Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/L5pss4PDHNqcxomIciSlv9YmWvQ.roa
File: L5pss4PDHNqcxomIciSlv9YmWvQ.roa (raw, json)
Hash identifier: siZ19ZPM3iBwhxlyIL/JfMPMxZ3LW9oFw9+MzsKZhn4=
Subject key identifier: 2F:9A:6C:B3:83:C3:1C:DA:9C:C6:89:88:72:24:A5:BF:D6:26:5A:F4
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 0194244545F686445E6D8A7738D5E4371B53
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/L5pss4PDHNqcxomIciSlv9YmWvQ.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41344
IP address blocks: 31.185.8.0/22 maxlen: 22
31.185.8.0/24 maxlen: 24
31.185.9.0/24 maxlen: 24
31.185.10.0/24 maxlen: 24
31.185.11.0/24 maxlen: 24
31.185.12.0/24 maxlen: 24
31.185.13.0/24 maxlen: 24
31.185.14.0/24 maxlen: 24
31.185.15.0/24 maxlen: 24
89.249.224.0/22 maxlen: 22
89.249.226.0/24 maxlen: 24
89.249.228.0/22 maxlen: 22
89.249.231.0/24 maxlen: 24
89.249.232.0/22 maxlen: 22
89.249.232.0/24 maxlen: 24
89.249.233.0/24 maxlen: 24
89.249.235.0/24 maxlen: 24
89.249.236.0/24 maxlen: 24
89.249.237.0/24 maxlen: 24
89.249.238.0/24 maxlen: 24
185.124.176.0/22 maxlen: 22
185.124.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 07:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:45:f6:86:44:5e:6d:8a:77:38:d5:e4:37:1b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f9a6cb383c31cda9cc689887224a5bfd6265af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:55:d9:de:08:27:c4:2a:d9:08:2f:2b:f8:
68:33:43:67:e1:86:65:f3:b8:e3:7b:82:e6:6f:17:
7e:c2:c6:cd:cb:cb:4c:d0:28:42:b2:0b:82:19:3f:
4b:c0:93:e2:62:5d:64:75:0b:94:89:2c:b2:fa:1b:
33:92:e7:9b:75:ef:c2:12:4d:e5:6d:1c:e4:8f:bd:
18:ee:87:41:fa:f6:cf:46:c3:48:cf:4d:13:41:86:
8e:66:2a:e4:81:99:53:f0:09:25:a0:90:a9:64:00:
7c:66:00:00:df:3b:c9:b5:0c:d7:de:0c:da:69:fa:
8e:ad:9b:4e:fe:79:66:d5:67:2a:fd:77:f1:5b:e9:
fd:f8:0d:48:17:21:c0:0a:bb:2e:a1:ca:9b:ae:25:
53:41:68:b4:69:4a:61:e4:d2:c8:48:ba:9b:0f:39:
2a:10:2a:8d:0e:d7:d4:f6:f7:7e:1c:b0:8c:41:ba:
a0:11:d3:15:8f:d5:35:42:9d:99:d9:55:48:ca:06:
31:78:e5:dc:38:30:58:4f:0e:75:45:0e:00:4f:8f:
a2:15:9e:06:3a:08:6f:85:68:ff:51:1d:3b:6b:87:
f5:94:c0:3e:b3:b7:0d:c8:6c:1a:ad:22:d9:01:86:
08:7e:7f:b5:82:e8:a3:f1:4c:41:72:c4:87:f9:de:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9A:6C:B3:83:C3:1C:DA:9C:C6:89:88:72:24:A5:BF:D6:26:5A:F4
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/L5pss4PDHNqcxomIciSlv9YmWvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.8.0/21
89.249.224.0-89.249.238.255
185.124.176.0/22
Signature Algorithm: sha256WithRSAEncryption
65:4c:19:ef:24:4e:c3:5a:c9:5d:5f:14:f2:40:19:ad:08:b4:
60:d4:b2:59:61:2c:eb:91:c9:f4:4b:9c:be:39:ef:ec:b3:6d:
68:d9:a3:b8:e3:10:e8:08:89:b0:f9:ad:3e:11:32:3e:70:6f:
38:66:16:5c:b9:43:af:61:42:05:0c:a8:20:c4:8d:82:36:42:
b7:6f:de:df:e6:1e:70:5a:c2:f8:c6:2f:05:d8:fc:72:40:9d:
90:72:ff:35:90:c2:31:b8:15:a4:ab:18:19:eb:b1:6f:01:a1:
25:ab:c0:6d:73:71:5a:17:cf:14:cd:41:21:bc:e0:5f:6f:15:
6c:46:25:2e:1c:35:73:cf:90:90:36:0e:69:ec:41:f1:97:9e:
6f:0e:50:25:5a:79:96:5b:3e:76:5f:a5:00:2d:f2:2d:c8:75:
3c:48:f8:9b:4d:7d:f5:a2:03:d1:0c:dc:8d:9b:60:37:2e:51:
90:19:23:69:b0:56:c5:b9:f5:48:d9:f4:e5:0b:4d:1a:5d:53:
4d:55:d6:c3:12:ff:80:92:02:4f:b9:22:e5:2a:4e:71:4e:da:
81:2e:2e:30:bd:50:c5:96:49:1e:eb:7c:41:a8:10:be:8e:20:
66:bb:ed:52:51:24:68:fd:57:1c:c1:7e:18:c8:24:8a:32:7e:
f0:3f:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:09:20 2025 by rpki-client