Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/oxJmNDqs8dR9WulgdU7ozoPXK8c.roa
File: oxJmNDqs8dR9WulgdU7ozoPXK8c.roa (raw, json)
Hash identifier: yac3e2N4SkhKqLffjE/7+N6K2drXFCqiM4Gdi3/jwss=
Subject key identifier: A3:12:66:34:3A:AC:F1:D4:7D:5A:E9:60:75:4E:E8:CE:83:D7:2B:C7
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 018CC3B6DBE55970872823190D5683DD9AC9
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/oxJmNDqs8dR9WulgdU7ozoPXK8c.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199095
IP address blocks: 31.31.128.0/19 maxlen: 24
2a11:bfc0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Apr 2024 11:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:db:e5:59:70:87:28:23:19:0d:56:83:dd:9a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a31266343aacf1d47d5ae960754ee8ce83d72bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:62:08:c2:62:2c:f7:de:4d:2c:57:09:68:
d2:dc:02:16:87:d4:f3:11:30:33:4d:b4:b3:45:c8:
02:c6:b2:8d:71:c1:33:15:dd:f6:55:72:9f:d9:c2:
fd:e0:de:09:31:1b:3a:5b:18:63:26:de:17:84:a4:
0d:b5:bd:36:2a:fe:86:c9:6f:65:b3:e4:96:5d:e3:
e2:e5:a9:f4:c0:05:fe:bf:55:5f:50:5b:81:c3:d4:
16:43:6b:1e:bf:05:87:73:d4:ec:e5:f1:26:fe:a1:
bf:7e:c2:ba:f9:ca:5e:fd:23:7c:19:e8:22:49:1d:
3c:2d:55:87:28:c6:74:64:44:72:d2:bb:a1:6d:3c:
de:2c:2c:cb:67:3d:af:f1:9a:ef:6b:56:17:2e:4a:
b8:fb:8d:d9:93:1d:25:26:0b:bc:88:63:09:d2:e1:
f1:d1:ad:db:3a:10:eb:b7:e1:0c:d8:e3:03:62:7b:
1d:70:20:c4:86:ba:32:f8:b5:17:51:09:3c:ce:4a:
22:d5:2a:e0:10:96:0e:fd:8f:be:47:4c:c6:6e:a6:
a4:3d:27:2d:d1:f0:7f:bc:d9:6a:cc:47:ff:37:72:
c1:3a:43:3f:f1:4e:a9:24:66:e1:01:00:96:a7:02:
ea:86:62:42:dc:76:91:fd:3c:95:4a:af:56:9e:c9:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:66:34:3A:AC:F1:D4:7D:5A:E9:60:75:4E:E8:CE:83:D7:2B:C7
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/oxJmNDqs8dR9WulgdU7ozoPXK8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.128.0/19
IPv6:
2a11:bfc0::/32
Signature Algorithm: sha256WithRSAEncryption
61:3b:07:27:5e:ae:bc:a7:02:ae:6f:46:d3:4d:8f:be:79:82:
db:9d:8d:a3:c1:e6:c8:69:9a:0b:7b:78:82:47:90:0c:88:a3:
bc:1a:04:e6:c1:f5:b3:a5:8e:0d:be:e8:1b:ea:39:4a:dc:e4:
17:5f:5e:c2:0c:62:83:bb:ba:81:75:03:49:44:be:17:54:e6:
1c:20:8d:20:92:33:ef:9d:1f:72:39:f6:fb:30:7a:0e:76:76:
92:ec:9d:a1:79:89:40:ca:96:a3:9c:d0:62:c1:74:5d:e0:e3:
d6:96:1b:7d:94:eb:82:3e:f7:21:3a:f8:25:f6:40:f6:e6:2d:
04:a7:3d:00:8c:53:f1:0b:01:86:78:77:96:22:1b:bf:f1:a0:
b3:e6:d3:1c:11:b9:05:e2:ae:a3:50:1b:a2:52:2f:f8:2b:55:
c6:35:a2:6e:80:ab:62:a8:68:8a:b9:1a:27:44:ff:3a:18:e0:
dc:c2:6a:df:55:34:52:35:67:f0:85:58:e2:2f:3e:d9:ec:b9:
bc:c3:f5:0a:e1:0e:7e:c4:0c:fe:3c:31:58:92:cc:bc:da:08:
cc:76:17:e1:5b:8c:6f:6c:36:c1:44:ce:2f:7b:4f:4f:8d:95:
11:cc:90:b2:cb:46:79:45:0e:8c:a1:b5:67:31:06:e1:a9:3d:
cb:ab:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:09 2025 by rpki-client