3f1HB5EEW+8GMZBdD30dgLl9r
1tIKnJrDYyQ9GmIEh9KRFbZJ81BTdj4xBAMoLToM7zor9RwevqItzFoXoEC7QaT2
LX7ZQbtJLyx/VQAlVPhc9LO3/4Mp/IKgdm5QD7kpOj4jFcIFhriER94nSe/QkDx+
DlsK1ynO+f0Zgxt3mUsuQn80IzBnW2Pb4OHuc8ZcH5a+xjrbCl0I/OGzt6LXqypI
Ix53nCnawMVL6dOoRu00+I3pDn3jNfgY6689T8NneacueciycbACtMYd/YHjBXCO
VhZzugRU176CbgKjV7OoyMGBVgbJfzPGE7tUjXCwZQfW
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:21:31 2025 by rpki-client