Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/OoHQ-F7LxnAJ5LKtntPCM-VinZA.roa
File: OoHQ-F7LxnAJ5LKtntPCM-VinZA.roa (raw, json)
Hash identifier: SmDqOEqg/vhxS+uRdF+0kIxIyamDTxMs6oaM5ips+mY=
Subject key identifier: 3A:81:D0:F8:5E:CB:C6:70:09:E4:B2:AD:9E:D3:C2:33:E5:62:9D:90
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 019417008B0360B144E045F9424253D90541
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/OoHQ-F7LxnAJ5LKtntPCM-VinZA.roa
Signing time: Mon 30 Dec 2024 09:58:19 +0000
ROA not before: Mon 30 Dec 2024 09:58:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 31.193.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:00:8b:03:60:b1:44:e0:45:f9:42:42:53:d9:05:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: Dec 30 09:58:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a81d0f85ecbc67009e4b2ad9ed3c233e5629d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:a9:5f:3a:b5:d4:24:78:19:71:97:91:10:
bd:d9:98:fd:de:1e:38:c0:13:56:72:cc:bd:46:60:
c3:e0:dc:ca:d8:cc:cb:08:1e:f1:00:be:f5:62:9f:
a6:77:40:1e:2c:1b:5c:ad:8a:60:c7:12:47:a8:dd:
39:29:08:51:38:f5:6b:25:24:9f:35:16:5d:a9:1f:
4d:31:3b:38:ac:43:11:38:58:63:1a:5a:93:dd:ad:
0f:77:b3:e8:f6:e7:99:5f:c2:87:09:dc:76:1d:c4:
27:a6:36:f1:fb:1d:51:67:b6:36:dd:98:61:3f:ec:
69:bd:b6:af:ec:e2:9d:0d:89:0f:40:5f:e6:0d:16:
92:e0:a0:4d:c3:28:15:47:71:44:f8:05:ae:dc:27:
88:30:1d:2e:87:6d:30:84:f7:a5:0c:04:ec:bc:42:
44:8f:05:b0:5f:d1:ec:3b:35:3c:d1:b6:b7:a4:b8:
d0:c5:b0:1f:b3:e9:96:e4:c9:12:a4:1d:6a:33:a9:
62:d1:b8:af:6d:cb:83:ed:c2:d7:b5:93:7f:89:77:
10:00:4f:ea:a6:f5:b7:a7:5b:fa:15:66:70:c7:2d:
97:c1:36:7d:51:1a:8b:1b:30:97:1f:4c:de:42:ff:
79:65:37:fc:bd:c9:d5:68:89:0c:58:43:3e:e1:b5:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:D0:F8:5E:CB:C6:70:09:E4:B2:AD:9E:D3:C2:33:E5:62:9D:90
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/OoHQ-F7LxnAJ5LKtntPCM-VinZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8c:82:ce:32:de:60:65:77:20:15:83:05:c6:60:5d:c8:3f:
16:b5:5e:7c:0e:13:46:66:90:5e:c4:37:54:38:4c:e9:2c:65:
06:43:2a:43:30:61:65:17:66:e9:e8:fc:41:05:7f:20:06:03:
63:58:b1:12:6d:fd:02:3d:0f:1b:f3:4a:fa:31:e7:c6:68:9b:
34:9f:fd:d0:e4:7d:21:7c:6a:0c:d7:77:6a:b6:56:fe:85:d3:
f4:7c:cb:60:7e:66:b9:d1:7d:99:e7:0c:d4:a9:79:b4:60:25:
f2:d4:a2:78:84:dd:df:12:1e:26:0f:54:bb:1d:37:f2:3f:ba:
1f:ef:42:e4:3b:9a:34:58:c2:76:43:04:9e:75:d7:c3:bf:6a:
40:a7:1d:f3:ff:05:7c:97:9a:57:3b:0a:3e:01:bc:a4:2c:fd:
78:ea:ff:53:ed:68:ea:44:f7:2f:65:5b:77:c6:c2:de:0d:be:
63:1b:30:51:f4:fd:81:ba:31:c6:bd:58:64:44:ae:73:be:91:
21:1d:ff:a2:bf:a7:e4:02:90:6a:87:6e:fa:08:12:49:95:9c:
ef:74:b5:30:3b:73:40:53:89:e3:89:0f:2e:ca:7a:76:68:70:
82:03:f9:a5:cf:ec:38:b7:6e:b5:79:d8:a6:09:cd:07:60:ed:
d6:82:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:38 2025 by rpki-client