Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6q7FTwrgW08M-iXccfMKyVbw_uc.roa
File: 6q7FTwrgW08M-iXccfMKyVbw_uc.roa (raw, json)
Hash identifier: TNCTnBM8WmRKlInX2sn2ktJmb4i7IukF0FnkLZpPyD0=
Subject key identifier: EA:AE:C5:4F:0A:E0:5B:4F:0C:FA:25:DC:71:F3:0A:C9:56:F0:FE:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193B60CA79B717A01BE8DBA2C66BB224BEA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6q7FTwrgW08M-iXccfMKyVbw_uc.roa
Signing time: Wed 11 Dec 2024 14:08:22 +0000
ROA not before: Wed 11 Dec 2024 14:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 31.58.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:0c:a7:9b:71:7a:01:be:8d:ba:2c:66:bb:22:4b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 11 14:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaaec54f0ae05b4f0cfa25dc71f30ac956f0fee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:c6:dd:e9:0c:ff:21:4d:7d:c0:51:c6:1c:
a5:25:89:6f:78:3d:80:cc:43:5c:ca:ab:10:28:6a:
8b:05:4c:9e:42:05:0d:7d:31:75:19:db:20:5f:f8:
2a:bf:2e:2b:e0:7a:80:ca:16:f3:a4:2b:b1:34:a9:
f2:70:da:eb:72:c7:09:de:da:1d:65:b1:58:e7:3d:
81:56:83:a3:aa:4a:9f:13:07:c4:f7:1c:8e:fc:f9:
11:e5:b8:b6:61:a0:23:bb:64:55:c6:38:de:a6:f5:
2b:90:cd:2a:9c:ed:7e:79:81:cc:9d:b8:00:ba:d9:
8a:f9:a9:17:aa:67:c0:97:e9:f8:e4:a7:b3:a7:99:
94:32:43:cb:01:5c:95:b3:ff:95:32:12:45:45:ea:
ca:ec:1a:c7:da:96:73:7e:34:58:22:c4:33:a9:6d:
2f:14:07:12:c4:a9:ca:47:1a:5f:17:56:86:04:3e:
84:07:bb:94:96:7c:a2:94:b6:a9:a4:bc:0d:d3:8f:
87:03:8d:45:02:b5:ea:26:58:4c:be:32:3f:16:ba:
53:4e:c9:16:f6:a1:f8:5c:9f:b0:fb:48:f1:03:d2:
0d:3c:e2:c0:5e:bd:c7:e3:98:8b:25:21:19:de:80:
a8:f0:f6:f2:4b:0c:73:09:3d:50:46:19:8c:0c:35:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AE:C5:4F:0A:E0:5B:4F:0C:FA:25:DC:71:F3:0A:C9:56:F0:FE:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6q7FTwrgW08M-iXccfMKyVbw_uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:96:2c:30:61:d5:9b:a6:ff:c1:ce:b7:e7:2e:6c:30:19:f4:
14:b3:01:af:14:ac:a4:be:a6:30:1e:1e:01:9e:5c:20:da:3c:
ac:ad:b1:68:3c:8e:9f:07:00:de:df:38:7d:06:84:65:29:5d:
7d:2e:ab:b8:22:da:0c:a3:6c:4c:67:a5:54:d8:67:f2:f5:1e:
9a:0c:5f:fd:6d:c3:d1:8d:96:35:40:ae:e1:0f:51:c7:a6:b3:
3f:85:34:9b:4b:96:2c:4e:44:95:9a:77:5f:4d:c1:48:f1:be:
24:46:ea:82:c5:ac:d2:2f:a7:61:a2:8a:68:3b:84:e8:33:ee:
25:23:fc:7e:7c:56:71:97:c1:ee:bb:8e:ef:83:0e:e1:8c:9c:
a0:48:9b:0a:a2:0e:c4:3f:6f:5f:24:07:2d:00:31:fc:0f:24:
f5:2e:22:96:eb:b5:89:77:eb:fb:ef:f5:bb:00:f5:23:5e:ce:
b1:38:a6:13:e1:49:1c:e6:42:e0:08:1d:9a:11:d5:8c:d5:de:
f2:4a:5a:40:3c:3f:17:cd:72:25:f1:da:7b:7e:38:c8:ef:ee:
eb:e0:c9:ce:8a:63:2c:84:27:be:77:19:4d:2c:96:33:62:ca:
1d:75:40:76:98:b1:4a:f0:67:0f:b5:90:5c:04:15:35:18:29:
db:b2:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:41 2025 by rpki-client