Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/i1ZnIObDQ6il0oM4VJSdvVeQ8v8.roa
File: i1ZnIObDQ6il0oM4VJSdvVeQ8v8.roa (raw, json)
Hash identifier: M26o8IWwQoYeNjHneQtdHb5CWg2U8Mta0/8fL4RJHwE=
Subject key identifier: 8B:56:67:20:E6:C3:43:A8:A5:D2:83:38:54:94:9D:BD:57:90:F2:FF
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 01941FFA23228C5AFC4638A8A8260C4ED8C3
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/i1ZnIObDQ6il0oM4VJSdvVeQ8v8.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41327
IP address blocks: 31.185.96.0/21 maxlen: 24
93.94.88.0/21 maxlen: 24
185.61.168.0/22 maxlen: 24
185.157.228.0/22 maxlen: 24
2a03:b020::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 24 Jan 2025 13:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:23:22:8c:5a:fc:46:38:a8:a8:26:0c:4e:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b566720e6c343a8a5d2833854949dbd5790f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:f0:7c:ff:82:f1:ba:39:bb:82:66:51:0b:
4c:2f:97:78:e4:28:ed:ca:64:20:82:58:e5:0d:90:
6b:be:b7:24:ae:6b:34:34:5c:1b:dd:fb:67:b1:84:
1a:64:a4:8e:e4:c3:ab:b2:19:c2:51:90:69:8f:90:
22:bc:ff:11:4f:45:de:31:37:f5:4b:36:42:99:b4:
0a:66:84:bb:ed:cc:6f:00:58:dc:67:a4:fd:eb:66:
7d:44:7f:6c:11:18:80:f9:4e:78:e0:5f:02:85:c9:
25:78:5b:db:cc:74:92:91:4a:f3:01:9c:c5:8d:ed:
74:1e:b5:bc:96:32:23:e5:98:17:f5:e3:2e:5c:f9:
32:27:fd:66:28:fb:2c:53:b7:b4:5b:88:2d:17:a8:
22:a9:c6:bc:b5:31:d5:87:ea:c2:9b:b8:cc:fc:b7:
85:80:ba:2e:3d:0d:30:50:37:b8:3b:8e:be:38:f0:
33:70:89:a4:ce:64:9e:82:8f:59:cd:19:06:31:7c:
74:4e:f6:15:ba:6f:f8:87:e4:e3:3d:c3:1c:d7:7f:
4c:f3:ec:3e:6f:60:d3:67:d8:56:6e:f1:9b:2b:a8:
c6:a2:af:0f:de:5a:68:c2:78:8f:ec:c3:7d:04:10:
b6:ae:6c:11:8b:c3:05:78:e7:ed:89:03:8a:7e:99:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:67:20:E6:C3:43:A8:A5:D2:83:38:54:94:9D:BD:57:90:F2:FF
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/i1ZnIObDQ6il0oM4VJSdvVeQ8v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/21
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
Signature Algorithm: sha256WithRSAEncryption
cb:1c:38:4b:8a:db:77:87:fb:07:9a:1c:2e:75:43:59:e1:41:
95:1f:c8:e0:73:b8:fe:c2:be:19:ae:44:3e:ec:e1:9f:70:b2:
a9:89:09:b4:1e:c3:d3:6c:2a:2c:1f:5d:e1:cc:63:1b:53:34:
f6:8b:b8:aa:ac:51:08:27:a4:59:82:de:28:0b:7b:91:8b:42:
a6:82:e4:79:50:d2:36:5e:7d:5a:ad:9b:00:23:1a:75:85:b1:
7b:d5:4d:88:4e:be:f7:7e:57:8f:6d:f2:02:21:92:8e:62:5b:
e6:e3:62:83:39:93:60:75:da:97:81:49:ac:b6:44:b3:ce:a6:
bb:51:d7:94:c4:8b:bc:fd:e0:5d:b8:65:7e:9c:12:3e:48:2e:
db:84:bc:bb:17:ef:02:13:6e:fb:2e:9d:52:38:43:46:53:3d:
d1:af:43:fe:c7:fb:82:1e:8a:0d:5b:d9:ec:96:75:e0:dd:c3:
cc:86:27:27:88:e2:0f:d9:0d:63:34:c4:75:e5:8e:ac:58:57:
48:62:46:37:f0:e0:20:ca:52:24:20:b4:ef:20:58:8e:99:89:
6c:a1:ae:2d:0d:0a:04:8e:3b:77:76:64:a7:aa:ea:25:3c:a5:
a5:d6:01:d4:a3:b7:d3:c8:04:8b:a9:48:b9:54:67:05:37:ba:
82:b1:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:58 2025 by rpki-client