Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/L76ddVovngXeFafrxXJGPRUkrLw.roa
File: L76ddVovngXeFafrxXJGPRUkrLw.roa (raw, json)
Hash identifier: z3YMd1asaYjy3I1cKQPsWoYWH4aUeLZvtN4cUnICM1Y=
Subject key identifier: 2F:BE:9D:75:5A:2F:9E:05:DE:15:A7:EB:C5:72:46:3D:15:24:AC:BC
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0192F68BABB0F7DF00BF998E6800D378181E
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/L76ddVovngXeFafrxXJGPRUkrLw.roa
Signing time: Mon 04 Nov 2024 09:40:01 +0000
ROA not before: Mon 04 Nov 2024 09:40:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50616
IP address blocks: 31.22.48.0/22 maxlen: 23
31.22.48.0/23 maxlen: 23
31.22.50.0/23 maxlen: 23
31.22.52.0/22 maxlen: 23
31.22.52.0/23 maxlen: 23
31.22.54.0/23 maxlen: 23
31.22.56.0/22 maxlen: 23
31.22.56.0/23 maxlen: 23
31.22.58.0/23 maxlen: 23
31.22.60.0/22 maxlen: 23
31.22.60.0/23 maxlen: 23
31.22.62.0/23 maxlen: 23
109.234.232.0/22 maxlen: 23
109.234.232.0/23 maxlen: 23
109.234.234.0/23 maxlen: 23
109.234.236.0/22 maxlen: 23
109.234.236.0/23 maxlen: 23
109.234.238.0/23 maxlen: 23
185.156.12.0/22 maxlen: 23
185.156.12.0/23 maxlen: 23
185.156.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:8b:ab:b0:f7:df:00:bf:99:8e:68:00:d3:78:18:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Nov 4 09:40:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fbe9d755a2f9e05de15a7ebc572463d1524acbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:d0:35:90:72:f1:e5:3f:c9:e5:78:3a:59:
d1:0f:4c:82:93:75:61:23:f9:17:e7:f5:b1:5a:1f:
f9:7a:9e:07:92:c7:55:6c:2c:d4:40:c6:2e:14:a6:
f7:42:ee:8f:c1:9d:a4:e3:41:eb:e0:b7:b3:d8:5f:
ac:fa:de:3f:0c:d7:58:95:b8:49:a2:6b:8b:14:bc:
f0:c0:4a:52:54:9b:d4:c9:97:b6:3f:20:a3:cb:3d:
8f:41:d9:a6:16:fd:b0:d8:5b:2d:cc:ca:4a:d0:32:
e8:01:43:00:eb:64:cb:38:0b:d7:38:1b:60:c8:fb:
ac:0b:6f:d9:86:05:e2:27:9d:07:be:6b:b7:a4:c6:
ee:95:22:de:d4:0d:30:30:29:8d:f3:bb:90:c6:a5:
e2:4f:7b:8f:76:f8:fd:4d:10:b6:be:5d:3e:29:a6:
3e:cc:cd:e1:b4:a3:6d:e5:8c:8f:3d:8e:b7:bc:ca:
69:04:94:95:f2:f9:72:b1:d5:99:3e:74:35:df:09:
6f:34:23:4b:8c:59:3c:cb:1a:7d:42:a9:d2:42:e6:
0b:28:ec:75:b4:70:6d:83:aa:a8:c0:2a:ca:14:8b:
22:95:e3:53:f3:f4:d7:8b:30:d8:91:ed:b5:fc:45:
58:59:3f:ec:fb:dc:62:dc:d9:9d:a9:f7:db:c3:76:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:9D:75:5A:2F:9E:05:DE:15:A7:EB:C5:72:46:3D:15:24:AC:BC
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/L76ddVovngXeFafrxXJGPRUkrLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.48.0/20
109.234.232.0/21
185.156.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:45:72:a1:e5:45:a8:9b:ec:b5:46:8e:1d:37:83:e3:cf:9e:
b7:f9:6c:41:c6:58:08:2f:41:ce:ac:9a:69:ca:75:6c:a4:9f:
ce:53:46:7e:cd:86:70:ce:f1:90:dc:31:b0:26:0d:7f:2f:c2:
3a:11:01:01:aa:8f:76:a6:98:07:86:ff:33:c2:29:23:f3:f6:
2d:c6:87:cc:bd:99:b6:51:4a:c8:37:c2:69:f4:7d:dd:33:d7:
35:c1:af:5b:38:db:b1:bf:67:6e:8d:76:5c:9d:dc:1a:51:bd:
c2:bd:2b:db:9d:b6:de:e7:a9:97:5f:f3:7c:98:2b:7e:ae:cd:
dc:b8:e4:57:88:a8:4b:25:9b:d6:db:eb:2a:e5:c6:4e:89:81:
80:e8:9c:de:51:cd:01:3f:cf:44:6a:35:28:7e:2a:95:17:f1:
5b:90:ec:21:35:d3:ec:c6:22:15:d0:39:5b:31:d8:12:61:65:
2f:1e:06:4d:1f:73:03:80:5b:fc:b9:a9:df:64:f4:02:ea:0c:
07:2d:53:7b:13:37:76:49:4c:2a:a2:43:3e:61:00:60:6f:92:
55:3d:40:f5:4a:a1:2a:c8:0b:30:43:06:30:cb:bd:79:5e:b2:
65:81:5b:ed:50:31:a2:ec:23:4c:5f:7e:89:b6:9c:17:68:70:
19:95:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:26 2025 by rpki-client