Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5CZvUmfhbOh-aX2NqgrUX1cFQao.roa
File: 5CZvUmfhbOh-aX2NqgrUX1cFQao.roa (raw, json)
Hash identifier: jz5PzlQe7uFbHpIFLMH052UPVl7EPKWruTleb+eDgEQ=
Subject key identifier: E4:26:6F:52:67:E1:6C:E8:7E:69:7D:8D:AA:0A:D4:5F:57:05:41:AA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282341EB39EFA0776FAEBBBF59B6E0C2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5CZvUmfhbOh-aX2NqgrUX1cFQao.roa
Signing time: Thu 02 Jan 2025 17:49:46 +0000
ROA not before: Thu 02 Jan 2025 17:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 31.59.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 14:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:41:eb:39:ef:a0:77:6f:ae:bb:bf:59:b6:e0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4266f5267e16ce87e697d8daa0ad45f570541aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:5f:97:af:06:92:3f:a2:61:59:90:70:7a:
9c:9c:cc:93:a7:c8:14:a9:1f:26:07:17:b0:38:b4:
c3:57:94:d4:9e:80:cd:2c:09:94:c2:7b:c3:b9:0b:
85:da:72:4e:5c:97:a8:19:4d:58:52:3b:08:08:eb:
92:ed:93:47:9c:a3:07:25:d7:9f:1d:a5:b9:79:01:
61:a7:8f:0e:45:7f:d0:ce:e3:5f:ea:c6:72:9d:62:
b4:ea:72:74:42:bb:48:6e:38:e5:5e:7a:09:ce:da:
5d:63:96:af:b3:84:88:3c:e2:c3:7d:2f:d1:7b:77:
6e:f1:67:96:fd:6b:df:39:09:8f:4b:f4:05:79:8d:
05:17:0f:e3:62:14:1f:2c:50:02:14:18:26:22:41:
ac:5d:ce:bb:49:cd:98:b0:3d:74:9a:f7:05:a6:69:
65:b0:4f:d0:6b:3e:62:1b:d7:ff:a2:db:85:18:32:
bf:53:dd:e7:75:46:66:11:70:ac:50:22:da:69:b0:
c7:5e:a0:98:f9:c7:77:e0:86:15:a4:0e:5d:1f:16:
b4:69:08:68:e1:8f:df:ce:14:39:3a:10:9d:e7:d7:
0c:8b:3b:97:1f:bc:96:d0:8e:e4:43:6d:98:ee:8d:
e4:ac:f9:e7:b5:a2:16:f2:61:1b:ef:95:a8:6f:81:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:26:6F:52:67:E1:6C:E8:7E:69:7D:8D:AA:0A:D4:5F:57:05:41:AA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5CZvUmfhbOh-aX2NqgrUX1cFQao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:74:bd:52:71:b5:21:26:3a:0f:69:1d:92:f3:a5:b3:ce:cd:
f3:b2:54:e8:34:80:b5:38:70:2c:5f:62:66:3d:bd:c1:3c:d5:
c6:99:10:c4:95:d1:e6:1b:42:26:0d:af:5a:d8:45:74:8c:95:
10:b8:46:8d:79:7c:76:0c:7b:74:83:7b:fb:ba:06:6b:7a:f0:
ef:09:46:95:b2:62:6f:36:e5:4e:0b:72:81:10:a9:df:aa:80:
91:1e:81:e7:9b:ca:63:1a:ff:b5:7f:9f:85:54:c7:bf:e7:40:
03:83:42:2e:68:3e:7b:88:a9:24:62:9c:61:2b:1d:95:81:44:
fc:ba:d9:57:34:8f:44:6a:a0:7f:d1:ee:65:8e:48:a0:c7:f6:
9e:b7:e6:d2:2f:68:75:7f:29:60:a7:2f:e2:76:bd:ce:04:45:
b3:1d:2d:3e:5e:38:52:d4:fc:63:6b:54:e4:92:52:21:2c:f5:
f2:59:69:48:c7:a6:73:bc:c4:e0:f3:05:e7:d9:17:a0:b7:80:
36:ef:8d:65:56:8d:56:11:07:5b:8c:2d:e1:2e:fb:8f:81:5a:
42:26:0f:01:33:48:f5:53:c7:19:94:b8:f2:8b:1c:71:30:7b:
ca:11:2e:ad:a2:a8:3b:bf:f0:10:bc:c3:eb:97:38:11:87:f1:
5d:5a:b0:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI0HrOe+gd2+uu79ZtuDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDI2NmY1MjY3ZTE2Y2U4N2U2OTdkOGRhYTBhZDQ1ZjU3MDU0MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPZfl68Gkj+iYVmQcHqcnMyTp8gU
qR8mBxewOLTDV5TUnoDNLAmUwnvDuQuF2nJOXJeoGU1YUjsICOuS7ZNHnKMHJdef
HaW5eQFhp48ORX/QzuNf6sZynWK06nJ0QrtIbjjlXnoJztpdY5avs4SIPOLDfS/R
e3du8WeW/WvfOQmPS/QFeY0FFw/jYhQfLFACFBgmIkGsXc67Sc2YsD10mvcFpmll
sE/Qaz5iG9f/otuFGDK/U93ndUZmEXCsUCLaabDHXqCY+cd34IYVpA5dHxa0aQho
4Y/fzhQ5OhCd59cMizuXH7yW0I7kQ22Y7o3krPnntaIW8mEb75Wob4E30wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQmb1Jn4Wzofml9jaoK1F9XBUGqMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNUNadlVtZmhiT2gtYVgyTnFnclVYMWNGUWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzsdMA0G
CSqGSIb3DQEBCwUAA4IBAQBedL1ScbUhJjoPaR2S86Wzzs3zslToNIC1OHAsX2Jm
Pb3BPNXGmRDEldHmG0ImDa9a2EV0jJUQuEaNeXx2DHt0g3v7ugZrevDvCUaVsmJv
NuVOC3KBEKnfqoCRHoHnm8pjGv+1f5+FVMe/50ADg0IuaD57iKkkYpxhKx2VgUT8
utlXNI9EaqB/0e5ljkigx/aet+bSL2h1fylgpy/idr3OBEWzHS0+XjhS1Pxja1Tk
klIhLPXyWWlIx6ZzvMTg8wXn2Regt4A2741lVo1WEQdbjC3hLvuPgVpCJg8BM0j1
U8cZlLjyixxxMHvKES6toqg7v/AQvMPrlzgRh/FdWrBR
-----END CERTIFICATE-----
Generated at Wed Feb 5 13:52:56 2025 by rpki-client