Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0e7VylTPi9vWF166uv-lx_CSm7M.roa
File: 0e7VylTPi9vWF166uv-lx_CSm7M.roa (raw, json)
Hash identifier: UXGRY5HbKOad+VW3C+Ks+GcynhpfCedP27w30oURN+g=
Subject key identifier: D1:EE:D5:CA:54:CF:8B:DB:D6:17:5E:BA:BA:FF:A5:C7:F0:92:9B:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192F115AA2DA2A83CB1E31A37D3A11ACAE9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0e7VylTPi9vWF166uv-lx_CSm7M.roa
Signing time: Sun 03 Nov 2024 08:13:01 +0000
ROA not before: Sun 03 Nov 2024 08:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215238
IP address blocks: 31.56.117.0/24 maxlen: 24
31.59.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:15:aa:2d:a2:a8:3c:b1:e3:1a:37:d3:a1:1a:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 08:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1eed5ca54cf8bdbd6175ebabaffa5c7f0929bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:21:e9:d6:32:c1:c0:31:4c:63:f6:32:e0:
46:58:75:af:58:8b:3f:0e:0a:50:7e:2a:e1:fa:63:
4a:bc:83:9f:49:6c:0f:2f:35:87:ef:ba:39:df:2a:
a4:3a:ac:6b:fe:7f:41:70:a5:87:18:1b:1a:c2:b2:
07:54:82:73:a9:6e:c3:f8:54:ee:b1:89:3e:19:e3:
fe:b0:32:be:89:3e:a9:85:c0:56:2d:bc:5b:f1:a1:
87:a8:65:c8:3f:ce:0d:1d:19:1c:14:df:8a:9e:f9:
73:c7:85:60:97:87:b8:d4:f1:3b:2a:fa:ed:ea:43:
08:ec:15:ee:5c:cc:75:ad:d8:66:d0:f7:f0:a9:45:
91:d9:9f:5c:ab:51:ea:1b:18:ab:a7:d8:fd:da:fc:
b4:4a:07:2b:53:45:6a:5e:8d:68:88:72:21:9d:09:
d8:87:71:f7:a2:1f:5d:31:95:23:9a:45:7a:a0:9b:
35:a2:9f:64:58:b3:d2:f5:fd:ba:45:d2:48:93:93:
2b:9e:24:b0:30:94:59:93:1a:88:fd:c0:b4:d4:48:
b6:e3:23:9a:84:e8:96:f2:76:ab:94:3c:9b:b7:00:
2f:67:95:f4:68:ce:91:4d:ba:ba:01:5c:45:1b:ce:
5f:b9:9b:bd:09:59:a7:c8:69:69:87:f3:6d:5d:9d:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:D5:CA:54:CF:8B:DB:D6:17:5E:BA:BA:FF:A5:C7:F0:92:9B:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0e7VylTPi9vWF166uv-lx_CSm7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.117.0/24
31.59.131.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e1:50:46:2e:3a:c2:5f:71:f1:3a:c0:2e:b5:34:ef:be:a8:
bd:3b:d6:42:ec:c3:99:8c:6b:ac:f5:25:4b:c1:a7:24:09:cc:
74:c6:c2:8f:e8:8f:2b:ec:4e:54:c1:b0:d9:93:ad:b4:b7:e4:
a4:44:e2:a4:49:c1:0d:e9:bd:9b:89:24:1a:38:10:88:1e:50:
e7:57:9e:19:6e:05:14:89:00:d8:b6:22:d7:d7:8f:7a:b3:14:
f9:ff:67:51:b0:4b:73:a4:b0:98:7c:d8:56:be:e6:37:82:b4:
45:d8:07:5c:f7:ab:ff:67:b6:30:ab:cb:7f:06:fe:dc:91:78:
ad:58:fd:e6:bf:53:05:da:5f:04:e8:6c:a0:41:e1:18:11:17:
93:21:67:9f:d7:f6:11:35:e3:34:4c:74:ce:b0:b6:af:c6:1f:
6d:60:0a:61:80:00:ba:2b:8b:df:68:0c:cb:af:44:46:b9:35:
2c:3e:ec:c3:ac:bb:f3:d8:f6:28:88:73:7e:b3:47:53:72:2e:
09:0e:e3:fd:53:98:df:30:31:e4:5f:a8:02:0b:72:b6:c9:38:
ea:d0:a7:a3:5c:5c:60:0e:c1:74:e3:5f:36:62:ba:aa:8a:f0:
36:87:10:4e:c1:88:e0:44:8e:a8:64:92:39:86:90:da:e2:c6:
9d:45:c2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:42 2025 by rpki-client