Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/rKpIkXn6n1oKzd7B5nsXhkIfqV0.roa
File: rKpIkXn6n1oKzd7B5nsXhkIfqV0.roa (raw, json)
Hash identifier: s3Ef7FANB25R25dnR+M1AzsICaDehSA9bnW9Rpbsd/I=
Subject key identifier: AC:AA:48:91:79:FA:9F:5A:0A:CD:DE:C1:E6:7B:17:86:42:1F:A9:5D
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 0193722556B2AD9AAE064D188C1F83E945AD
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/rKpIkXn6n1oKzd7B5nsXhkIfqV0.roa
Signing time: Thu 28 Nov 2024 09:41:09 +0000
ROA not before: Thu 28 Nov 2024 09:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48882
IP address blocks: 31.133.64.0/20 maxlen: 20
91.218.16.0/22 maxlen: 22
95.215.48.0/24 maxlen: 24
95.215.49.0/24 maxlen: 24
95.215.50.0/24 maxlen: 24
95.215.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:25:56:b2:ad:9a:ae:06:4d:18:8c:1f:83:e9:45:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: Nov 28 09:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acaa489179fa9f5a0acddec1e67b1786421fa95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:c7:cc:d3:27:27:19:52:a4:81:8c:32:73:
0d:12:b7:6f:af:72:c8:e3:3f:d0:83:74:7b:f4:3d:
a4:94:9c:ab:6c:8c:b2:78:e2:b2:62:dd:02:5c:16:
d2:b1:cb:9a:bd:8b:81:47:65:f7:57:19:5d:56:3c:
27:fc:b5:eb:b8:6b:eb:56:e2:e5:7c:d2:78:df:4f:
26:46:61:09:44:e6:5a:b0:13:42:57:e0:42:20:dd:
5c:bb:a9:2e:ef:83:02:2c:20:7d:22:8d:cc:c3:bf:
5a:d6:20:e6:83:f2:a2:2a:41:91:25:f4:f0:50:bf:
fb:d9:ff:4a:b7:27:37:56:8c:d2:eb:22:dc:a3:f1:
a1:57:37:6c:16:9c:14:20:28:44:12:f7:30:2c:79:
0a:1e:5a:7b:7c:5a:cf:3f:36:f6:73:dd:a0:51:e9:
68:72:cd:dd:3a:5a:c8:eb:23:f9:f4:f0:f0:6d:dc:
a5:0e:08:3f:d7:1d:96:2a:f5:03:b0:32:dd:4f:a0:
91:00:ff:7b:65:4d:d9:13:2e:95:5f:de:b5:12:ed:
ae:d3:8f:d8:e3:49:28:7a:ca:b8:51:72:90:b1:55:
da:e8:d5:b9:ee:e4:0c:66:ab:7b:05:21:ee:11:bb:
85:8b:3e:8f:7b:a7:14:0c:c5:76:ef:0b:79:fb:6d:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AA:48:91:79:FA:9F:5A:0A:CD:DE:C1:E6:7B:17:86:42:1F:A9:5D
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/rKpIkXn6n1oKzd7B5nsXhkIfqV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.64.0/20
91.218.16.0/22
95.215.48.0/22
Signature Algorithm: sha256WithRSAEncryption
be:c9:1f:6b:b1:3c:f6:4f:28:1a:87:ff:f9:21:c3:11:fb:e1:
d5:c0:f6:67:a6:2a:36:ac:61:9e:be:10:6f:14:cf:e3:dc:1b:
aa:15:1a:9b:00:7e:9b:b3:7d:56:5e:05:58:71:4b:ab:ec:89:
13:0a:3b:c8:6e:ea:d1:42:60:71:ad:30:5d:ce:42:37:a4:da:
9e:32:c2:ba:5d:13:80:12:a2:03:c3:8d:af:e9:21:27:b1:9e:
c1:97:a5:c7:ba:13:1e:44:9a:6a:f4:7c:ef:34:6c:51:48:f5:
74:5e:08:0a:4b:49:2c:7c:2c:5a:c5:46:11:e4:4a:8a:7b:cb:
a5:b8:91:ef:50:0b:c9:62:6c:5f:0f:ff:6b:d1:8c:ca:29:8c:
59:96:62:85:4a:de:5c:21:c1:a9:51:19:bd:c9:0d:e3:d9:0b:
fe:ec:e5:15:b8:f1:3a:37:99:1e:7b:c6:08:16:5c:18:91:ac:
26:2e:c7:16:b1:57:d6:1b:b3:bb:54:17:bb:6c:a6:32:40:30:
49:e5:9b:ff:22:8d:7b:ed:01:8b:40:ee:d0:ef:ca:9e:4c:04:
49:49:c0:30:17:86:26:41:0c:82:ea:84:f1:c7:ae:43:3b:44:
cf:01:0e:12:58:dc:bf:30:cf:53:91:7c:9d:86:9e:85:f1:e6:
99:97:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:15:43 2025 by rpki-client