Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/IFDYbQW6OnGtNOGu6HImtjqwg8c.roa
File: IFDYbQW6OnGtNOGu6HImtjqwg8c.roa (raw, json)
Hash identifier: DHHxS3V41hYtq1JNND3A5xh/C4AkQ4tWwCbVeeFbw5Y=
Subject key identifier: 20:50:D8:6D:05:BA:3A:71:AD:34:E1:AE:E8:72:26:B6:3A:B0:83:C7
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0195C441ED69311C226B44C38B29DD3E098F
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/IFDYbQW6OnGtNOGu6HImtjqwg8c.roa
Signing time: Sun 23 Mar 2025 18:26:49 +0000
ROA not before: Sun 23 Mar 2025 18:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 31.25.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 19:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c4:41:ed:69:31:1c:22:6b:44:c3:8b:29:dd:3e:09:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Mar 23 18:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2050d86d05ba3a71ad34e1aee87226b63ab083c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:07:61:d7:d5:ab:7c:36:48:88:6f:8d:78:
f5:cc:ed:4e:bc:10:64:49:c8:fd:f7:f6:4f:ad:87:
dc:61:03:3d:57:ac:2f:10:8a:24:3a:3c:d3:a1:18:
7d:a4:91:17:85:98:d6:39:cf:ae:30:5f:ab:6e:c8:
50:9b:f8:31:c2:06:6d:7a:75:aa:ab:1e:0b:d6:c1:
27:25:88:89:df:bb:a3:7f:02:b5:14:b3:d2:12:b4:
84:74:7a:99:e7:19:b4:7f:53:ec:c6:00:59:a6:9c:
22:2c:7c:25:77:d7:01:61:aa:a8:76:28:15:63:d2:
42:f1:b5:4b:07:c8:d6:0b:86:86:75:db:3d:50:f9:
ed:bf:2e:d6:59:81:90:b5:40:96:7b:b7:57:5d:09:
08:9e:09:3d:19:17:67:52:e2:e8:df:1c:57:44:3a:
5a:40:40:5a:95:84:23:94:6b:1c:21:7d:7d:d1:ac:
d7:75:cd:1f:90:c2:23:d5:16:d9:e5:8e:bd:91:1f:
ce:95:1c:46:e4:0a:fa:f9:5f:1e:a2:47:94:a8:87:
b4:6a:52:9b:77:80:a8:c2:7e:a3:12:1f:70:3c:d1:
a0:53:f6:a1:5b:91:45:88:36:37:35:04:78:f9:29:
cc:1a:66:0c:58:42:13:d9:0a:50:18:72:3a:b5:e1:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:D8:6D:05:BA:3A:71:AD:34:E1:AE:E8:72:26:B6:3A:B0:83:C7
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/IFDYbQW6OnGtNOGu6HImtjqwg8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.237.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bf:3c:87:1b:17:40:b6:e3:d3:eb:0e:ba:6e:5c:2f:2c:61:
3c:f5:db:9a:dc:cc:ab:7c:03:b6:d0:38:a7:60:90:e4:08:2f:
6b:a9:41:0e:0d:f3:b4:c5:7e:8b:49:3b:03:9a:0a:38:98:0c:
7f:8e:28:f4:37:b0:ef:01:b0:df:7c:bf:58:07:a9:33:39:cb:
96:ce:ca:77:f7:f9:86:83:d9:60:8f:dd:91:7f:49:13:45:d1:
17:bc:83:4a:2d:57:1b:e6:e9:42:6c:3e:4c:36:f1:c4:a2:be:
03:7e:7a:56:12:a6:18:69:ec:7f:22:cd:13:d7:ea:c9:d3:1b:
62:a1:02:bf:65:dc:44:67:69:9a:4e:9c:1c:83:4c:39:a9:51:
de:0b:0f:88:6a:b3:96:25:ef:ca:54:31:41:d0:b6:2c:82:a4:
69:83:3f:0d:40:28:75:f4:12:1e:70:fa:3a:9f:45:f7:2b:e2:
39:7c:b1:93:f9:81:47:5f:a2:66:ae:14:39:39:41:86:fb:f7:
53:6d:5c:43:81:6a:ac:45:35:39:9e:35:8e:f2:df:67:d2:2c:
d5:ca:bb:cf:b2:47:ab:ba:8e:03:d5:57:f6:b6:3e:a2:66:5c:
82:9a:5b:fc:9f:ef:e6:a8:5a:e7:4b:77:80:f9:86:be:11:19:
bc:a7:50:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:32:49 2025 by rpki-client