Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/T9ekcKt5TamKyQso_To84siOg9o.roa
File: T9ekcKt5TamKyQso_To84siOg9o.roa (raw, json)
Hash identifier: JB7TU5ePHgOYE6EAU+8ZSeytmNqVJbyqebYLn/KUqZo=
Subject key identifier: 4F:D7:A4:70:AB:79:4D:A9:8A:C9:0B:28:FD:3A:3C:E2:C8:8E:83:DA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01940A95D4B90CD5F188CB4742A75F25CE9B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/T9ekcKt5TamKyQso_To84siOg9o.roa
Signing time: Sat 28 Dec 2024 00:06:18 +0000
ROA not before: Sat 28 Dec 2024 00:06:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.46.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
212.68.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Dec 2024 01:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0a:95:d4:b9:0c:d5:f1:88:cb:47:42:a7:5f:25:ce:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 28 00:06:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd7a470ab794da98ac90b28fd3a3ce2c88e83da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:0c:36:c5:34:96:71:44:a5:49:bd:a1:82:
fc:e1:29:38:70:49:46:a8:3b:d1:c7:87:0c:ec:a1:
53:a7:7e:68:86:1c:8a:b2:bf:d9:8f:7d:0c:b6:14:
63:48:af:ed:82:cc:b4:c9:98:c1:5e:0a:4e:b1:de:
d9:2b:7b:66:95:aa:67:51:dc:64:98:bc:66:df:5a:
ff:03:03:7e:51:2c:86:00:27:e6:57:cc:19:ec:49:
a3:12:3f:73:42:13:9b:aa:76:c6:01:4d:10:c2:17:
45:fd:bb:89:16:75:b1:4a:4f:06:95:d1:f3:c7:ae:
89:89:9b:99:b7:35:e8:5e:4f:c0:f7:3c:7f:b5:11:
56:a1:f3:2e:f6:36:ad:5d:45:52:06:4b:70:58:db:
b0:1a:08:63:1d:48:4c:42:c5:d0:d0:1e:6e:80:70:
04:8a:01:d1:79:c5:13:d9:8a:6a:e1:62:e6:e7:bc:
91:72:2e:ef:4c:c7:1d:28:b9:cf:a0:ae:e2:a1:47:
63:2a:0d:0a:4a:00:a1:15:c2:a8:76:08:de:29:dd:
ce:f2:98:ea:b1:df:1d:b8:c6:e5:fe:d5:57:d8:a2:
1c:c4:e9:a2:f9:6d:60:b1:fd:a4:8a:40:af:16:7f:
c9:03:05:4c:9a:7c:b5:48:1c:51:b7:c7:a9:61:f9:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D7:A4:70:AB:79:4D:A9:8A:C9:0B:28:FD:3A:3C:E2:C8:8E:83:DA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/T9ekcKt5TamKyQso_To84siOg9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.46.0/24
31.210.50.0/23
31.210.53.0-31.210.54.255
77.92.148.0/24
78.135.78.0/24
188.132.170.0/24
188.132.215.0/24
188.132.227.0-188.132.229.255
212.68.36.0/24
212.68.49.0/24
212.68.56.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e1:39:dd:4f:82:d4:ef:0e:dd:e8:fc:1d:02:51:54:60:84:
2d:65:d8:87:a8:d8:6d:c2:6e:61:74:31:02:1e:0f:0e:7b:0b:
c2:90:06:9d:ad:99:d8:d9:82:33:99:13:10:60:60:b3:a9:b2:
fc:a0:98:c8:3f:41:2b:97:52:69:85:88:95:3b:c8:92:35:e0:
74:92:f2:e8:c4:ea:fa:6f:30:11:7b:1f:81:a3:a8:69:37:94:
27:57:5a:9d:62:07:9a:c9:cb:f9:57:73:98:15:35:05:cb:18:
8d:b5:00:63:19:c3:8f:e3:c2:43:69:fc:0d:18:a5:c4:e2:06:
28:7a:94:3c:43:33:88:d7:8d:44:90:23:f0:34:da:1c:73:47:
62:66:f6:db:01:bf:d5:ab:95:0f:9d:57:72:2c:b7:d7:9a:63:
60:44:6d:9d:a2:04:39:75:7b:2a:75:af:ec:e9:c2:ef:c1:fc:
bb:ce:9f:bd:54:00:c4:68:f3:d0:59:64:f3:42:e3:de:d2:0a:
c4:11:27:32:af:bd:84:bc:c1:c0:96:14:c3:b2:36:dd:d5:be:
18:12:f0:4c:fc:ac:fa:7a:c6:6b:a0:33:4a:42:03:43:de:9b:
8a:38:57:d3:37:d7:a2:c9:eb:95:04:91:8f:45:1c:f7:39:6c:
d4:26:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:17:17 2025 by rpki-client