Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mpVxweimJT2sydRwn9DJFOdDuTw.roa
File: mpVxweimJT2sydRwn9DJFOdDuTw.roa (raw, json)
Hash identifier: bdbx1YmWRILxC33HS8amrg8uT8zmfGN3AArLWluEMx0=
Subject key identifier: 9A:95:71:C1:E8:A6:25:3D:AC:C9:D4:70:9F:D0:C9:14:E7:43:B9:3C
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0190BAAB1CA12BAF8A15735C6955CE5AA7D6
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mpVxweimJT2sydRwn9DJFOdDuTw.roa
Signing time: Tue 16 Jul 2024 08:31:34 +0000
ROA not before: Tue 16 Jul 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211559
IP address blocks: 31.11.48.0/21 maxlen: 21
31.11.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.60.0/22 maxlen: 22
37.186.60.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/23 maxlen: 23
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/23 maxlen: 23
80.76.168.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
103.14.208.0/22 maxlen: 22
103.14.211.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 11:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:ab:1c:a1:2b:af:8a:15:73:5c:69:55:ce:5a:a7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jul 16 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a9571c1e8a6253dacc9d4709fd0c914e743b93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:3a:38:76:69:f0:52:1e:52:bf:88:ff:fc:
a0:e8:cd:42:2a:78:91:72:c0:81:a1:87:0f:26:0c:
77:47:dc:30:02:93:6f:17:99:86:27:ac:0d:90:7b:
b7:c9:45:cc:19:9f:4d:97:f1:f0:10:68:24:d2:75:
e7:b0:a6:e3:01:8e:24:bb:98:44:0f:c0:4f:b6:6e:
bd:54:fc:e4:0e:0a:c5:1d:57:6c:03:85:3a:26:92:
98:25:28:12:73:69:f3:98:21:31:04:54:24:2d:68:
64:35:b0:99:ac:8d:e2:e2:15:df:9b:d1:8e:2f:97:
06:70:b0:84:dd:bb:69:7d:e0:07:0b:1c:68:54:d8:
00:99:27:8c:a3:ca:14:dd:a4:7f:61:4d:50:f6:fa:
e0:bd:70:49:e9:05:f3:2c:a3:50:51:44:8a:c1:d7:
b8:ed:84:37:6c:ef:2f:3e:66:f4:f4:67:25:fc:e3:
02:7e:69:b7:cf:fd:99:8d:fe:24:4c:7e:41:9e:4a:
89:62:5b:48:49:65:f6:67:c8:82:ac:6c:2a:83:aa:
55:69:92:34:b6:73:94:d8:8e:55:5f:9a:c1:e9:a5:
80:a7:cf:8c:42:0c:29:fc:2c:03:4b:96:88:aa:52:
14:29:1c:35:43:3f:17:f7:66:7f:2a:20:95:54:02:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:71:C1:E8:A6:25:3D:AC:C9:D4:70:9F:D0:C9:14:E7:43:B9:3C
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/mpVxweimJT2sydRwn9DJFOdDuTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.56.0/23
37.186.60.0/22
80.76.165.0-80.76.169.255
103.14.208.0/22
103.225.72.0-103.225.74.255
185.247.88.0/22
212.70.100.0-212.70.105.255
212.70.120.0/24
212.70.122.0-212.70.124.255
Signature Algorithm: sha256WithRSAEncryption
4e:35:b1:ee:7d:8a:24:c0:8d:5e:54:c2:40:c5:67:02:30:f4:
d5:0e:aa:11:52:ba:24:6d:02:28:71:37:13:57:52:25:9c:63:
f6:8b:37:73:12:18:39:41:ea:bd:4e:f7:ac:4d:2f:be:61:82:
d2:b2:43:a0:f6:45:84:95:a3:a5:67:fc:75:19:bd:4a:bc:f3:
e4:8d:13:88:83:0c:5c:61:2d:32:14:5e:f5:cf:f4:b5:f3:76:
89:79:d8:df:c1:78:3b:15:99:55:7a:d0:9f:b3:80:b9:a0:af:
bd:99:9a:09:9c:05:fd:d4:71:d9:10:f0:f1:fd:d7:2a:cc:9b:
9e:92:a6:8f:26:00:39:08:19:2a:df:02:c3:ff:57:81:e7:43:
75:26:1b:3e:f2:64:0e:6a:60:25:ab:ca:2a:01:77:05:fb:2d:
48:5e:14:f5:2e:dd:80:79:01:4f:5f:76:d1:7c:b6:ca:3a:f8:
7c:55:d5:d0:bc:10:b2:bc:f7:e1:30:25:c2:3d:79:12:d9:40:
42:23:af:e6:31:d2:c6:17:08:e6:e7:11:fe:c4:84:5a:00:bf:
36:c6:15:04:75:ae:b0:b5:23:6f:3b:91:86:57:eb:1a:41:8e:
8d:0a:17:29:ad:4b:78:20:ec:23:07:d5:85:4d:45:2f:70:87:
9a:80:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:32:17 2025 by rpki-client