Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/U-GWKvNa-o6gyhINIl2EwCZsxLo.roa
File: U-GWKvNa-o6gyhINIl2EwCZsxLo.roa (raw, json)
Hash identifier: 8dIrHkMc/PzSJXj0Oo/ID2rPq0fnQrEh4gMyj4OdOh4=
Subject key identifier: 53:E1:96:2A:F3:5A:FA:8E:A0:CA:12:0D:22:5D:84:C0:26:6C:C4:BA
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 0193B3E2C101FA3CEF8230EC5172D1B27ACC
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/U-GWKvNa-o6gyhINIl2EwCZsxLo.roa
Signing time: Wed 11 Dec 2024 04:03:22 +0000
ROA not before: Wed 11 Dec 2024 04:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.222.204.0/22 maxlen: 24
37.148.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 02:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b3:e2:c1:01:fa:3c:ef:82:30:ec:51:72:d1:b2:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Dec 11 04:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53e1962af35afa8ea0ca120d225d84c0266cc4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:65:13:5d:19:bc:d7:3f:92:5e:a2:e0:6d:
a0:e2:76:2f:6a:21:0f:7e:c7:f2:94:1e:db:17:5b:
9b:fa:a9:95:86:96:21:8b:64:34:30:ff:dd:31:b6:
85:12:d7:50:e7:35:b4:36:b5:60:f5:fe:18:c1:8f:
84:25:bb:84:62:55:e8:65:63:69:ef:2e:18:18:52:
4c:ef:f2:ad:9b:f8:b6:77:86:10:1b:53:1e:12:b8:
c6:87:2f:5c:f9:32:17:dd:b8:bb:35:98:1b:80:1b:
41:e1:1f:60:d8:1d:42:96:59:50:6c:9f:be:41:46:
1b:05:bb:94:e4:50:1f:41:01:15:c1:15:b3:86:c9:
f1:2b:38:9f:d4:d4:90:a4:f0:d8:6f:2c:bf:3e:ae:
e5:32:7c:3c:33:41:26:30:d0:45:90:88:a9:1b:79:
b3:69:e2:5d:c5:e1:1e:74:42:f4:c7:1c:40:8c:3c:
ec:4d:4d:68:dc:69:98:50:45:22:87:cc:82:04:4a:
f3:dc:f5:91:a4:d9:e7:18:38:28:e2:97:77:79:4f:
68:64:6c:43:69:f5:8c:87:c0:84:7b:d3:28:e8:22:
6f:12:53:06:1f:3c:bf:bc:63:d9:45:76:23:39:65:
70:f8:52:66:e3:68:62:34:fd:1f:b1:de:ef:0f:c1:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E1:96:2A:F3:5A:FA:8E:A0:CA:12:0D:22:5D:84:C0:26:6C:C4:BA
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/U-GWKvNa-o6gyhINIl2EwCZsxLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.204.0/22
37.148.218.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:ef:4d:d4:ef:12:e6:6c:18:41:63:60:85:f3:13:eb:38:61:
4c:af:62:79:f0:b8:77:c8:35:21:2c:6e:75:48:85:c6:aa:b8:
a5:b9:f7:29:c3:00:80:ca:c4:9c:65:55:5a:f5:e6:00:0d:a2:
e1:6a:57:43:2c:71:80:f2:5e:2e:3e:b7:f9:da:53:38:81:c6:
f9:7c:d3:a6:bd:2d:89:1e:62:57:fe:b4:7f:98:be:1d:fe:4f:
19:05:e6:1e:21:ff:44:60:d8:73:3f:3b:68:05:dd:7a:41:2f:
61:04:b3:ca:d2:2c:01:58:6f:33:29:18:c7:99:a6:50:d0:0b:
87:58:39:a0:17:07:2d:fc:cc:70:02:42:4d:66:d9:17:04:56:
ba:d4:d6:79:3f:e9:47:85:31:e1:c6:8e:96:d1:76:6d:69:3b:
a2:c0:67:4d:15:24:55:86:d3:bd:ae:25:a6:62:4b:44:cb:2f:
bb:13:2f:a9:bf:c5:14:63:76:b8:c8:ac:c3:44:55:8e:4e:36:
6d:4e:0e:50:bf:4f:e8:af:fc:c3:be:f0:49:50:bd:5d:1d:10:
0f:21:29:ce:f1:0d:08:cf:cc:fe:4d:54:e5:5f:7a:2a:7b:1d:
1f:62:97:ca:38:62:0b:6b:28:cf:b0:72:a2:1f:61:15:6d:31:
b1:8a:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:33 2025 by rpki-client