Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/39wK8KQBhnwF2xFupsuvsAQBui8.roa
File: 39wK8KQBhnwF2xFupsuvsAQBui8.roa (raw, json)
Hash identifier: IIG0AccqmwtOiMOWvr6ozVfo5UqnSWfeUUmUONTfV1s=
Subject key identifier: DF:DC:0A:F0:A4:01:86:7C:05:DB:11:6E:A6:CB:AF:B0:04:01:BA:2F
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 018CCA2A106BF193941A959FAEC428511A61
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/39wK8KQBhnwF2xFupsuvsAQBui8.roa
Signing time: Tue 02 Jan 2024 12:33:23 +0000
ROA not before: Tue 02 Jan 2024 12:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212961
IP address blocks: 194.180.144.0/22 maxlen: 22
194.180.148.0/23 maxlen: 23
31.216.132.0/22 maxlen: 22
2a0c:abc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:10:6b:f1:93:94:1a:95:9f:ae:c4:28:51:1a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jan 2 12:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfdc0af0a401867c05db116ea6cbafb00401ba2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:5b:1b:cf:1a:90:ab:e2:f1:5e:f3:d1:d5:
36:fa:d8:dd:4a:80:38:f1:e6:d9:a0:cc:25:d4:87:
18:5d:29:23:d3:c3:fe:6d:c3:41:ae:4d:37:65:05:
29:64:b8:95:db:28:bf:c2:2c:17:c5:33:65:bb:b1:
6e:fc:16:2c:56:9d:03:44:42:f2:de:a1:82:5a:c8:
66:25:7c:5f:28:0d:e3:a0:7d:d6:29:b6:37:1c:6b:
bd:8d:8d:01:9e:2d:b1:af:ab:bc:e1:1c:c2:bb:f6:
55:ec:9a:38:6c:38:2b:aa:cc:70:c0:60:a4:e1:6e:
eb:20:4c:b9:76:bf:fe:73:09:cc:fc:15:cb:a2:6a:
24:53:d3:a7:3d:91:11:ae:9f:b3:96:74:72:70:3d:
98:68:4a:03:05:47:73:51:01:62:bf:f3:b0:f5:8c:
7c:1b:04:7d:b7:89:fa:e8:4c:8c:9d:c5:19:0f:d5:
d8:fa:f2:19:c4:46:58:fe:95:dc:be:43:48:ec:e5:
55:85:8f:a5:e9:b6:7c:38:42:b1:9f:07:27:ee:94:
e6:f8:b9:a5:76:fc:d8:68:2a:2f:da:04:45:8f:dd:
c7:68:83:27:d2:00:0e:62:5f:31:5a:c2:2a:7b:69:
e8:dc:47:4e:ed:fa:64:d7:98:37:12:e0:12:a0:1e:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DC:0A:F0:A4:01:86:7C:05:DB:11:6E:A6:CB:AF:B0:04:01:BA:2F
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/39wK8KQBhnwF2xFupsuvsAQBui8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.132.0/22
194.180.144.0-194.180.149.255
IPv6:
2a0c:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
26:0c:96:8c:00:86:e9:fa:d7:34:26:f9:d4:c6:f5:41:a3:29:
8e:94:c8:7e:20:6d:56:57:64:22:a2:8b:1b:c8:c4:58:30:8c:
4b:41:21:1b:2b:14:51:a0:23:e0:86:d9:84:de:08:6e:48:b8:
63:23:31:20:40:6d:9b:77:42:f9:ec:27:0f:b0:12:d5:ba:e5:
a1:32:f1:d8:55:c9:a2:0a:8e:d1:41:59:fe:d5:9b:65:06:68:
7a:8f:c2:9f:6b:46:87:87:37:d2:59:69:8f:7b:4e:a4:ea:43:
02:37:b7:a4:3e:c1:30:0e:92:14:ef:34:60:5e:e3:27:dd:c4:
b7:b8:d4:6c:52:dd:5d:e6:17:60:f4:1a:b0:02:de:c5:5d:db:
38:f7:46:b5:d8:ef:96:05:7a:15:57:dd:65:89:b9:73:88:d7:
21:29:e2:a4:69:3e:8c:74:1f:d6:dc:20:fa:90:a0:bf:b8:63:
3f:a0:8f:01:cd:10:fa:1a:90:fd:83:95:e5:ec:e7:f4:19:fc:
a4:52:65:51:d5:4f:55:8c:bb:11:f6:fd:cd:0a:f2:8a:a3:9f:
b9:57:22:d3:96:37:75:0d:8e:ae:52:d2:61:79:3b:39:1c:de:
22:19:60:5e:56:06:e4:d8:79:a3:07:6a:e8:f2:93:5d:4b:f5:
fd:55:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:15 2025 by rpki-client