Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/U4uTkA8wTXNbYckZvnCvL_ixt-c.roa
File: U4uTkA8wTXNbYckZvnCvL_ixt-c.roa (raw, json)
Hash identifier: qGL9pFzutMlVgNC1PO+/SM+FhOJadbkJ/i6V4VWfFiE=
Subject key identifier: 53:8B:93:90:0F:30:4D:73:5B:61:C9:19:BE:70:AF:2F:F8:B1:B7:E7
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 018F94647CD71527CE32008E4370256C8DE5
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/U4uTkA8wTXNbYckZvnCvL_ixt-c.roa
Signing time: Mon 20 May 2024 05:06:04 +0000
ROA not before: Mon 20 May 2024 05:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58262
IP address blocks: 31.40.2.0/24 maxlen: 24
31.40.3.0/24 maxlen: 24
31.40.4.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 14:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:64:7c:d7:15:27:ce:32:00:8e:43:70:25:6c:8d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: May 20 05:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=538b93900f304d735b61c919be70af2ff8b1b7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:92:a8:08:a2:31:a1:51:bf:7b:f7:31:d1:90:
97:66:26:26:77:b8:f8:17:80:91:95:ba:b3:0b:58:
8a:c2:9f:f0:32:c5:4e:c1:d6:c6:ec:90:e0:c7:eb:
33:91:4d:b0:1a:93:6e:3b:f0:8b:3b:0d:e8:fd:3e:
73:f9:9e:8d:9d:6c:2d:fa:a2:f8:29:23:46:59:3c:
18:f6:36:4f:63:79:75:80:ad:7f:6e:59:b6:d5:62:
ed:7b:e9:50:c4:ed:cf:1b:3f:57:4c:dd:41:4d:b7:
b9:dc:37:d0:e0:d9:37:9a:1a:43:92:5a:16:3b:21:
39:1e:9d:42:c7:3b:ef:6b:db:53:9c:d2:3c:af:c8:
71:e8:db:59:a6:c6:ee:d0:3c:16:22:04:df:c5:12:
25:e8:b1:b8:4a:df:55:7e:15:34:fc:8b:de:4a:fb:
da:fb:5a:f4:95:a1:4d:d7:bd:ee:24:4b:8d:17:cd:
15:eb:99:95:a0:77:26:84:7d:55:1d:73:43:fd:1f:
50:48:8b:0a:c2:da:b2:b3:11:35:72:53:ed:d7:bf:
e2:ef:50:1f:1b:bf:fd:09:2a:55:be:18:50:87:14:
66:d1:d1:99:e9:67:87:6a:ab:70:72:dd:78:cd:d3:
b4:e7:e9:2a:0f:ea:40:c0:ad:c7:86:0f:19:ea:63:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:93:90:0F:30:4D:73:5B:61:C9:19:BE:70:AF:2F:F8:B1:B7:E7
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/U4uTkA8wTXNbYckZvnCvL_ixt-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.2.0-31.40.5.255
Signature Algorithm: sha256WithRSAEncryption
6d:7e:62:3b:4c:a1:82:11:69:24:7f:fd:39:52:42:b0:1b:5e:
a6:33:a9:d0:e4:17:d0:4c:a3:e3:1d:36:84:b3:b8:8b:f2:94:
9f:09:f1:b1:08:53:6f:d7:6e:81:d7:48:02:c8:65:05:91:ed:
58:a8:5c:db:cf:de:91:54:bf:99:26:03:f2:a6:1b:c0:51:93:
9b:97:4e:ca:61:f0:5c:5a:16:8c:47:50:fb:31:09:1f:a1:32:
98:35:9d:47:ff:c1:6a:4d:cd:36:00:16:52:00:a0:fa:7a:99:
a8:d7:bc:02:1a:2d:af:6b:9c:ba:8d:a3:44:16:a4:e4:e6:91:
b4:33:e6:13:15:a3:1b:88:60:38:c0:f3:f5:7a:db:98:d9:7c:
b8:05:a1:09:f5:0f:6c:2c:82:37:cd:e9:00:8a:e8:d5:c4:0e:
05:73:0d:0d:83:ac:21:65:e2:db:9a:41:37:4a:6d:44:62:b2:
b5:ec:0c:ad:a9:34:ab:b6:7f:73:2d:58:4c:61:6c:44:c1:2e:
60:53:b6:ae:38:48:d3:95:29:fe:9e:03:e7:ea:3f:37:5e:9c:
96:f7:f3:9c:4c:9e:60:2c:37:05:ac:6d:c5:79:c3:4f:af:74:
7a:1d:a2:4a:e6:dd:91:b3:c2:4d:ba:be:20:2b:15:9a:1a:e6:
d4:05:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:21 2025 by rpki-client