Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3Tb7ZshYLt8XPDWlZobHQ-marjE.roa
File: 3Tb7ZshYLt8XPDWlZobHQ-marjE.roa (raw, json)
Hash identifier: M7FqcJZYBTt6WXbz9lKqn4F5lIHuudTqDSQ/L3HcxaI=
Subject key identifier: DD:36:FB:66:C8:58:2E:DF:17:3C:35:A5:66:86:C7:43:E9:9A:AE:31
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193EEBE78BBA4246EF49E19F23D43BB4607
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3Tb7ZshYLt8XPDWlZobHQ-marjE.roa
Signing time: Sun 22 Dec 2024 14:21:20 +0000
ROA not before: Sun 22 Dec 2024 14:21:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395092
IP address blocks: 31.58.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:be:78:bb:a4:24:6e:f4:9e:19:f2:3d:43:bb:46:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 22 14:21:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd36fb66c8582edf173c35a56686c743e99aae31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:e6:9e:5b:26:6c:31:6b:01:8d:37:4d:f1:
88:2b:c8:dc:e5:76:2b:86:cf:04:8d:22:9a:0e:e1:
19:ad:db:a7:ea:28:66:f8:2d:d1:58:3f:7b:88:f0:
48:ae:ce:bd:12:eb:e0:4c:57:da:01:2e:d8:78:c0:
14:53:94:07:c3:81:2a:02:d4:8f:08:97:03:d3:5e:
5b:38:d5:10:4a:18:1f:16:d4:ed:e2:29:08:1a:fb:
81:76:8a:46:45:3d:d7:90:c6:1f:27:29:c3:b9:c4:
41:c3:64:28:d3:db:48:40:4e:25:dc:c5:7d:08:5b:
15:1d:cc:44:92:82:97:57:db:b1:e4:03:2d:30:23:
2b:27:0c:75:39:96:42:cb:fd:62:f3:6b:0f:61:27:
04:bb:e1:45:7e:99:a5:b0:c2:e7:3d:05:aa:f2:60:
10:b5:08:a6:86:6e:41:16:c0:47:6c:71:27:1d:83:
be:25:7b:eb:09:81:ae:01:44:47:2e:d6:d9:00:b9:
10:7b:32:43:77:29:e3:d1:cf:b5:b5:e6:f5:3f:62:
04:06:2b:8e:23:f7:3f:82:63:26:0d:ff:ed:21:89:
bb:e7:83:04:7e:fc:c4:2a:f4:c5:c4:1c:68:97:b9:
32:9d:da:6e:f5:43:f9:c7:9b:3f:14:d3:c4:8f:36:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:FB:66:C8:58:2E:DF:17:3C:35:A5:66:86:C7:43:E9:9A:AE:31
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3Tb7ZshYLt8XPDWlZobHQ-marjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.67.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0e:4e:fa:b3:54:4e:54:35:af:e6:08:1d:64:ab:96:8e:35:
b4:f3:18:0a:6a:61:a5:36:4b:28:3b:98:24:fc:ad:38:66:cc:
fb:91:61:4f:1d:59:d6:b6:f9:35:d3:e6:f8:9a:81:65:fe:3e:
c8:68:7e:cd:f4:5f:05:6c:2d:98:1d:a1:1b:a0:52:68:e4:7f:
89:9b:a1:84:3d:90:70:96:0e:fb:29:8d:77:c6:8b:7a:fb:d9:
b3:3c:81:25:6e:25:2a:b7:8e:1c:21:f5:24:7a:a7:e4:bc:1e:
d1:e0:fd:15:ee:36:55:62:c8:97:ff:68:fa:98:50:4c:3a:54:
2c:85:1f:b8:e0:2e:17:79:ec:83:9a:fc:ab:dc:14:52:81:a6:
f7:f1:17:20:a5:9d:a1:28:8d:a8:9d:cf:6b:96:63:2b:7b:75:
e8:68:bd:9a:09:4b:0c:64:fc:96:02:97:7f:5d:78:1a:f8:47:
b1:41:11:51:5f:c3:ef:08:ce:41:a5:61:0f:ed:1b:b5:7c:2b:
57:1d:ac:4d:06:90:82:28:b3:96:3c:d4:4d:78:dc:38:4d:b4:
09:7b:91:38:b4:71:12:b3:44:ea:02:fa:f3:8c:c2:64:5c:fc:
af:b8:12:aa:78:b6:c2:67:8a:07:87:57:63:c6:99:15:8f:0f:
68:c1:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:04 2025 by rpki-client