Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/31F1iDvJ6heoJG61j7-qXT4X_ek.roa
File: 31F1iDvJ6heoJG61j7-qXT4X_ek.roa (raw, json)
Hash identifier: 6x1BLEu4RB42jUB6rh6ivs+IoZz48ssU/7g7LEzZ5l0=
Subject key identifier: DF:51:75:88:3B:C9:EA:17:A8:24:6E:B5:8F:BF:AA:5D:3E:17:FD:E9
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 0195044B5C69C9E23DDDDF3C9990DCE68592
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/31F1iDvJ6heoJG61j7-qXT4X_ek.roa
Signing time: Fri 14 Feb 2025 11:50:02 +0000
ROA not before: Fri 14 Feb 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51857
IP address blocks: 185.232.212.0/24 maxlen: 24
2001:67c:390::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Feb 2025 10:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:4b:5c:69:c9:e2:3d:dd:df:3c:99:90:dc:e6:85:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Feb 14 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df5175883bc9ea17a8246eb58fbfaa5d3e17fde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:02:7e:3a:4b:4b:b9:12:5f:65:63:d4:81:
a6:ae:c2:32:52:6d:68:a1:4d:d6:0c:3d:26:b8:d7:
95:50:df:26:8b:ed:d8:e5:fd:05:f9:c0:aa:d0:9e:
b1:e2:17:8e:5e:e7:a3:d4:6c:11:ce:e1:c6:44:28:
d4:12:91:1c:67:b0:95:60:e3:30:f9:a4:87:6e:11:
81:4b:ec:f3:36:04:15:88:3f:a2:ca:5c:9f:0a:35:
e7:03:d6:0d:ab:64:cd:6e:76:11:50:2a:0e:a0:65:
8f:00:02:b5:c7:08:01:94:2e:70:bc:82:d4:06:cf:
81:34:dc:b4:d9:05:4f:68:49:3d:8a:19:2e:e4:b2:
5e:e6:f1:3e:93:1f:72:86:76:65:7c:c2:e7:c9:2d:
86:3f:db:1f:22:1e:e8:9d:1e:45:39:04:be:dc:a8:
a4:6d:3f:88:b9:6b:fe:da:ed:48:23:2e:0d:f7:ff:
1c:53:fa:85:ff:d0:dc:d7:43:d7:ea:34:18:3f:26:
3f:f0:de:ec:9b:2e:bf:4d:2d:2f:26:2f:4b:2b:ef:
81:49:35:dd:d1:c4:31:b8:8d:8a:3c:80:95:85:f1:
26:6d:3c:a7:95:f8:6d:4d:fb:21:a4:f3:4f:b6:b4:
b1:db:95:c5:33:f6:9b:08:af:e1:d4:ec:eb:22:50:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:51:75:88:3B:C9:EA:17:A8:24:6E:B5:8F:BF:AA:5D:3E:17:FD:E9
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/31F1iDvJ6heoJG61j7-qXT4X_ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.212.0/24
IPv6:
2001:67c:390::/48
Signature Algorithm: sha256WithRSAEncryption
97:2b:1f:7c:79:b9:63:9a:bc:cb:90:f3:51:12:81:fc:4f:d3:
f3:18:a2:25:05:ca:eb:63:c6:71:81:7f:7f:f7:0e:26:02:02:
ff:e3:61:d1:61:a3:14:d2:27:c6:93:bb:e2:81:78:8d:67:57:
83:13:1a:7a:a6:2b:c8:6e:7b:b9:86:79:7c:fe:2d:75:b1:ad:
6d:3c:85:2b:f9:df:08:46:eb:d5:2c:91:08:2a:96:14:84:f2:
89:9e:d1:5c:c0:66:ee:68:c3:f0:5b:7f:65:13:73:0b:78:aa:
76:9b:f6:23:b8:6e:5a:05:3d:c1:3e:0b:42:b4:d1:e3:90:7b:
1b:96:fe:a0:00:45:54:7b:d5:1a:96:87:a1:4e:9b:7b:5c:80:
06:17:19:3a:4e:59:8f:00:b8:a6:51:ba:81:75:83:0f:56:dd:
9e:18:e9:b1:f8:68:28:19:74:d1:7b:54:04:cb:35:de:5c:5b:
3a:1b:45:0a:2f:8a:a5:ce:72:22:75:58:11:ea:ab:bb:aa:4d:
88:db:29:3a:a3:f5:1b:6e:c8:04:df:de:cb:74:66:08:66:13:
ad:3c:8c:b1:93:5b:d1:b4:2c:ea:fe:43:bd:5d:30:9a:39:d4:
50:df:00:94:aa:f7:48:b9:fe:9d:33:d7:cf:74:7b:59:6a:af:
cb:1c:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:32:55 2025 by rpki-client