Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/lqWaYZMO8bn117dxvUUfZ2OUiRM.roa
File: lqWaYZMO8bn117dxvUUfZ2OUiRM.roa (raw, json)
Hash identifier: UkkyIIM6CX81gLSVWlRJwchUhh3URsfoSs5onJtZF+s=
Subject key identifier: 96:A5:9A:61:93:0E:F1:B9:F5:D7:B7:71:BD:45:1F:67:63:94:89:13
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 018CC50132BABB4590D49EA1558192328FAD
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/lqWaYZMO8bn117dxvUUfZ2OUiRM.roa
Signing time: Mon 01 Jan 2024 12:30:39 +0000
ROA not before: Mon 01 Jan 2024 12:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35625
IP address blocks: 31.172.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:32:ba:bb:45:90:d4:9e:a1:55:81:92:32:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Jan 1 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96a59a61930ef1b9f5d7b771bd451f6763948913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:39:b4:df:18:87:88:67:e8:d1:b5:db:bb:
2c:d0:6d:58:b1:25:d6:ae:fd:5d:96:78:f8:2f:83:
f7:93:e0:c9:f5:9a:a6:16:30:61:85:18:2d:0a:ac:
e9:9f:98:6a:fd:81:92:56:6d:bb:77:57:c2:01:de:
45:67:fa:c3:2a:f1:ab:ab:68:7c:62:a7:8e:22:0b:
c6:db:fe:50:35:ea:a8:37:ce:a7:f6:4a:f7:ff:6b:
14:79:e5:6f:30:83:0b:d6:be:d6:c2:cb:59:d3:b2:
24:e7:90:28:35:2a:12:0d:dc:b9:20:68:68:ee:58:
70:c4:cc:4d:2d:5f:d8:73:56:4c:f4:56:d1:d6:95:
b1:b0:35:05:8b:2c:80:13:76:e6:20:2e:6d:4a:c7:
3b:46:06:f9:72:da:e6:a0:84:bd:76:77:e5:9d:61:
4b:41:24:cb:c9:46:d1:4b:fe:fc:16:5f:d0:a0:13:
0a:e5:60:87:b9:6d:25:96:ed:1f:d3:3f:19:ba:9b:
8e:3e:5d:f0:56:30:e0:65:4f:3c:07:66:5c:02:ef:
a1:59:cf:b6:c8:06:82:68:fd:1c:f4:88:2d:d1:8d:
7b:fb:5e:cc:27:cb:17:e0:d6:81:f4:4e:7e:ec:95:
c6:d8:99:f2:4c:6d:19:88:1e:f8:22:a4:bb:6b:86:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:9A:61:93:0E:F1:B9:F5:D7:B7:71:BD:45:1F:67:63:94:89:13
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/lqWaYZMO8bn117dxvUUfZ2OUiRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:50:82:74:6b:e6:92:63:96:ad:e9:b1:43:6c:db:7d:fb:5a:
77:2e:25:6b:2a:b5:74:9b:4a:2c:59:d6:07:80:60:63:2b:f2:
e4:7f:50:9d:b5:9c:be:11:17:5c:f6:3f:d1:82:69:a7:e9:de:
3b:bb:70:e9:7e:68:38:88:ad:70:66:81:38:63:00:81:be:c3:
2d:19:eb:25:cb:e5:bd:13:ee:b8:3b:13:ef:8d:6e:9c:14:5c:
be:f6:c6:d9:0f:8e:9d:47:2a:75:20:53:3b:9e:c1:47:c2:16:
6d:c2:f4:ec:2c:a5:4f:9f:c9:e7:6d:fb:0e:94:da:21:b1:a6:
d5:1b:c5:48:d1:fd:81:0b:f2:2a:ea:fd:09:05:5c:5a:d1:cb:
98:e7:b9:7a:02:f0:a0:75:a3:ee:79:17:40:89:15:73:3d:43:
f5:f1:76:9b:d2:5c:7f:5b:cd:eb:30:33:99:11:1a:3a:e0:30:
ab:10:2e:45:d1:14:38:7e:8d:0e:07:31:97:93:fc:5e:ef:1c:
33:a6:66:82:e7:5b:86:b9:35:0e:ab:c3:c0:2e:55:8a:ee:15:
7e:94:1f:a2:a0:b5:db:84:bf:d3:69:21:21:90:89:40:08:a7:
6e:3e:d8:f8:f2:e8:ee:08:5d:87:3c:b6:f7:90:c0:22:ee:8b:
f2:da:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:08:58 2025 by rpki-client