Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/KxScvIZcdYao7T5aHmqkXgN1OVw.roa
File: KxScvIZcdYao7T5aHmqkXgN1OVw.roa (raw, json)
Hash identifier: sBf2CY+sFEs88YQxbL6KmJYzZqRte1Fvx6jwBOqO/iU=
Subject key identifier: 2B:14:9C:BC:86:5C:75:86:A8:ED:3E:5A:1E:6A:A4:5E:03:75:39:5C
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018EF9D2CEB896DDDE2EC00C77863565010E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/KxScvIZcdYao7T5aHmqkXgN1OVw.roa
Signing time: Sat 20 Apr 2024 04:45:26 +0000
ROA not before: Sat 20 Apr 2024 04:45:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215623
IP address blocks: 31.15.20.0/24 maxlen: 24
31.15.21.0/24 maxlen: 24
31.15.22.0/24 maxlen: 24
31.15.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 07:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f9:d2:ce:b8:96:dd:de:2e:c0:0c:77:86:35:65:01:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 20 04:45:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b149cbc865c7586a8ed3e5a1e6aa45e0375395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:15:b1:74:3b:77:29:eb:ae:e2:75:a2:9c:
ff:19:c9:d0:fb:05:a0:f4:b9:fe:34:6d:e5:ab:f8:
df:e1:54:68:5d:7d:a5:5d:29:e9:e8:f9:de:d1:89:
7a:9c:00:d6:3c:b9:fb:56:c2:0c:bd:28:2e:a1:e0:
36:9c:a9:d9:82:10:7f:2e:b0:f2:f8:ee:3c:4b:27:
10:00:f6:43:13:ea:83:ce:6b:de:f1:55:61:ea:59:
5c:a5:2c:4d:31:bc:ad:2c:5f:01:ec:42:83:29:9e:
5e:8e:26:b6:2b:7e:52:71:4a:81:0f:37:ca:79:52:
9a:da:2a:30:ef:bf:e7:70:1d:48:ec:9b:15:7e:4c:
88:5f:06:cf:68:af:a3:e7:9e:1b:ff:9a:23:e5:27:
1b:26:3f:12:7d:7d:24:65:d2:d3:b5:10:a6:2f:25:
02:77:90:8a:7b:a0:de:b8:aa:76:85:d7:78:aa:cc:
8e:e4:fd:db:53:2f:18:d9:6c:5c:45:72:52:08:fc:
37:90:b5:7c:a0:06:12:b4:8a:c5:57:20:e8:58:fb:
97:da:cb:dc:82:f7:04:8d:1f:fa:3e:46:f3:a5:5d:
66:6e:e3:3b:f4:e2:e1:81:02:af:11:63:5b:82:6b:
3c:57:c9:08:e3:5a:84:31:b6:72:1c:ae:09:e6:5f:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:9C:BC:86:5C:75:86:A8:ED:3E:5A:1E:6A:A4:5E:03:75:39:5C
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/KxScvIZcdYao7T5aHmqkXgN1OVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:c5:81:be:6a:27:cd:b8:41:14:c3:6d:b5:f7:c6:97:d4:2b:
b8:ed:a3:dd:78:a1:94:b2:89:50:a5:e2:7a:55:45:30:3c:e4:
81:69:b5:ec:bd:a5:83:fa:d4:d2:4f:f8:82:5c:5f:5f:26:cc:
22:89:7e:78:8b:9f:a6:7d:1b:e2:a8:4a:92:c4:5b:be:12:36:
2d:aa:c9:3a:6f:e0:f7:e7:76:58:4a:a0:ee:6d:89:a1:b9:a2:
2c:e5:5e:ff:b6:36:a6:f4:b5:f5:7a:c1:3e:66:04:99:d8:6c:
73:2f:6c:be:74:27:18:89:dd:43:fe:a7:e3:49:82:1a:bc:de:
b0:27:87:ea:f2:e9:21:93:6c:56:c0:3a:12:d6:6f:52:4c:f8:
c8:2a:6c:22:fe:3c:71:b4:67:f0:1f:f2:76:7d:c5:8e:36:89:
f0:92:0b:3d:89:4b:f0:cb:da:dd:9f:d6:40:7d:3d:0d:34:a0:
fc:b6:22:91:0d:00:fa:6c:4e:97:b3:c6:68:c5:53:d5:f4:a4:
da:9c:d4:f8:2c:8b:29:a0:ad:d6:42:9a:ce:37:36:ce:26:82:
f3:f5:b7:8c:c4:29:38:a9:39:77:e2:4a:a5:bf:1e:c4:44:85:
44:c5:0f:31:d6:10:c1:2a:af:13:24:f5:61:5b:3e:7e:43:0b:
d5:32:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:03 2025 by rpki-client