Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7lRCUeNKoqa-xuh3-nhWgdvm-NM.roa
File: 7lRCUeNKoqa-xuh3-nhWgdvm-NM.roa (raw, json)
Hash identifier: ZG8SkyXXHtxdg/UKYu9Zli0bmxZ9ScKNfMsFQp5/TWA=
Subject key identifier: EE:54:42:51:E3:4A:A2:A6:BE:C6:E8:77:FA:78:56:81:DB:E6:F8:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01948505A30822E5FB5686C6A4CE4CACAAA9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7lRCUeNKoqa-xuh3-nhWgdvm-NM.roa
Signing time: Mon 20 Jan 2025 18:42:06 +0000
ROA not before: Mon 20 Jan 2025 18:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 31.56.141.0/24 maxlen: 24
31.57.155.0/24 maxlen: 24
31.57.160.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 07:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:85:05:a3:08:22:e5:fb:56:86:c6:a4:ce:4c:ac:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 20 18:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee544251e34aa2a6bec6e877fa785681dbe6f8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:17:04:b3:52:82:9a:71:75:71:1b:61:dc:
5f:b8:f5:78:65:62:8b:df:23:0a:85:1b:be:34:2f:
d6:94:6c:fc:04:2a:0a:d2:cf:8e:15:27:87:1e:ac:
ce:56:b7:56:86:30:49:cb:57:31:bc:32:f1:b3:9b:
e4:8d:cd:a1:14:cd:2c:74:15:43:10:da:16:47:85:
12:8b:eb:3d:9b:e4:cc:38:8d:1d:5a:73:44:5d:7d:
18:54:26:e9:71:bd:61:b4:7c:35:66:aa:4a:43:f3:
7a:ad:18:27:5f:1c:b4:08:73:67:9e:31:eb:be:ca:
9e:6b:5a:58:76:49:3d:7c:3f:35:79:e6:81:be:bc:
7e:50:1e:eb:00:7e:1c:63:e0:21:84:1d:d5:18:d7:
03:ae:be:1b:03:11:85:9c:a9:bb:0e:52:ac:83:92:
ed:c8:07:c0:3e:af:0e:21:1f:1f:ae:20:a0:08:1d:
0e:84:5a:84:97:b6:f5:52:f2:24:82:6c:92:fd:dc:
bf:98:c2:88:7b:56:42:a6:77:9b:c7:eb:8a:81:a5:
a4:86:b6:e6:18:e6:61:6b:83:e2:c3:c9:4e:3e:1d:
3b:23:2e:16:87:5d:41:28:87:0e:51:b3:23:a2:dd:
55:ff:58:36:de:1b:df:6f:9a:d4:4d:83:9f:ca:2e:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:54:42:51:E3:4A:A2:A6:BE:C6:E8:77:FA:78:56:81:DB:E6:F8:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7lRCUeNKoqa-xuh3-nhWgdvm-NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.141.0/24
31.57.155.0/24
31.57.160.0/24
31.59.99.0/24
Signature Algorithm: sha256WithRSAEncryption
59:dd:53:3b:66:b0:04:ca:c3:e6:74:31:eb:7c:92:5a:9d:9a:
a1:57:31:5f:ca:22:b1:ce:2c:e6:d2:05:79:41:3a:ed:f5:bc:
46:57:7f:98:03:3f:9a:56:20:ee:2e:93:d7:4b:18:f5:99:e7:
f0:51:32:bf:34:c0:c7:07:52:36:c1:12:b2:51:32:e5:a5:c8:
37:a1:94:cd:be:be:15:0f:b8:cb:98:4f:08:3a:21:59:f4:5d:
74:4c:da:e5:32:c0:ac:f4:72:c3:4c:c1:95:15:2f:55:b9:f6:
00:97:8a:f0:78:17:47:e8:43:96:ff:9a:54:a1:bc:33:b9:88:
eb:72:6c:b5:a0:ce:36:ed:ab:24:58:0d:dc:8f:f2:c4:59:7c:
f2:af:a3:7c:cf:15:28:11:7c:31:cc:d6:7f:26:86:86:90:6d:
08:20:aa:84:06:78:ca:3f:8c:9d:11:29:ca:e5:cf:e9:4a:98:
8e:ea:c3:08:93:f9:ba:d9:aa:21:ae:69:35:fa:b2:d7:34:b2:
9c:ac:0d:ba:81:70:c6:69:da:e5:09:07:9e:a6:dc:be:9c:9f:
93:9a:4d:93:c4:28:93:b1:ee:9a:d0:95:aa:81:f8:9d:d4:43:
d5:67:98:5b:ed:9a:75:79:30:b6:4b:d1:c7:3a:c9:1a:b5:48:
25:30:1c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:40 2025 by rpki-client