Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0-aAc0VwPkmpZkR5flNK0Asu4ZI.roa
File: 0-aAc0VwPkmpZkR5flNK0Asu4ZI.roa (raw, json)
Hash identifier: EQh2ACp0aEE23fEgMV3DRJuUAT6vC/6ZSDu1fxPPKQU=
Subject key identifier: D3:E6:80:73:45:70:3E:49:A9:66:44:79:7E:53:4A:D0:0B:2E:E1:92
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193CE4BEF2DBACFEEC9E57F17DA7DEA0BB0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0-aAc0VwPkmpZkR5flNK0Asu4ZI.roa
Signing time: Mon 16 Dec 2024 07:08:23 +0000
ROA not before: Mon 16 Dec 2024 07:08:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.58.147.0/24 maxlen: 24
31.59.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:4b:ef:2d:ba:cf:ee:c9:e5:7f:17:da:7d:ea:0b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 16 07:08:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3e6807345703e49a96644797e534ad00b2ee192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:44:a5:0d:7e:b6:55:68:5b:d3:6c:8b:24:
d8:6b:d9:9f:04:11:24:3e:b8:9f:2f:c8:c0:96:9b:
e1:3f:46:78:cd:f9:37:5f:f0:db:81:4a:a7:1f:4b:
7c:ce:17:8f:50:99:08:86:f9:ba:41:85:04:b2:9d:
be:01:ea:e5:8a:d4:fd:96:c4:2f:ab:75:f9:ce:38:
59:9b:23:cc:ac:0f:f5:fd:68:66:e4:a4:86:3d:78:
dc:9f:ec:db:de:ef:7a:98:30:79:0a:46:cf:d0:d6:
3a:84:f1:2a:d9:e8:44:be:f6:99:a1:0d:6d:2d:19:
c6:87:37:0c:a3:cd:9e:47:04:f6:8f:e7:ab:74:a9:
1c:54:1a:dd:74:80:15:34:b8:2e:7a:f0:90:76:ff:
77:19:95:b4:31:26:73:ea:71:ec:2b:e4:2e:20:1e:
70:49:85:1a:dd:d1:14:f3:34:1c:fc:9c:90:7a:dd:
e9:5b:b1:94:d6:3c:74:7c:a9:93:87:ab:ae:08:17:
f0:48:04:cb:d8:af:09:11:65:11:97:9f:c4:37:59:
f0:92:4a:88:15:29:fd:67:22:e0:95:73:85:0a:9c:
79:4c:43:e2:1a:e2:a4:68:66:97:1b:ca:71:fd:5e:
ef:62:06:95:3a:c7:36:16:7a:43:a9:79:24:01:92:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:80:73:45:70:3E:49:A9:66:44:79:7E:53:4A:D0:0B:2E:E1:92
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0-aAc0VwPkmpZkR5flNK0Asu4ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.58.147.0/24
31.59.107.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3f:8e:44:ae:f4:63:b1:30:45:19:88:6d:2b:cd:a7:a8:ee:
e5:cd:7a:d1:14:4d:41:8d:68:c2:9c:a2:a0:79:ee:1c:04:b0:
70:f9:37:04:d3:cd:02:93:25:11:ec:ca:95:39:07:e8:7e:80:
b0:1c:3e:9c:26:78:52:91:41:8c:a4:fe:e5:9b:66:80:63:07:
7c:83:ba:86:f7:aa:f4:b6:7b:16:9a:fe:16:2f:5b:1d:6a:99:
7d:b8:d4:92:87:85:39:b2:68:e7:b8:07:4d:eb:5f:03:64:94:
77:c9:79:83:41:4b:1d:aa:ba:b9:95:e3:2a:85:88:f1:f9:09:
8a:c7:f4:15:ce:35:14:83:32:28:3f:74:8c:47:ce:13:20:31:
6f:bc:51:96:2d:20:47:10:a9:9b:90:5f:d3:5a:4c:b7:5b:a5:
57:53:71:50:95:fe:cb:e3:da:10:9a:ac:01:0c:d9:66:06:f2:
4e:ce:49:22:4f:0f:41:3d:0e:70:1b:9d:17:da:bf:9b:cf:ec:
15:18:6a:88:72:5e:c2:9e:65:45:9a:46:6d:f4:04:0f:8f:81:
5f:c4:48:4c:f0:e2:9a:b0:8f:43:49:c8:10:85:2d:47:05:d4:
0e:86:f7:ac:c3:6b:b0:b1:c5:51:53:50:33:87:66:8b:b5:6c:
5b:54:78:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:16 2025 by rpki-client