Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/7Af_RPqU6A4p-zDHCndgQFCQISI.roa
File: 7Af_RPqU6A4p-zDHCndgQFCQISI.roa (raw, json)
Hash identifier: XDHPSYSMQUsiOt7UjhcUuZtbBe2qxOWDpV5/uHANV14=
Subject key identifier: EC:07:FF:44:FA:94:E8:0E:29:FB:30:C7:0A:77:60:40:50:90:21:22
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0194266C39F87CA0F02F34F51C061699E902
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/7Af_RPqU6A4p-zDHCndgQFCQISI.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.14.65.0/24 maxlen: 24
46.102.179.0/24 maxlen: 24
46.102.180.0/24 maxlen: 24
86.104.0.0/24 maxlen: 24
86.104.1.0/24 maxlen: 24
86.104.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 09:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:39:f8:7c:a0:f0:2f:34:f5:1c:06:16:99:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec07ff44fa94e80e29fb30c70a77604050902122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:78:5b:c4:e8:b3:54:2e:3d:1c:01:90:5d:
f2:33:3a:b0:59:ce:4b:f1:39:36:ad:5d:34:4b:46:
0e:11:17:4a:d1:ad:40:cf:3d:ed:1b:da:17:02:f4:
2b:b1:dc:5e:4e:29:24:71:e0:d4:96:48:da:41:7f:
64:34:07:79:fb:1d:39:b6:a1:de:5a:24:76:db:33:
e6:8c:63:30:02:53:77:88:48:30:8f:f3:b2:a8:47:
f6:37:8a:91:59:4d:04:2c:c2:ad:09:88:5d:f5:00:
51:49:29:e8:b8:cc:9b:4d:c6:84:1e:f6:66:30:cb:
1d:31:35:eb:8d:80:1e:56:0c:56:89:c8:73:df:95:
e5:f2:10:c8:b2:61:dc:cc:35:ce:62:bf:69:7b:6b:
0e:20:1e:4f:e3:79:4b:59:c6:e3:c8:de:31:bc:f3:
31:38:2b:b1:ab:4c:e1:a9:b9:ee:bd:41:d7:2f:a5:
ff:c6:a9:de:1d:58:59:d5:af:f7:64:44:e8:eb:15:
65:8c:7d:ff:25:3f:eb:a6:4d:88:2d:ec:d2:1b:07:
26:ee:2e:09:d4:87:20:b4:fc:53:bf:77:da:df:9f:
f4:9f:2e:56:fb:04:6f:8b:9c:85:e2:bd:7d:14:9a:
11:6f:15:9c:08:74:c1:9b:90:2b:8b:23:b6:d9:4f:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:FF:44:FA:94:E8:0E:29:FB:30:C7:0A:77:60:40:50:90:21:22
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/7Af_RPqU6A4p-zDHCndgQFCQISI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.65.0/24
46.102.179.0-46.102.180.255
86.104.0.0/23
86.104.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ce:27:20:4a:d9:27:ab:93:a5:94:92:ee:76:cb:fd:e9:77:
bb:c6:a8:48:0f:c9:e3:d8:81:e6:04:86:3a:79:b0:e3:ee:8d:
4a:49:40:45:00:59:09:9b:7b:e4:88:ee:7f:5a:95:a4:10:b1:
ba:c3:c8:8c:4a:5d:8a:59:19:47:17:b4:7d:2b:4e:85:e2:ff:
19:c1:f2:12:a7:9c:6b:88:ba:15:70:17:29:df:8b:bf:f4:27:
f9:59:59:54:e1:0d:86:0d:a3:72:61:8f:2c:ab:43:f1:45:1a:
0a:a1:65:32:cd:ae:f0:f9:10:5c:77:ba:c6:3f:b3:32:a3:54:
eb:ad:98:e8:e1:12:59:aa:42:d5:5e:2a:1b:8d:b0:0a:10:d5:
22:28:83:9d:f0:6d:9a:91:e0:8d:6e:91:42:3f:79:bb:73:90:
6f:eb:33:3f:30:1c:9e:46:9e:0d:44:be:b5:61:19:15:ef:f3:
b5:54:f7:93:ce:ed:fc:4d:38:53:76:11:43:84:cc:a1:79:13:
f5:b4:d6:68:e5:db:de:5b:9c:68:ca:c9:03:d4:af:d8:79:2a:
45:b6:8f:c0:82:c3:14:6b:3e:ab:5b:fa:77:ad:b7:3f:7a:cc:
3c:e2:f7:ca:2e:9f:85:72:d0:90:17:d1:22:3b:40:6b:5f:8d:
38:0a:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:42 2025 by rpki-client