Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/FiplwliDj9IFqaxubyOH47PNHzI.roa
File: FiplwliDj9IFqaxubyOH47PNHzI.roa (raw, json)
Hash identifier: vsFAl5vfrL4Efd6/sucJnB8CL/6FIPUabbDv79LBuT8=
Subject key identifier: 16:2A:65:C2:58:83:8F:D2:05:A9:AC:6E:6F:23:87:E3:B3:CD:1F:32
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 019426D8CD22D0C4811848AF03D77865F54C
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/FiplwliDj9IFqaxubyOH47PNHzI.roa
Signing time: Thu 02 Jan 2025 11:48:49 +0000
ROA not before: Thu 02 Jan 2025 11:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200456
IP address blocks: 31.12.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 18:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:cd:22:d0:c4:81:18:48:af:03:d7:78:65:f5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Jan 2 11:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=162a65c258838fd205a9ac6e6f2387e3b3cd1f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:13:dc:36:53:a7:90:24:ca:21:67:93:ae:
71:69:ca:ab:28:21:b4:c5:85:8c:db:f4:ce:03:71:
e8:85:47:2f:3d:fd:a6:a1:53:c8:3e:25:94:82:30:
5e:36:6e:d3:46:49:ff:21:04:52:33:6a:5e:c1:ef:
02:ba:aa:10:66:13:e4:6c:99:73:c2:a8:0f:07:95:
a4:99:ab:e1:45:42:ac:d1:b3:27:3f:b7:7a:53:03:
ed:0e:e7:e5:01:4a:9e:6d:45:6d:ba:ec:ca:a6:90:
35:21:d8:a9:9f:11:97:71:68:7c:30:c3:67:ac:b2:
0e:43:c4:28:19:e9:34:30:c4:a4:23:47:67:eb:fa:
8b:f5:b3:fc:fb:3f:7f:84:3e:0e:14:e7:bb:5b:d9:
33:12:0c:9c:49:ad:85:50:9d:67:30:8f:9c:20:c9:
50:c6:09:63:dd:f2:03:cc:1d:51:5e:d1:ce:6a:71:
af:41:22:a0:d5:1b:5a:8e:8c:b1:2f:02:90:96:69:
7a:9d:15:6c:6f:51:8f:00:1b:c8:94:3c:a3:bd:f0:
23:8a:b6:6b:d8:a9:60:7d:29:d6:4e:f0:d3:ef:32:
e6:4e:80:45:eb:73:fb:bb:21:56:9f:40:44:54:b1:
28:92:f4:32:eb:11:f3:26:59:2c:64:2b:f1:30:11:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2A:65:C2:58:83:8F:D2:05:A9:AC:6E:6F:23:87:E3:B3:CD:1F:32
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/FiplwliDj9IFqaxubyOH47PNHzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.74.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3b:e5:9e:cc:c8:a5:0f:e2:4a:86:0d:8c:f9:c2:cf:34:d8:
01:5d:55:7b:27:e2:b1:bb:22:e3:10:42:ab:05:af:3b:57:c0:
02:f0:c4:94:a5:dd:7f:64:49:9f:60:bc:e2:e8:f4:dd:d3:57:
e4:51:bb:19:25:40:2e:f7:b8:80:b5:67:3f:30:3b:ed:27:4a:
78:00:3a:e3:00:18:2e:37:3d:17:27:24:6c:b1:3a:f1:f4:a4:
da:72:59:9d:bd:41:c6:4d:0c:dc:37:b3:c6:e4:ac:93:b7:ed:
dd:85:40:15:77:13:44:50:a0:67:6b:9b:0f:9f:54:7d:d4:0d:
3a:e1:5d:40:58:c6:cc:ee:32:15:d7:54:f0:a0:04:12:ab:3d:
49:e7:a6:82:56:14:55:a2:57:57:9e:d0:49:fe:56:dd:02:94:
d4:f8:b2:5b:3d:97:72:91:3c:6d:5d:03:0e:2d:40:2a:cf:cc:
40:8d:2f:80:3f:01:46:4a:02:c5:55:1f:53:55:85:1c:07:8d:
51:4e:d7:b8:2b:54:48:f8:af:1f:4c:bb:34:4f:ce:56:3c:70:
a5:3d:a3:2c:ed:6b:67:0a:13:86:20:1f:ad:f6:ff:c4:85:e1:
d1:7a:45:17:d5:65:b9:ea:4c:eb:67:f5:11:7f:38:fc:09:31:
c4:0c:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:22:55 2025 by rpki-client