Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Mf6Z9nDP_U-Ie8PxJFO5RBlck1w.roa
File: Mf6Z9nDP_U-Ie8PxJFO5RBlck1w.roa (raw, json)
Hash identifier: +3KnQv88qKmUsEeuwq9NLGklwJyNMeEvIDz9LKOBzeg=
Subject key identifier: 31:FE:99:F6:70:CF:FD:4F:88:7B:C3:F1:24:53:B9:44:19:5C:93:5C
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 018CC424825DEFC61D898956CF82F4917E4D
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Mf6Z9nDP_U-Ie8PxJFO5RBlck1w.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35057
IP address blocks: 185.175.92.0/24 maxlen: 24
194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 22 May 2024 14:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:82:5d:ef:c6:1d:89:89:56:cf:82:f4:91:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31fe99f670cffd4f887bc3f12453b944195c935c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a8:94:6a:e0:f4:27:d4:e3:c7:e6:2f:a6:d3:
38:de:24:6c:f8:14:d0:81:17:8f:9e:28:07:a3:e4:
02:12:9c:48:ca:5a:27:4e:29:52:62:52:9f:ad:f8:
c3:a1:99:d7:b9:e0:c7:cf:48:54:7a:ab:77:ea:13:
a6:cd:af:16:06:56:d0:98:5c:63:d1:e5:49:9c:04:
0d:08:6c:f5:46:26:3d:a0:f9:67:07:25:cc:aa:4c:
ff:88:ef:78:c1:5c:a9:bb:02:3c:9c:bb:19:3e:40:
fa:77:9e:dd:ad:2f:51:97:54:50:9e:bb:3b:98:f8:
e3:95:76:08:c8:7c:6c:7b:71:af:72:7b:5b:79:fb:
0d:ab:5c:00:b8:07:d2:08:31:72:51:41:8b:c4:1c:
d4:22:16:e9:4e:7e:c4:1d:d0:f2:00:9a:c7:19:25:
bb:6d:b1:b9:08:b3:95:03:f6:da:6a:ae:bb:ee:24:
43:3a:ef:ce:62:9e:34:97:16:1e:dd:87:9e:2a:c8:
6d:66:99:5f:f7:aa:8c:02:fa:66:68:59:8d:8b:79:
3b:c8:5c:b2:7d:4e:1f:d9:6a:c8:6c:b3:fb:29:5c:
a3:01:0e:d5:15:2e:ad:5b:e3:3c:90:cb:2d:39:9a:
86:ed:ab:b8:68:0e:ed:8b:b3:34:b4:98:8b:0e:0b:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:99:F6:70:CF:FD:4F:88:7B:C3:F1:24:53:B9:44:19:5C:93:5C
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Mf6Z9nDP_U-Ie8PxJFO5RBlck1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.92.0/24
194.31.236.0/23
194.31.245.0/24
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
7e:03:c4:b2:7b:02:22:2d:60:c5:70:f0:af:9d:36:ac:71:18:
a4:52:d5:97:5f:63:96:af:39:c0:8c:1e:41:37:74:8c:fd:06:
00:8f:28:28:d4:74:bf:a5:c3:bb:2e:2f:3d:e7:1a:cd:1f:81:
cd:d1:88:e1:f5:66:62:20:d0:06:79:bc:46:24:33:27:76:46:
c4:b6:44:12:c1:d7:d5:d6:62:f4:c0:50:1e:6b:63:95:ea:ea:
ac:ec:20:67:7a:98:7d:b3:cc:ff:39:cb:1b:ac:94:29:9d:78:
67:71:d4:14:d1:64:7b:fe:2a:08:52:25:6a:aa:0f:45:71:93:
38:96:96:1f:10:1d:cb:26:c4:31:15:66:0a:f0:11:d9:44:fb:
a8:49:45:37:76:6d:42:c4:91:5f:32:f4:00:96:58:0e:31:fa:
e2:cf:88:d0:ea:e4:e8:e4:b6:9a:2f:e8:df:d3:c8:a9:1a:de:
f3:32:85:ee:4d:a4:c1:d6:c0:97:0e:f8:65:12:a0:fa:40:ee:
ff:c5:61:0b:c5:e0:66:ca:12:89:f0:10:52:c2:bc:89:60:32:
0b:82:29:a4:12:9c:9b:fb:9f:a0:09:98:0e:ee:5d:bb:fa:aa:
b6:69:f9:fe:63:36:07:9b:13:9f:65:f4:ab:a6:fa:20:5d:f0:
00:4d:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:39 2025 by rpki-client