Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0gUwTFg9US1n3HcKgfuxNqLcyfE.roa
File: 0gUwTFg9US1n3HcKgfuxNqLcyfE.roa (raw, json)
Hash identifier: 1Wl/aF87TqwtVYbUu4Pn4TEC46QTN619hsoVV/jTLyY=
Subject key identifier: D2:05:30:4C:58:3D:51:2D:67:DC:77:0A:81:FB:B1:36:A2:DC:C9:F1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E70793FFD467A1BC2CE741A4387B4926
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0gUwTFg9US1n3HcKgfuxNqLcyfE.roa
Signing time: Sat 08 Feb 2025 19:27:00 +0000
ROA not before: Sat 08 Feb 2025 19:27:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214240
IP address blocks: 31.57.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 18:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e7:07:93:ff:d4:67:a1:bc:2c:e7:41:a4:38:7b:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 8 19:27:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d205304c583d512d67dc770a81fbb136a2dcc9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:7e:92:f0:46:a4:10:85:61:69:06:3c:b7:
dc:68:c1:98:e9:19:00:86:94:6c:cb:b3:06:3e:3f:
ed:04:ea:7c:55:cd:12:db:d2:ac:9d:a4:24:92:18:
c1:3f:97:98:6e:26:e8:0c:6b:f2:1b:07:51:cc:c2:
ce:48:56:37:64:d9:31:d2:96:ac:4c:da:d3:72:a2:
9d:78:97:7d:03:c4:3f:f0:ee:c1:0e:58:62:fc:49:
b3:8b:c1:20:34:b5:b9:60:c6:90:7f:eb:93:04:0c:
92:34:5d:8b:bd:d8:03:4d:4f:96:4f:48:b7:46:d6:
36:0b:0b:7d:b4:0b:32:b8:8e:f0:fe:cb:0c:d1:2a:
a2:bd:f0:72:95:b2:e8:68:6e:e6:71:b1:16:3c:75:
cf:24:fd:84:36:ad:ae:ed:2d:d1:6d:eb:7d:2a:ea:
3d:81:18:88:1d:b2:52:4e:7e:0a:7e:d7:11:9e:aa:
b8:23:02:19:1b:41:d3:06:b2:0a:95:ff:00:e4:8b:
a1:d3:4d:f2:d8:2b:73:8c:f9:13:be:08:c8:5d:66:
d3:7e:aa:cf:52:a7:46:ed:88:c9:7d:d1:36:a4:6e:
fb:56:32:aa:24:a6:33:5b:72:fc:57:60:65:66:d4:
47:bf:7b:45:02:95:24:bb:cc:91:cd:27:c3:11:59:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:30:4C:58:3D:51:2D:67:DC:77:0A:81:FB:B1:36:A2:DC:C9:F1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0gUwTFg9US1n3HcKgfuxNqLcyfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:7c:6c:27:0f:24:82:05:2e:df:34:f3:42:1a:52:49:9f:8f:
c7:d9:45:83:bb:09:c9:09:c6:9e:6a:f2:8c:40:c7:c1:23:01:
0b:ec:c0:91:69:b4:80:06:e4:a0:47:b0:09:8e:cd:7a:eb:1e:
91:74:c6:0c:9a:34:8f:fb:5e:ee:05:9a:4f:d5:d6:67:a2:25:
89:45:35:dd:29:94:71:ef:3b:a1:be:aa:c4:a4:86:b7:2d:2e:
7a:d3:91:42:2c:51:95:2a:10:55:d7:33:01:69:b2:00:30:01:
f7:65:43:db:9e:10:1c:d4:25:d6:f3:1b:fd:05:eb:1d:30:45:
76:e1:9a:de:81:07:c3:fa:23:5b:1e:f9:dd:47:35:68:2f:af:
30:cb:31:df:fd:76:0d:71:46:05:ba:bc:40:3b:a5:82:ba:6c:
1c:53:87:30:bd:96:2a:58:b5:08:4a:9a:77:c8:63:02:cc:1d:
32:2f:c7:f2:4d:16:59:db:1c:13:68:02:e0:2e:69:cc:ee:47:
15:2d:70:61:b3:77:7e:69:ff:e3:fc:03:8d:86:bc:db:cd:da:
01:b1:58:91:7a:14:f0:56:6d:e7:fb:f1:fb:28:1e:26:d4:33:
6a:2d:3f:73:ea:8b:24:96:e8:c5:1c:7b:df:93:d8:89:ce:ce:
1b:60:f9:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTnB5P/1GehvCznQaQ4e0kmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjA4MTkyNzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjA1MzA0YzU4M2Q1MTJkNjdkYzc3MGE4MWZiYjEzNmEyZGNjOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kt+kvBGpBCFYWkGPLfcaMGY6RkA
hpRsy7MGPj/tBOp8Vc0S29KsnaQkkhjBP5eYbiboDGvyGwdRzMLOSFY3ZNkx0pas
TNrTcqKdeJd9A8Q/8O7BDlhi/Emzi8EgNLW5YMaQf+uTBAySNF2LvdgDTU+WT0i3
RtY2Cwt9tAsyuI7w/ssM0SqivfBylbLoaG7mcbEWPHXPJP2ENq2u7S3Rbet9Kuo9
gRiIHbJSTn4KftcRnqq4IwIZG0HTBrIKlf8A5Iuh003y2CtzjPkTvgjIXWbTfqrP
UqdG7YjJfdE2pG77VjKqJKYzW3L8V2BlZtRHv3tFApUku8yRzSfDEVnC/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNIFMExYPVEtZ9x3CoH7sTai3MnxMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMGdVd1RGZzlVUzFuM0hjS2dmdXhOcUxjeWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzn0MA0G
CSqGSIb3DQEBCwUAA4IBAQANfGwnDySCBS7fNPNCGlJJn4/H2UWDuwnJCcaeavKM
QMfBIwEL7MCRabSABuSgR7AJjs166x6RdMYMmjSP+17uBZpP1dZnoiWJRTXdKZRx
7zuhvqrEpIa3LS5605FCLFGVKhBV1zMBabIAMAH3ZUPbnhAc1CXW8xv9BesdMEV2
4ZregQfD+iNbHvndRzVoL68wyzHf/XYNcUYFurxAO6WCumwcU4cwvZYqWLUISpp3
yGMCzB0yL8fyTRZZ2xwTaALgLmnM7kcVLXBhs3d+af/j/AONhrzbzdoBsViRehTw
Vm3n+/H7KB4m1DNqLT9z6osklujFHHvfk9iJzs4bYPmB
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:06:58 2025 by rpki-client