Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/KWOYSUhAyo2IzqfglTA7aeQi2e0.roa
File: KWOYSUhAyo2IzqfglTA7aeQi2e0.roa (raw, json)
Hash identifier: PBoEzDnXJZ1LfS3estwaOc8ZOUowSyYC+UN+qAdHP1A=
Subject key identifier: 29:63:98:49:48:40:CA:8D:88:CE:A7:E0:95:30:3B:69:E4:22:D9:ED
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 019423D7009EFAF9AA06C4B5162BE722252C
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/KWOYSUhAyo2IzqfglTA7aeQi2e0.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52011
IP address blocks: 31.132.57.0/24 maxlen: 24
2a00:16d8:52::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Feb 2025 13:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:00:9e:fa:f9:aa:06:c4:b5:16:2b:e7:22:25:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=296398494840ca8d88cea7e095303b69e422d9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:0a:7e:e6:c8:f5:f7:af:74:56:b8:4b:a9:
66:e5:f8:94:38:22:43:92:c1:71:13:09:8d:fb:6b:
1e:31:18:a5:d0:bd:49:07:06:ba:7a:f3:b6:d2:fb:
9e:d7:05:3b:18:21:91:7a:d8:e5:42:95:86:5c:5e:
c8:87:9d:9b:05:df:39:3c:84:0b:f2:53:55:9f:96:
4c:95:a3:04:da:11:ee:1c:f9:73:fb:3c:94:42:1f:
f5:26:61:e0:fc:e6:e7:45:5f:0b:b0:e5:4a:59:2a:
53:eb:dd:2f:91:57:4e:c9:46:2d:af:2e:cb:71:26:
94:54:17:fa:b7:e3:28:3c:80:cf:94:39:96:38:20:
a4:f5:ab:cb:6b:4e:09:04:ad:7a:58:96:42:16:b6:
a0:62:1f:c9:4f:9e:9a:f2:a8:50:7a:43:7c:42:b8:
77:6e:6a:6f:a8:65:cf:70:18:0a:11:72:6d:27:2c:
7b:2f:9b:c8:74:a5:69:2b:6c:6a:18:4a:1e:92:9f:
d6:29:64:2b:c5:38:b0:06:6a:ee:43:8a:3a:db:e9:
63:ca:15:e9:b1:d2:ac:d5:65:19:41:56:14:e7:cd:
46:4e:86:3c:bb:ea:4c:b8:35:ea:fd:db:7f:8c:cc:
15:6a:e2:a6:a4:5b:c8:6d:70:30:46:36:ce:d3:15:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:63:98:49:48:40:CA:8D:88:CE:A7:E0:95:30:3B:69:E4:22:D9:ED
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/KWOYSUhAyo2IzqfglTA7aeQi2e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.57.0/24
IPv6:
2a00:16d8:52::/48
Signature Algorithm: sha256WithRSAEncryption
53:d9:ab:86:5a:cf:bb:7c:dc:e2:76:19:9d:bb:a5:4d:db:64:
8e:0e:5f:6c:68:fb:22:6c:3f:92:71:f4:9c:fd:72:78:4c:f9:
c2:54:22:8e:e6:76:06:c7:13:7e:4a:88:b7:a5:d1:91:f9:c3:
44:e2:02:c5:f6:3b:21:b9:5f:fd:e9:a1:12:b6:55:d0:ca:e8:
54:13:5b:03:11:af:c1:aa:dc:1a:94:17:77:a8:0e:4d:a8:6f:
99:28:8d:29:52:84:b0:ae:bd:3f:72:c1:2a:0f:10:e7:61:a7:
8a:25:cd:ae:46:cd:27:ff:07:d3:25:3e:60:e6:19:cf:27:d7:
0f:22:e7:a0:07:86:dd:2e:ff:31:5e:83:69:89:7a:58:86:e9:
1c:fd:e3:89:6b:4f:eb:42:8e:04:8d:41:8b:27:e9:c2:16:69:
2a:5b:2c:e4:c9:c5:e7:19:6b:8c:93:76:b8:7f:c4:43:b1:a1:
ab:4e:4e:d4:13:06:89:46:81:29:8c:ea:41:9f:3b:f1:df:df:
5e:41:ba:2a:fc:33:54:d6:76:ca:e9:96:8c:7c:01:95:8d:24:
4b:c3:e1:3f:b0:f7:a1:bb:07:d0:e4:c3:3f:bd:96:0e:eb:c7:
b7:97:97:18:13:17:e5:f2:5f:60:fc:30:d7:e8:3f:f5:d2:43:
4b:c5:e0:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQj1wCe+vmqBsS1FivnIiUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjkyNmY4YzYwM2FhYjc5Y2I0NmE4ODNiZjYzMjU2NGEz
ZmFhYmYwHhcNMjUwMTAxMjE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTYzOTg0OTQ4NDBjYThkODhjZWE3ZTA5NTMwM2I2OWU0MjJkOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44IKfubI9fevdFa4S6lm5fiUOCJD
ksFxEwmN+2seMRil0L1JBwa6evO20vue1wU7GCGRetjlQpWGXF7Ih52bBd85PIQL
8lNVn5ZMlaME2hHuHPlz+zyUQh/1JmHg/ObnRV8LsOVKWSpT690vkVdOyUYtry7L
cSaUVBf6t+MoPIDPlDmWOCCk9avLa04JBK16WJZCFragYh/JT56a8qhQekN8Qrh3
bmpvqGXPcBgKEXJtJyx7L5vIdKVpK2xqGEoekp/WKWQrxTiwBmruQ4o62+ljyhXp
sdKs1WUZQVYU581GToY8u+pMuDXq/dt/jMwVauKmpFvIbXAwRjbO0xV/EQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCljmElIQMqNiM6n4JUwO2nkItntMB8GA1UdIwQY
MBaAFO25JvjGA6q3nLRqiDv2MlZKP6q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2Mt
M2JkMTk3OGJmMmY2LzEvS1dPWVNVaEF5bzJJenFmZ2xUQTdhZVFpMmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2MtM2JkMTk3OGJmMmY2
LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAH4Q5MA8E
AgACMAkDBwAqABbYAFIwDQYJKoZIhvcNAQELBQADggEBAFPZq4Zaz7t83OJ2GZ27
pU3bZI4OX2xo+yJsP5Jx9Jz9cnhM+cJUIo7mdgbHE35KiLel0ZH5w0TiAsX2OyG5
X/3poRK2VdDK6FQTWwMRr8Gq3BqUF3eoDk2ob5kojSlShLCuvT9ywSoPEOdhp4ol
za5GzSf/B9MlPmDmGc8n1w8i56AHht0u/zFeg2mJeliG6Rz944lrT+tCjgSNQYsn
6cIWaSpbLOTJxecZa4yTdrh/xEOxoatOTtQTBolGgSmM6kGfO/Hf315Buir8M1TW
dsrplox8AZWNJEvD4T+w96G7B9Dkwz+9lg7rx7eXlxgTF+XyX2D8MNfoP/XSQ0vF
4AU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:26 2025 by rpki-client