Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/86564jrz_J6YIAFFyki7QFYICsw.roa
File: 86564jrz_J6YIAFFyki7QFYICsw.roa (raw, json)
Hash identifier: HNCfELIbIa6/6Mkg7NijwPbhrC2+jFnEcu+C6zPZJyk=
Subject key identifier: F3:AE:7A:E2:3A:F3:FC:9E:98:20:01:45:CA:48:BB:40:56:08:0A:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192EBBB1F6AF635A6C0AEC2A50E6551829F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/86564jrz_J6YIAFFyki7QFYICsw.roa
Signing time: Sat 02 Nov 2024 07:16:01 +0000
ROA not before: Sat 02 Nov 2024 07:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 31.56.160.0/21 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:bb:1f:6a:f6:35:a6:c0:ae:c2:a5:0e:65:51:82:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 07:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3ae7ae23af3fc9e98200145ca48bb4056080acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:a1:ab:8f:d6:28:6a:d7:70:9e:e8:fd:cf:
10:c3:8e:da:26:be:af:c4:f9:d4:54:e5:d6:ac:1a:
c5:d0:f0:bf:e4:99:a7:fd:0d:65:97:6f:f3:08:4d:
d1:7a:e8:e9:d3:e1:59:74:46:66:5f:54:5f:8d:46:
21:94:38:cb:f7:2b:3d:38:b3:cc:23:6c:cd:d6:43:
6b:24:f9:81:bd:1c:1e:d3:d8:72:7b:b6:72:19:70:
a2:66:61:90:2e:70:ee:f6:5b:ea:bc:68:13:34:9b:
8c:25:9f:76:df:83:b6:fe:40:bf:4b:d0:b9:d4:b1:
07:fd:8f:48:fb:29:97:b2:b4:0e:83:53:05:2b:cf:
5d:d4:ea:db:f6:d0:76:f0:f5:c8:11:9f:f4:44:f2:
5e:4c:1b:59:bb:e9:cf:f3:ac:52:d8:d3:55:0d:21:
7a:11:aa:1c:78:e0:e8:d0:7a:d1:94:3f:a2:ab:45:
8c:f5:b5:ae:eb:f3:19:9d:0d:33:06:77:cf:3e:ff:
a1:6a:b7:7f:1c:ab:b6:f6:5c:d9:05:d9:a6:a9:2d:
3a:da:25:47:fa:77:b8:45:b1:e8:81:e5:ae:1f:b0:
21:00:eb:99:a1:b6:45:d6:cf:9c:3e:48:4c:8a:c5:
ae:62:dd:0e:2b:a8:da:7f:73:0f:c8:9b:77:d1:1c:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:7A:E2:3A:F3:FC:9E:98:20:01:45:CA:48:BB:40:56:08:0A:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/86564jrz_J6YIAFFyki7QFYICsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.160.0/21
31.57.202.0/23
31.59.116.0/22
Signature Algorithm: sha256WithRSAEncryption
af:a9:73:17:67:43:48:04:c1:96:51:cb:cc:07:33:36:61:77:
1b:2a:0c:26:7c:cd:91:1c:77:24:70:4b:ac:9b:b9:14:4a:04:
07:79:7e:da:bc:1d:d8:0b:03:73:5a:bf:bd:2b:f1:af:27:12:
80:35:de:b9:e6:f0:d4:7a:f0:82:15:23:21:09:18:24:87:af:
4e:7f:ab:39:22:48:2c:41:3a:eb:32:21:50:6a:9b:22:4d:4a:
a5:90:26:c6:f5:7b:3f:ba:5d:7f:f0:83:49:74:a5:31:2b:f4:
e9:46:b7:a3:b1:eb:01:78:19:98:fb:fb:7a:1a:15:14:27:23:
4c:f3:f1:20:58:5a:8e:86:77:fc:e9:61:72:06:05:51:4d:1c:
b2:7b:6e:0a:65:6d:77:b3:2f:63:8a:78:b8:d9:6e:7a:6f:52:
17:76:a7:41:be:8f:6f:16:11:b8:25:62:e5:5f:fb:56:5d:57:
b6:15:68:e7:a0:b3:3d:28:19:48:a8:9b:a0:a3:53:3e:07:13:
9f:af:d8:49:74:62:f1:e1:77:32:0f:c1:aa:55:37:af:c1:37:
31:e3:94:52:ed:43:77:03:a0:24:fd:ac:81:c7:25:e2:60:37:
c2:a2:c9:df:1f:20:a3:68:02:64:e3:ad:d2:fa:92:44:59:72:
5b:d8:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:01:02 2025 by rpki-client