Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0rLDi2mt_Sfzm14A-vDyYrifa6A.roa
File: 0rLDi2mt_Sfzm14A-vDyYrifa6A.roa (raw, json)
Hash identifier: MdLfX112+zkN3QMwildcAx/Uq2/6ZO/dtw3TRMvftO4=
Subject key identifier: D2:B2:C3:8B:69:AD:FD:27:F3:9B:5E:00:FA:F0:F2:62:B8:9F:6B:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194166FE40C4293D190C5044969BB029783
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0rLDi2mt_Sfzm14A-vDyYrifa6A.roa
Signing time: Mon 30 Dec 2024 07:20:19 +0000
ROA not before: Mon 30 Dec 2024 07:20:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216221
IP address blocks: 31.57.112.0/24 maxlen: 24
31.57.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 20:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:6f:e4:0c:42:93:d1:90:c5:04:49:69:bb:02:97:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 30 07:20:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2b2c38b69adfd27f39b5e00faf0f262b89f6ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:1e:15:5e:a4:a0:0f:50:2c:35:36:94:d8:
89:53:ba:c3:54:93:69:6d:eb:d7:bb:de:db:45:7c:
83:79:13:41:9a:cf:c6:9c:d7:11:4f:ec:a2:f5:d9:
f7:87:f3:22:a2:3a:8b:ce:98:98:be:3d:90:52:a9:
57:18:76:9c:73:b1:96:27:0c:c3:02:78:dc:82:4d:
fa:50:41:5f:e4:42:fb:4a:8f:b7:9b:0d:dc:a3:9c:
10:81:68:f8:7b:95:02:ba:11:8c:4a:e5:7a:6a:8f:
8f:3d:7c:79:57:4d:7d:cd:a5:30:09:b2:13:82:c2:
00:01:9b:4e:54:88:f6:18:29:c6:5b:65:f3:16:bc:
2c:27:36:dd:5c:bb:1c:50:0e:95:5b:77:13:56:f7:
eb:e7:5d:06:50:06:39:c8:de:49:6b:d9:ff:73:27:
e8:22:80:86:9b:18:53:76:47:26:e3:74:21:e5:08:
4d:c1:79:c4:64:0b:3e:41:04:ac:06:e3:67:33:b3:
6c:8a:ec:b9:eb:69:96:c8:28:92:53:22:31:14:ea:
4b:bc:72:ff:30:ab:ed:2a:bf:2e:25:8d:47:88:29:
6c:f3:13:ad:f9:f3:a1:59:31:96:27:8f:b5:04:e3:
57:09:5f:7a:5b:5f:e8:40:c6:91:8d:a6:cc:c3:d6:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:C3:8B:69:AD:FD:27:F3:9B:5E:00:FA:F0:F2:62:B8:9F:6B:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0rLDi2mt_Sfzm14A-vDyYrifa6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.112.0/24
31.57.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:12:f9:9f:66:70:09:e2:ea:b4:30:0f:14:a9:8e:41:08:f5:
5e:bb:e1:5e:9c:45:2b:e0:f8:ee:25:92:e8:ac:99:8a:ec:10:
14:7b:f6:e2:f0:f3:ad:57:d6:0d:8f:51:56:23:a3:61:c6:69:
0e:f3:a2:26:6f:0f:06:7d:eb:ac:b8:9f:56:dc:f2:b1:f6:b1:
33:0e:f1:2a:07:9d:8a:d2:9d:22:d9:8e:e2:85:54:5d:f5:2c:
8b:32:0a:8d:cb:3b:67:01:da:03:17:2b:6c:6f:bc:09:2b:50:
08:3a:3b:cb:7e:e4:67:14:26:05:75:98:31:ea:bb:a5:b1:18:
2f:eb:22:06:96:d4:7e:ee:56:09:86:cd:d8:64:53:bd:d9:b8:
cd:94:f4:6a:5a:31:bd:f6:0e:6c:b6:ba:d6:fc:5e:85:99:8e:
9c:08:ed:8f:1c:58:ae:9f:a1:dc:bd:e3:b2:67:03:3b:29:15:
aa:7f:09:51:a8:2e:0f:7b:5d:c4:7f:69:67:29:44:b9:a2:31:
b6:04:fb:90:36:bd:0b:94:64:c6:6f:75:c9:36:4c:63:b2:5d:
9e:ec:a9:c8:ae:e5:94:17:67:da:fd:40:c6:90:58:4b:7f:45:
e0:08:a8:6c:16:ca:d5:1f:57:9c:24:dd:84:b3:95:ab:ba:51:
95:8b:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:40 2025 by rpki-client