Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3VLvk544V7qUl_1mMxHsVueiUlY.roa
File: 3VLvk544V7qUl_1mMxHsVueiUlY.roa (raw, json)
Hash identifier: o9FmWyB35zD36ZMedcdvbBYl0DKLTKoYccHwSQS4xRo=
Subject key identifier: DD:52:EF:93:9E:38:57:BA:94:97:FD:66:33:11:EC:56:E7:A2:52:56
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193F42FFB2E63CFAA9C9CC4628791573180
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3VLvk544V7qUl_1mMxHsVueiUlY.roa
Signing time: Mon 23 Dec 2024 15:43:25 +0000
ROA not before: Mon 23 Dec 2024 15:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 31.56.4.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.58.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:2f:fb:2e:63:cf:aa:9c:9c:c4:62:87:91:57:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 23 15:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd52ef939e3857ba9497fd663311ec56e7a25256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:e0:19:91:7c:f8:51:aa:48:85:8d:5d:69:
17:5c:f6:a4:fa:e3:79:00:b4:4b:ac:28:bb:c0:27:
dc:37:d8:58:4d:ae:f8:fe:d2:dd:ac:dd:01:ea:57:
dd:7a:c4:0b:32:b6:73:fa:86:70:1b:72:bd:52:03:
4c:4a:e9:cb:b6:0c:4a:b2:03:ad:77:7c:ee:e4:2e:
37:19:a7:6a:1e:20:0e:96:74:33:26:4d:a2:b1:11:
e2:44:07:bd:ea:0f:20:ea:09:4b:48:11:c4:cc:11:
bd:94:b4:a6:aa:af:d5:70:0a:29:67:5b:43:07:94:
93:e8:7f:6d:9b:b0:a8:9d:cc:65:ab:bb:84:2f:52:
f6:d2:0c:c5:52:96:6e:43:3e:94:76:cb:b8:81:4c:
ee:ad:34:68:96:74:09:ad:fc:07:af:c5:5f:c8:88:
39:e1:9d:c1:9b:50:3d:87:e3:a8:79:47:b9:d4:d5:
68:a1:58:74:95:8b:da:c3:13:55:ba:a6:67:9b:36:
7e:60:4b:c9:13:ab:90:2a:f3:60:f0:20:c4:9c:c6:
d8:eb:b6:31:2c:a0:c1:c4:b4:7f:28:8c:44:22:78:
57:36:a1:49:4f:4e:18:db:27:bd:76:5d:0c:a5:8a:
c2:bb:cd:34:53:1d:7f:b9:99:c1:17:ee:69:a8:c0:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:EF:93:9E:38:57:BA:94:97:FD:66:33:11:EC:56:E7:A2:52:56
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3VLvk544V7qUl_1mMxHsVueiUlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/24
31.56.63.0/24
31.58.66.0/24
Signature Algorithm: sha256WithRSAEncryption
82:63:9d:1f:c4:46:96:57:02:c8:3a:e4:da:4f:03:da:74:44:
cf:4e:ed:58:18:a7:30:5f:be:5e:e4:8a:92:b2:25:32:64:16:
90:b5:38:75:07:5b:2e:84:f8:c1:5a:1f:5d:cb:74:c6:10:26:
0a:f2:16:b3:72:7d:80:24:9a:bc:dc:47:b2:65:ae:19:34:04:
35:8f:ca:17:08:49:57:dc:74:93:7d:37:46:46:e1:61:2f:5d:
28:94:7a:6e:82:af:9a:c2:32:46:0f:9f:5b:9d:1f:cb:04:6f:
8c:4d:ed:2f:e1:64:ca:8c:72:17:1a:b0:9b:4a:3a:77:51:67:
13:57:16:0a:9e:43:71:3d:58:34:6f:78:fb:0e:cd:44:97:e3:
d4:70:dd:2b:15:74:1c:54:bf:0b:dc:59:2c:5f:f5:73:d2:e7:
b1:82:a4:4a:3d:f8:ea:fe:19:d4:22:88:f3:77:c9:d6:c5:e1:
b1:2b:a5:17:ee:7d:d4:c1:97:f9:ec:97:d7:81:a4:b7:c8:0a:
14:e5:3c:00:62:74:02:6b:2e:8e:12:c8:19:a1:3a:c3:3b:3d:
1c:50:23:ce:1d:f7:51:68:f4:41:f3:58:c1:ab:47:37:f9:d0:
1e:51:54:06:8a:ae:41:e6:72:ab:d5:d6:da:92:4a:9e:ab:6f:
e1:00:a3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:52 2025 by rpki-client