Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/q4awy6Ttm24uihI97OnIsxJg5sQ.roa
File: q4awy6Ttm24uihI97OnIsxJg5sQ.roa (raw, json)
Hash identifier: rcW8TOtnIY4rbdxmNxj9dIT4E2U5loKkigkwXjAcV68=
Subject key identifier: AB:86:B0:CB:A4:ED:9B:6E:2E:8A:12:3D:EC:E9:C8:B3:12:60:E6:C4
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 019294C416B702C1F96B7DD823E7DB903F3B
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/q4awy6Ttm24uihI97OnIsxJg5sQ.roa
Signing time: Wed 16 Oct 2024 09:58:51 +0000
ROA not before: Wed 16 Oct 2024 09:58:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47160
IP address blocks: 31.14.68.0/22 maxlen: 24
45.112.120.0/23 maxlen: 24
45.112.122.0/24 maxlen: 24
185.126.228.0/22 maxlen: 24
2a06:c480::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Nov 2024 16:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:c4:16:b7:02:c1:f9:6b:7d:d8:23:e7:db:90:3f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Oct 16 09:58:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab86b0cba4ed9b6e2e8a123dece9c8b31260e6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:0c:af:c1:ff:c3:4e:be:cb:83:33:38:6a:
7c:18:93:4b:9a:ac:57:66:ee:45:76:c4:22:e3:4e:
60:df:52:f9:57:2e:4a:65:76:2d:12:64:64:f6:ba:
ef:33:53:06:bb:3b:65:22:b5:44:42:71:c3:a0:91:
9a:07:80:3a:50:e3:d6:2a:0a:62:6a:26:d6:34:54:
f0:0e:8c:47:d2:6c:a2:f4:be:ea:7f:7d:8b:fc:fb:
7b:8e:00:5c:c3:97:66:e9:53:30:f3:d7:23:cc:28:
fd:43:40:19:c7:4a:22:44:0e:b4:0c:15:1d:4d:23:
d0:2e:2f:df:47:06:47:da:ea:24:c8:88:2d:e4:9c:
e1:ba:c8:a0:78:6d:6c:4c:d7:07:32:af:fa:78:51:
2b:df:d8:d3:93:a9:78:fe:b3:74:6e:9a:2c:3c:2d:
71:dc:fd:81:aa:74:22:5b:6a:19:1d:4b:d2:68:97:
2b:78:1e:71:7d:4a:ae:6a:fa:7d:22:dc:dd:98:c8:
2b:96:ac:81:01:b2:25:23:a9:8c:2e:cc:38:fb:8a:
d6:ac:89:e1:b8:3e:dd:c5:a8:60:70:83:37:ae:03:
af:2f:25:7d:3a:2f:1a:7b:5a:81:59:db:ed:0e:67:
72:b0:8d:21:45:b1:c6:22:f6:27:c2:6b:a2:e3:bd:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:B0:CB:A4:ED:9B:6E:2E:8A:12:3D:EC:E9:C8:B3:12:60:E6:C4
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/q4awy6Ttm24uihI97OnIsxJg5sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.68.0/22
45.112.120.0-45.112.122.255
185.126.228.0/22
IPv6:
2a06:c480::/29
Signature Algorithm: sha256WithRSAEncryption
7d:fb:38:af:31:10:14:e8:5f:3d:f1:da:a8:9a:e6:97:cb:c4:
c7:aa:3d:2b:eb:3c:a8:ff:ad:7d:96:f1:ed:d9:5b:27:f9:d4:
bd:3f:8e:9d:b0:1d:50:f8:6a:47:22:cf:60:bb:7f:51:8a:71:
dd:cc:dc:7b:9a:3e:fe:d3:65:30:6b:4e:dd:65:9e:3d:b5:d8:
9d:fc:68:47:d8:a2:74:ca:5a:de:0f:82:5a:08:81:2f:07:99:
3d:c8:33:8f:28:ba:c0:a3:53:26:50:49:12:8e:1f:ed:cc:de:
0e:b7:ce:04:71:71:9c:fd:d5:f5:52:e5:3d:c6:58:56:a9:d6:
14:f4:ed:b6:76:4f:c5:c6:23:7d:10:e1:f6:af:e9:2a:4b:8c:
9a:17:05:28:80:21:68:95:4c:2b:30:13:e3:52:bd:9a:b0:ad:
82:f4:ec:42:9d:e1:bb:42:ae:7c:2a:1b:69:a5:b2:0e:49:6d:
66:0c:9f:62:c5:9d:c1:e5:40:c3:50:e5:c9:4f:3f:d8:e6:ba:
31:31:76:05:e9:a6:20:86:7c:a7:37:f3:58:7c:e9:f3:0b:f6:
e3:7f:7f:02:ce:22:86:b6:00:95:67:24:d1:58:f3:a4:90:ff:
f2:68:3c:9a:75:d9:27:7b:4e:36:d6:e8:fc:3a:88:62:d3:b5:
c6:d9:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:00:50 2025 by rpki-client