Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/gRSsK12UeTTetSEb6Vxv0WnJ7SQ.roa
File: gRSsK12UeTTetSEb6Vxv0WnJ7SQ.roa (raw, json)
Hash identifier: yZoCRzaiDmu6mVY0ZbL+8GzXpDnCJsCuoupWiefoLCs=
Subject key identifier: 81:14:AC:2B:5D:94:79:34:DE:B5:21:1B:E9:5C:6F:D1:69:C9:ED:24
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 018EC89FC3C2376BFA1B161AECB77D7869B2
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/gRSsK12UeTTetSEb6Vxv0WnJ7SQ.roa
Signing time: Wed 10 Apr 2024 15:28:17 +0000
ROA not before: Wed 10 Apr 2024 15:28:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44051
IP address blocks: 31.172.81.0/24 maxlen: 24
31.172.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 08:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:9f:c3:c2:37:6b:fa:1b:16:1a:ec:b7:7d:78:69:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Apr 10 15:28:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8114ac2b5d947934deb5211be95c6fd169c9ed24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:a9:a5:5d:ff:b1:ad:b8:6f:82:8a:68:ac:
16:0d:cf:fb:85:7b:2b:4b:49:5f:d5:f5:7f:e1:b7:
0e:81:5f:68:23:4d:fd:a1:ca:7f:28:50:1b:d7:fd:
3d:75:e7:33:68:93:f4:22:22:e3:4c:8c:a7:d9:dc:
9a:ff:69:bb:17:81:53:c1:78:3e:59:0d:d5:26:46:
cd:75:80:1d:a4:33:04:5b:2a:bd:27:66:73:56:7f:
94:8c:bf:bc:fc:71:18:ac:0a:ba:de:ef:ea:70:34:
15:39:7c:b2:c1:5c:fe:5b:48:1b:4d:11:b5:67:80:
fd:95:29:79:dd:90:51:b2:87:ef:52:03:e1:52:7a:
c5:95:e0:23:c8:05:30:2e:13:e9:d9:9e:eb:ab:0d:
ee:99:65:b4:68:31:e7:89:55:a6:50:b8:59:b3:03:
3b:3e:b6:75:bf:65:83:38:c1:37:c8:09:9d:62:13:
39:0d:57:34:5e:12:0f:cc:01:05:6e:df:92:3e:3e:
51:9a:d5:11:37:ca:95:b4:69:24:fe:c6:1c:01:e2:
15:84:d4:1f:69:7e:9a:b3:31:e8:f1:b6:3f:21:0e:
b5:d1:a8:2c:be:63:1d:57:95:38:cf:ba:b4:0b:1c:
dc:af:00:e2:5a:8a:c0:f7:2c:20:36:8c:2a:d5:40:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:14:AC:2B:5D:94:79:34:DE:B5:21:1B:E9:5C:6F:D1:69:C9:ED:24
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/gRSsK12UeTTetSEb6Vxv0WnJ7SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.81.0-31.172.82.255
Signature Algorithm: sha256WithRSAEncryption
a8:48:67:84:cb:05:fc:75:e2:0a:86:67:e9:5d:a9:15:03:e1:
95:80:f4:18:2f:ac:43:e1:91:1f:8f:c6:f7:ae:e8:76:6e:a8:
1c:b2:fd:57:a2:18:6d:2a:76:28:1b:a0:ef:8a:16:6a:5f:6a:
0e:36:00:36:e2:18:99:06:a1:0a:73:c8:bb:f7:7b:97:ed:67:
58:0d:88:ae:98:f0:d6:d3:ab:f5:6a:a1:34:f1:29:08:c7:32:
df:44:57:4f:ea:99:0f:0d:b4:0c:51:31:df:ce:03:63:a4:57:
0b:08:ea:64:b9:b4:da:9f:a4:65:03:76:95:a8:7e:9d:bc:e7:
1a:12:6c:21:1a:57:e0:f2:99:16:8e:11:66:36:ec:a4:c7:22:
41:be:44:22:f3:29:c9:ae:49:c3:5d:5f:61:c5:1f:1e:2b:88:
d8:09:57:9e:78:1d:3c:cb:bf:1e:ca:09:ec:b0:27:06:7c:68:
bb:32:d1:32:44:44:ee:76:05:41:f2:02:e3:06:c7:75:bd:bc:
93:49:61:58:5b:98:0c:a2:a9:12:85:63:c9:b1:ae:a2:c8:ce:
6e:ce:2e:c8:5b:d0:18:53:6f:9d:68:de:29:58:bd:4d:52:9e:
a2:07:84:ba:98:74:f3:26:53:b6:ef:40:33:a3:62:dd:41:d2:
8f:2a:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:16 2025 by rpki-client