Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ObEOdZBN1Ox3AfH6voC89GwMHs.roa
File: 8ObEOdZBN1Ox3AfH6voC89GwMHs.roa (raw, json)
Hash identifier: O/W4U2VvCXpaZInXHtAoDblo3AWNhS/oLiHF7ndpTWg=
Subject key identifier: F0:E6:C4:39:D6:41:37:53:B1:DC:07:C7:EA:FA:02:F3:D1:B0:30:7B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019686971809F47A8E601FB7E903FAD4EC89
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ObEOdZBN1Ox3AfH6voC89GwMHs.roa
Signing time: Wed 30 Apr 2025 12:06:11 +0000
ROA not before: Wed 30 Apr 2025 12:06:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215242
IP address blocks: 31.58.211.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 14:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:97:18:09:f4:7a:8e:60:1f:b7:e9:03:fa:d4:ec:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 30 12:06:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0e6c439d6413753b1dc07c7eafa02f3d1b0307b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:2f:fb:28:da:bf:1f:22:68:94:dd:6d:ca:
19:6f:d5:f2:d8:8a:58:0f:28:2f:46:14:2c:6d:58:
e6:26:e0:81:e6:66:0d:c3:96:4e:a4:82:ec:cd:e4:
67:63:0b:bd:85:59:50:e9:49:ef:23:17:43:a5:d9:
7d:a1:9f:75:42:a9:c7:6a:e1:23:64:0c:8c:de:72:
68:c7:53:53:00:bd:b5:27:17:34:71:67:ac:a6:7d:
23:9e:fc:aa:ef:f8:55:30:61:bf:d3:4f:65:17:4f:
cb:af:2f:32:6b:71:62:b7:8a:ca:6e:d0:59:26:60:
f9:c0:6b:5e:f7:59:04:37:b8:2a:2b:ce:d0:4f:b8:
9c:27:b0:cf:2c:4e:3f:73:2e:07:0a:7a:df:8d:64:
13:b8:b6:b8:e9:1a:53:3c:46:22:17:0e:4b:4b:1a:
16:eb:8b:cd:f1:aa:2e:d9:e1:ba:d5:01:40:64:e3:
32:34:d7:a9:e0:d8:72:c1:8c:8a:42:15:f6:39:bd:
99:6d:aa:b5:38:18:32:fa:f7:27:c7:1e:a2:6e:2f:
90:72:1f:10:1a:45:f7:65:85:33:46:bf:65:83:c6:
d5:29:97:41:5e:bd:9c:16:87:d1:96:e8:3a:84:24:
b8:02:8c:d3:f6:73:6f:f9:02:7e:e4:8b:f0:fd:68:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:C4:39:D6:41:37:53:B1:DC:07:C7:EA:FA:02:F3:D1:B0:30:7B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ObEOdZBN1Ox3AfH6voC89GwMHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.211.0/24
31.58.247.0/24
31.58.250.0/23
217.60.251.0/24
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3a:12:4b:5f:e1:7b:8d:f6:e0:65:08:d9:0e:16:24:87:00:
2a:e7:cc:1c:93:2f:0f:3c:73:4b:d4:58:95:e3:5f:d9:b5:a6:
90:e8:3b:7b:cb:8a:3e:bf:e0:2c:32:ef:0f:b4:8e:fe:f9:68:
af:50:f9:8b:6a:46:22:1c:76:95:14:be:78:a6:62:31:26:c9:
61:09:42:7d:69:d0:54:da:d4:37:dd:af:99:81:8d:fe:d4:47:
51:e8:67:1d:9e:c2:a6:24:22:70:9e:4c:86:47:bc:2a:ab:60:
6b:66:71:ed:15:89:07:1e:df:da:b8:ac:c5:fc:52:12:15:b0:
f2:9a:21:a1:f3:f3:d1:da:2f:5f:a1:e1:c5:4e:83:16:a5:2b:
12:66:83:9f:69:e0:0a:89:ba:8b:b8:68:9b:35:ba:66:d9:dc:
49:f6:c7:15:95:61:80:28:61:e9:df:2a:8b:dc:83:81:50:87:
45:3f:0d:94:cd:74:e8:b7:51:70:ab:53:2f:38:0c:4a:b8:cb:
34:17:ed:43:00:80:a5:36:7d:a5:1a:bf:fa:e8:88:d9:64:71:
11:7f:2b:f2:ca:71:65:5e:de:dc:5b:fd:67:c0:98:f8:e1:74:
7a:00:6d:06:d1:af:99:8b:72:e2:0c:b4:f7:65:22:6b:04:92:
76:dd:65:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:36:04 2025 by rpki-client