Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/MYn8hnoRt5YdUziz7ILWTczrGWY.roa
File: MYn8hnoRt5YdUziz7ILWTczrGWY.roa (raw, json)
Hash identifier: Z8qV43A6/0+WU9sddUqvxIT84KA0fMMkl7jpUKvk4Vo=
Subject key identifier: 31:89:FC:86:7A:11:B7:96:1D:53:38:B3:EC:82:D6:4D:CC:EB:19:66
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 0190C6D2127E9D11E1EDC79E0E7491847F79
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/MYn8hnoRt5YdUziz7ILWTczrGWY.roa
Signing time: Thu 18 Jul 2024 17:09:34 +0000
ROA not before: Thu 18 Jul 2024 17:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48595
IP address blocks: 31.131.128.0/21 maxlen: 21
31.131.130.0/24 maxlen: 24
31.131.136.0/22 maxlen: 22
31.131.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 16:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:d2:12:7e:9d:11:e1:ed:c7:9e:0e:74:91:84:7f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Jul 18 17:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3189fc867a11b7961d5338b3ec82d64dcceb1966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:df:4b:4e:75:e8:82:18:7f:d0:95:aa:c5:
42:49:99:1c:5e:84:00:a2:2a:2b:fc:17:20:cf:d1:
2c:3d:28:da:04:eb:a3:74:84:8e:78:63:ea:fb:11:
39:43:a6:01:a7:b6:b3:6e:c5:3f:4d:87:b4:66:e9:
d2:4f:a8:fb:47:84:40:13:9c:18:e6:b1:21:1c:b4:
86:5b:c1:93:8f:93:5e:ca:26:b8:99:f6:db:fa:bc:
d4:72:5d:c7:0e:18:e4:76:5f:eb:8b:e8:90:1b:d9:
e9:21:22:e9:3f:f1:7c:29:a2:63:81:15:ce:fd:10:
4f:d2:26:33:2d:90:25:dd:f8:26:e6:15:96:0b:58:
1b:97:b2:8c:81:0c:e3:f6:4f:0d:4b:77:af:a3:69:
01:8a:3b:e0:37:7f:4a:a1:9c:0f:9c:53:94:b2:7f:
05:ce:31:0a:a9:d4:48:f1:04:82:1f:76:57:c6:7f:
73:d6:02:08:99:a1:28:3f:45:de:07:12:5b:43:c1:
07:fa:62:8f:12:76:91:61:23:d7:1b:84:f0:fc:4a:
e6:16:f6:08:e9:46:dc:1f:cc:5c:f2:e2:fc:5e:f3:
72:81:94:b4:35:40:f7:8a:c6:7f:f4:34:85:46:d9:
2b:21:50:24:55:f1:b6:05:af:a9:ce:b4:04:1d:87:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:FC:86:7A:11:B7:96:1D:53:38:B3:EC:82:D6:4D:CC:EB:19:66
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/MYn8hnoRt5YdUziz7ILWTczrGWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.128.0-31.131.139.255
Signature Algorithm: sha256WithRSAEncryption
bc:f6:c5:4d:4a:a7:d8:f7:6a:06:5c:55:4b:6c:ba:23:96:72:
2a:de:72:52:38:71:e2:af:73:3d:44:aa:a4:14:1f:61:14:99:
30:6b:ad:c1:a5:7d:2e:90:d7:62:b6:7f:71:7e:b5:83:48:df:
57:2d:bc:53:08:fb:9a:76:b7:ee:cc:f6:48:ef:53:7c:d9:06:
9b:70:c5:2e:f5:0d:72:59:ce:a1:f6:df:0e:45:98:d4:13:29:
cb:59:2a:a2:c9:34:32:43:65:f8:59:75:32:42:29:05:9d:0e:
3e:5a:f4:42:29:ab:fd:a7:23:12:67:18:e9:58:59:70:2b:91:
5a:35:2f:0c:8e:7c:20:4f:c1:8b:b9:74:cd:37:d7:0a:0e:9d:
d1:38:ed:b8:73:7f:8a:89:78:0a:9d:ab:09:06:00:ff:09:b4:
e4:6f:27:a2:9e:a1:94:d4:6b:ec:d0:b7:0f:a3:f0:d6:61:7e:
62:a8:d0:b0:b5:d3:a2:ef:c8:2f:2f:cd:75:50:21:17:6d:a7:
3b:ed:39:ca:85:8b:15:6e:ab:8a:46:af:05:be:96:12:31:f1:
94:e0:99:bc:b6:e3:19:0b:ea:2f:de:ca:f7:d5:bc:3a:35:7c:
0a:f0:04:d7:8c:62:df:70:98:76:68:90:bf:34:3c:28:c7:b3:
45:63:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:24 2025 by rpki-client