Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/sM_rdFKwW9k0kPZrq2DLNHAGGlc.roa
File: sM_rdFKwW9k0kPZrq2DLNHAGGlc.roa (raw, json)
Hash identifier: KMY2o7TwUcAKqBVStOZomgbVuYOhUV7SaDVcVw59CPw=
Subject key identifier: B0:CF:EB:74:52:B0:5B:D9:34:90:F6:6B:AB:60:CB:34:70:06:1A:57
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 01943476A8530DDC34E1B96760E1BFFC69BB
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/sM_rdFKwW9k0kPZrq2DLNHAGGlc.roa
Signing time: Sun 05 Jan 2025 03:16:19 +0000
ROA not before: Sun 05 Jan 2025 03:16:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.222.204.0/22 maxlen: 24
37.148.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 02:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:34:76:a8:53:0d:dc:34:e1:b9:67:60:e1:bf:fc:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 5 03:16:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0cfeb7452b05bd93490f66bab60cb3470061a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:10:6b:a3:7d:9f:e3:53:be:5f:47:16:cb:
df:c0:ba:75:7e:a5:12:a5:58:ab:51:8f:02:e2:02:
78:5e:6f:ce:dd:7f:68:ac:03:86:6b:28:c0:b2:8f:
4d:7d:f6:32:59:29:eb:22:51:96:79:bf:fb:5c:08:
64:a8:83:d8:9a:b3:54:09:64:50:94:cc:f1:dd:16:
70:54:9f:91:a1:36:ec:5f:c9:e0:eb:d1:2a:e5:da:
09:d5:77:0a:c9:82:d0:e8:08:f6:d1:64:2c:77:25:
41:b4:81:33:ed:4c:50:ae:fa:73:62:cc:77:6b:52:
50:71:a8:d4:ed:9f:55:57:75:3c:62:14:08:ab:2a:
73:26:89:5f:95:65:1f:48:c1:12:a2:f8:5e:b7:6a:
81:fc:cd:f7:79:81:c5:26:8d:5b:30:dc:aa:3e:18:
25:6a:8f:cd:4d:65:9b:c7:24:4c:64:32:13:7d:c5:
a7:bc:b1:e3:b8:ff:3c:7c:3f:45:b0:e0:f3:a3:a5:
f6:bc:b3:4e:7f:74:f4:06:11:26:3c:c8:a2:46:b8:
f3:8c:24:4d:f6:73:ff:02:1f:79:43:58:4d:c6:06:
4e:95:e6:28:a2:8d:e4:08:e3:a3:5f:eb:4f:5a:47:
76:9b:cf:b1:19:1a:56:4a:8c:2f:a0:e0:ba:33:0e:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:EB:74:52:B0:5B:D9:34:90:F6:6B:AB:60:CB:34:70:06:1A:57
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/sM_rdFKwW9k0kPZrq2DLNHAGGlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.204.0/22
37.148.218.0/23
Signature Algorithm: sha256WithRSAEncryption
98:e4:f3:5f:ec:f2:20:48:1a:7b:b3:30:ef:25:fa:f7:3b:46:
99:77:88:9c:80:a7:3d:a1:14:f4:6a:e2:99:42:47:58:25:ec:
f7:ee:43:6a:71:16:d6:89:ab:ec:ed:e6:27:a7:20:31:28:13:
13:47:00:5d:cb:b7:52:41:73:ce:cc:16:15:f2:19:b5:7b:6b:
ad:98:d3:bd:e3:41:a5:63:20:6c:7e:22:d3:c4:65:31:e6:55:
28:fc:1e:c4:e6:6b:39:87:b0:8b:de:2e:7c:d5:f2:5f:75:70:
6f:a4:bc:27:05:5f:5d:d7:b1:64:0e:8c:02:b0:26:06:a7:94:
ad:11:16:9c:e1:c4:29:d3:18:ad:bd:f5:04:ce:af:5d:01:8a:
16:b8:92:a7:b2:a5:bb:a2:c1:89:ba:18:8d:77:8d:86:d3:17:
ab:be:fa:10:1d:b8:21:17:1d:1b:54:4b:99:05:8a:e5:27:aa:
1c:e4:43:46:5d:fd:3c:f2:73:18:94:08:ca:61:af:49:88:51:
b1:a9:87:a6:da:02:01:2b:1f:1b:e7:63:9e:ad:65:f1:af:ad:
12:62:29:92:82:82:90:99:a2:46:af:b7:3c:84:cb:c4:63:d3:
c8:07:6c:91:7e:cb:af:9b:4c:2b:e9:8f:8a:ec:25:63:52:54:
f4:ab:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:31 2025 by rpki-client