Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/J1AC1Sas0IDGLMH7AR2IPC39JsA.roa
File: J1AC1Sas0IDGLMH7AR2IPC39JsA.roa (raw, json)
Hash identifier: dytlPdfYrccWlEIcylbopWXgJ1/PQi+6+aUYhQ6id10=
Subject key identifier: 27:50:02:D5:26:AC:D0:80:C6:2C:C1:FB:01:1D:88:3C:2D:FD:26:C0
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 018CCA9997D5FB25D33A110AE9938BFE1E4D
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/J1AC1Sas0IDGLMH7AR2IPC39JsA.roa
Signing time: Tue 02 Jan 2024 14:35:12 +0000
ROA not before: Tue 02 Jan 2024 14:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5484
IP address blocks: 31.40.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 19:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:97:d5:fb:25:d3:3a:11:0a:e9:93:8b:fe:1e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jan 2 14:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=275002d526acd080c62cc1fb011d883c2dfd26c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:77:65:2e:ed:9f:5b:bf:33:3b:94:3a:6a:
81:26:fc:1b:6c:d3:28:b5:0c:d6:5d:9e:12:76:11:
c2:1d:72:14:49:4a:b0:49:c7:56:68:78:66:ca:cb:
a9:5e:cd:ef:f6:ef:7a:ba:47:72:3c:49:4f:52:f7:
b2:be:06:79:e0:f5:2d:7c:4d:dd:06:29:fb:70:94:
5d:fd:5c:21:96:87:60:73:12:e2:b3:68:f4:08:73:
47:49:f5:be:68:b0:a3:7b:54:25:a5:aa:20:9a:83:
97:f7:02:d5:56:e8:8d:6a:58:1b:52:e6:9f:9c:7f:
5e:7a:b0:b7:47:62:b1:9d:36:ba:0f:51:7a:b0:f8:
b2:77:13:3a:4e:30:96:44:db:8e:05:30:27:d4:e8:
64:2c:6b:ae:52:ee:23:b3:a4:71:3f:c0:91:d8:88:
2e:07:58:98:f8:ff:a2:c0:9b:b9:c5:f4:2a:e4:f7:
03:7d:db:4f:0c:90:03:32:7b:25:70:8d:3a:47:eb:
fe:14:0a:75:a5:45:2b:15:56:c8:3a:a0:e1:cf:df:
54:03:f0:aa:36:98:e7:1e:ae:bd:ea:94:42:b0:54:
21:44:f3:77:ab:ff:06:28:5a:46:20:df:23:6d:56:
ba:a7:90:8a:00:f9:96:b3:55:57:94:3d:a1:2e:0d:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:50:02:D5:26:AC:D0:80:C6:2C:C1:FB:01:1D:88:3C:2D:FD:26:C0
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/J1AC1Sas0IDGLMH7AR2IPC39JsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f3:73:97:05:3d:b2:de:5a:52:9a:8d:68:17:41:d4:5b:8f:
98:b9:0d:54:bb:65:21:f0:fe:41:7f:71:7e:42:08:3e:8d:9f:
dd:48:b8:a7:52:7c:ef:17:2f:82:42:36:08:ba:5a:7c:2e:63:
08:ef:17:dd:75:d8:a1:5a:33:b2:02:f2:8d:1c:71:4c:3b:b6:
d4:16:59:88:3b:72:31:62:c4:50:ff:f9:a8:d8:14:c1:c2:d8:
c1:ba:a8:14:4e:f0:ce:9c:7c:ca:eb:b6:83:ea:44:d3:ec:f0:
de:43:17:b8:0c:34:3a:f5:09:dc:25:e8:86:00:f7:75:04:ab:
f6:aa:2b:68:22:a3:b5:b0:bd:32:46:5b:88:97:42:2f:d0:4b:
32:96:62:ef:5f:61:8f:8b:5a:f1:91:dd:59:e5:cd:38:f8:0c:
e6:7f:99:19:5e:33:e5:7a:53:8a:06:ed:87:58:b9:26:0a:59:
e2:98:8f:84:05:f7:7f:a5:e6:30:70:f4:a8:cd:bc:89:88:57:
17:0f:f4:a8:65:51:99:65:81:bf:3b:79:e5:c9:1f:a0:67:89:
05:65:44:c8:8b:55:0f:d9:b2:9c:74:59:62:8d:e0:7f:b0:73:
3d:d8:d8:bc:84:0a:71:01:e8:dd:ff:dd:05:9c:a5:8f:09:c5:
5a:76:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:16 2025 by rpki-client