Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/pXJ-oOBuu2u4SWvXNKicugBPzn4.roa
File: pXJ-oOBuu2u4SWvXNKicugBPzn4.roa (raw, json)
Hash identifier: mnrDaUv4Os9Q2bN6Vpp+pfks7+xxFUMqnhEFA5iiFmw=
Subject key identifier: A5:72:7E:A0:E0:6E:BB:6B:B8:49:6B:D7:34:A8:9C:BA:00:4F:CE:7E
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 0193CA1AEE6F3C9FF5658FC5F08B66FA38B5
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/pXJ-oOBuu2u4SWvXNKicugBPzn4.roa
Signing time: Sun 15 Dec 2024 11:36:22 +0000
ROA not before: Sun 15 Dec 2024 11:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199486
IP address blocks: 31.47.64.0/21 maxlen: 21
31.47.69.0/24 maxlen: 24
185.123.132.0/22 maxlen: 22
185.214.156.0/24 maxlen: 24
185.214.157.0/24 maxlen: 24
185.214.158.0/24 maxlen: 24
2a09:2e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:1a:ee:6f:3c:9f:f5:65:8f:c5:f0:8b:66:fa:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Dec 15 11:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5727ea0e06ebb6bb8496bd734a89cba004fce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:17:ad:c6:ea:4a:46:34:4a:16:3f:9c:77:
96:46:e9:3e:81:ab:66:a0:74:b9:bb:7d:19:64:cd:
e8:13:b3:e1:13:0b:51:de:f0:14:54:79:b6:2d:5f:
de:be:d4:74:9c:e9:88:9d:77:b2:6c:53:cc:07:31:
06:65:33:e6:1d:d2:db:07:fb:dd:01:b3:ec:6b:c2:
10:52:a4:ce:34:15:b4:f3:ca:8f:99:2c:90:f0:06:
88:74:93:7c:44:87:72:b1:2f:49:fd:0c:fb:c7:88:
09:f4:0c:4e:60:23:6c:b2:38:da:e5:50:cc:c4:f4:
a6:28:72:a8:58:e6:21:ce:ac:80:d2:3b:07:0c:7e:
3b:51:12:2a:73:29:87:39:0d:af:3e:7d:f9:35:04:
9f:e0:70:1d:17:14:8d:71:4b:e3:1d:73:27:23:ac:
24:6b:49:53:08:9e:2a:8f:4c:11:43:94:b4:bc:99:
9f:86:72:9d:01:50:34:d8:4c:4a:81:e2:e1:0d:60:
1f:39:e1:18:d2:91:9e:e0:ba:06:df:f6:33:d0:2c:
15:ac:12:33:c5:3d:87:45:3d:0c:ee:40:61:b2:f3:
14:82:52:c2:43:58:fd:4a:e5:5a:27:f3:0e:2a:64:
95:0e:10:60:a8:8d:2f:ba:b2:b1:65:78:80:b9:16:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:7E:A0:E0:6E:BB:6B:B8:49:6B:D7:34:A8:9C:BA:00:4F:CE:7E
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/pXJ-oOBuu2u4SWvXNKicugBPzn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.64.0/21
185.123.132.0/22
185.214.156.0-185.214.158.255
IPv6:
2a09:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
20:64:77:a7:a5:29:41:23:f0:aa:a3:e1:75:fb:91:45:f6:2d:
3e:81:1c:2f:9f:b3:fb:17:a2:dd:c3:43:3a:bb:ed:c2:50:57:
f3:bc:90:ae:65:99:16:f3:3b:50:12:23:63:10:8c:ed:57:32:
f8:0e:10:56:47:fe:91:e9:0c:7a:c0:cb:78:59:41:c3:de:af:
73:46:e6:2e:bf:43:3a:c7:b7:42:e9:14:76:6f:34:6b:58:5f:
28:20:ec:b9:a2:19:7b:b3:94:2b:8d:20:d1:ed:3d:af:7b:95:
41:29:9c:3a:45:b6:ab:fa:d3:09:fe:c0:0b:92:98:31:58:1a:
66:89:8f:66:64:1a:62:50:aa:a6:59:16:a7:c7:02:ef:f8:e9:
6f:aa:03:8e:3c:f2:a6:40:67:31:2f:13:df:f4:49:97:44:69:
a5:37:24:2d:ab:30:ca:54:dd:db:3d:e6:b9:36:a8:62:54:53:
94:55:0f:8e:ae:07:fa:9c:2a:63:97:aa:58:97:5d:80:c1:89:
c2:8c:19:cd:b3:73:53:0b:b9:01:55:d9:d9:ef:c6:39:8c:e8:
0f:44:fe:22:31:a7:6c:be:66:b1:8f:64:57:f5:85:af:68:79:
44:a6:33:a3:6d:35:14:fa:3a:a1:e6:68:83:4f:1c:dc:66:28:
28:03:e9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:19 2025 by rpki-client