Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6kfMdUsmN56atVE2nVDfy0dsaEY.roa
File: 6kfMdUsmN56atVE2nVDfy0dsaEY.roa (raw, json)
Hash identifier: snb4LcYgmDuQLRh57tOBhp98EjgrmOr5EwssyA9bhAM=
Subject key identifier: EA:47:CC:75:4B:26:37:9E:9A:B5:51:36:9D:50:DF:CB:47:6C:68:46
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193C640E8DD1CEDE3454C7A7F7E9C7EFD4F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6kfMdUsmN56atVE2nVDfy0dsaEY.roa
Signing time: Sat 14 Dec 2024 17:39:22 +0000
ROA not before: Sat 14 Dec 2024 17:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 31.57.67.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Dec 2024 20:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:40:e8:dd:1c:ed:e3:45:4c:7a:7f:7e:9c:7e:fd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 14 17:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea47cc754b26379e9ab551369d50dfcb476c6846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:58:17:6a:33:b2:62:aa:a0:69:7a:a3:3b:
a1:a3:15:bd:fa:78:95:ce:e2:29:d8:88:56:54:69:
ee:2a:ee:b2:75:c0:e2:38:c2:f0:a0:5e:81:7d:1a:
9b:bd:43:7c:65:12:a1:68:aa:30:af:e2:6f:cc:96:
c2:a5:40:32:b3:e6:e7:19:b5:c3:88:3d:f0:fc:77:
96:08:44:cb:07:3d:ae:65:7b:b9:a5:fb:cb:fc:9a:
a3:5a:bd:48:b3:c4:bb:26:16:1c:2a:83:bb:88:82:
f0:df:fe:38:37:4c:c6:c7:10:bc:94:e2:71:03:b3:
31:17:aa:16:28:2e:d8:e1:3c:96:2d:81:62:af:d3:
4f:07:db:c8:73:3e:5f:b2:d8:00:84:ed:8e:3d:5d:
f8:84:37:68:c3:dc:bc:97:c6:b3:2b:04:35:f3:2d:
ae:5c:7e:e9:bc:b9:1c:33:6b:72:d6:0d:3e:6a:b0:
20:77:cc:e4:a4:04:02:d5:d6:b3:d3:a6:ac:eb:53:
96:a0:2b:18:af:b8:d8:bc:fa:de:53:53:17:16:32:
f7:c0:3f:43:fb:66:59:de:50:22:d6:ed:ad:25:c0:
5c:83:d2:53:ae:0c:d1:74:bc:48:2e:47:26:75:10:
a9:e6:47:b1:fc:92:a3:c1:e9:67:6d:17:06:32:77:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:CC:75:4B:26:37:9E:9A:B5:51:36:9D:50:DF:CB:47:6C:68:46
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6kfMdUsmN56atVE2nVDfy0dsaEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.67.0/24
31.58.49.0/24
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
11:88:6e:a2:87:6c:2f:0d:4a:4a:a8:0b:96:0e:ca:e8:3a:52:
8c:a6:75:52:b3:e7:d9:ff:d3:d2:c9:5d:4a:0b:8c:dd:1a:00:
93:a6:e8:90:34:b4:25:1a:ec:dd:14:8a:52:48:c3:89:6e:32:
a0:7f:19:4a:b4:f7:30:9f:21:c0:08:aa:8e:60:8a:a3:b8:48:
7a:3b:ff:18:5a:b4:0f:ae:74:47:01:95:e0:a6:70:42:96:c9:
79:8e:3a:f8:5d:1a:f8:5b:86:ad:f5:70:16:b6:a5:09:0a:62:
0b:9c:da:fe:a6:ec:04:60:4c:13:78:0c:e0:3b:dc:ac:63:74:
10:2e:bb:22:9a:8f:57:80:2a:d9:e1:2a:e2:68:0e:35:f6:62:
e5:cb:75:ff:18:1f:79:fc:ec:cf:22:5a:57:ee:a4:0c:43:45:
82:65:81:58:e2:86:79:90:52:ca:82:44:79:17:75:33:43:86:
a4:49:90:c0:dd:23:af:fc:b7:c1:e4:49:c9:6d:20:62:ce:ab:
4b:15:02:28:83:94:39:86:8f:86:38:f3:2f:3b:3c:1e:b6:fd:
25:6b:15:67:26:8e:33:67:54:9c:05:29:70:d5:20:1e:33:58:
ea:ea:7b:27:9c:b7:33:cf:bf:18:61:8f:3e:75:ec:61:de:a2:
a0:70:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:37 2025 by rpki-client