Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8UO768jL_mCwun61bRPUUPtICSc.roa
File: 8UO768jL_mCwun61bRPUUPtICSc.roa (raw, json)
Hash identifier: St/QVeT1MpySo7tACEfXdzwfgIiE8eRMWFqHmMVIbV8=
Subject key identifier: F1:43:BB:EB:C8:CB:FE:60:B0:BA:7E:B5:6D:13:D4:50:FB:48:09:27
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193CE516CF3837CD85621EC8EF9E3316A11
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8UO768jL_mCwun61bRPUUPtICSc.roa
Signing time: Mon 16 Dec 2024 07:14:23 +0000
ROA not before: Mon 16 Dec 2024 07:14:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 10:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:51:6c:f3:83:7c:d8:56:21:ec:8e:f9:e3:31:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 16 07:14:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f143bbebc8cbfe60b0ba7eb56d13d450fb480927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:10:fd:eb:a6:a5:5d:34:da:7a:7a:2a:c2:
47:65:61:c8:f5:27:fe:a6:69:8a:5c:2a:c7:df:1c:
4f:80:7e:9b:45:f7:af:35:1e:4e:66:08:2e:be:04:
f5:c1:f8:fb:e8:fa:f1:86:63:d9:52:6e:05:c4:15:
df:62:e6:88:ac:c2:42:41:96:d1:74:7f:33:fb:17:
a9:49:71:a9:5a:a0:cf:34:60:c8:42:06:13:e4:1d:
25:98:55:4b:91:fd:ee:15:ef:18:72:a7:8d:67:97:
ef:13:64:d8:1a:1d:27:20:b5:c8:6a:23:bd:c0:44:
43:a8:6e:5c:24:25:78:4d:a3:4a:70:92:ae:e3:d5:
9e:4c:17:2e:dc:55:22:d1:31:ad:91:a4:4c:82:7c:
22:31:15:bf:f0:53:4c:e0:a1:8b:db:f3:75:92:45:
19:33:7a:24:ca:0f:f1:e3:b1:dc:ef:d5:90:de:2b:
4c:8f:28:9e:0b:6a:3e:ed:88:21:57:33:f9:af:ab:
d7:4b:dc:80:bd:39:30:8c:2d:dc:19:06:91:a3:8a:
e4:b0:60:1c:b2:29:7a:c1:79:83:f3:e7:c6:43:32:
69:72:69:09:cc:43:12:c2:62:46:b6:00:0b:e5:f7:
e6:59:77:8c:0d:21:23:34:a1:60:a8:b3:e6:03:fb:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:BB:EB:C8:CB:FE:60:B0:BA:7E:B5:6D:13:D4:50:FB:48:09:27
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8UO768jL_mCwun61bRPUUPtICSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:00:dd:bd:ce:d8:25:8d:28:a0:07:86:2d:3e:0e:35:14:32:
a2:20:a7:a8:4a:28:27:55:c2:7c:39:18:8f:1c:80:2a:d3:a0:
5b:43:84:47:7b:66:3e:b8:3c:4b:c3:b6:bc:af:b8:2d:a0:90:
13:d9:b1:eb:b2:81:4e:4c:68:d1:96:09:bf:de:9a:ac:29:ba:
1f:94:48:85:84:30:fc:bc:c9:c1:3d:fd:7b:d5:ff:09:94:b2:
9e:ec:da:25:3b:ca:48:06:26:0d:01:16:ed:82:97:46:cd:07:
b3:2d:71:88:c4:ce:d4:44:c8:af:27:e5:b8:20:7e:cd:b5:f4:
d0:e7:36:c1:0a:9a:7a:1c:b3:36:1f:4d:d7:48:39:32:b0:f6:
94:e2:04:33:91:06:8e:e8:d5:cf:27:ce:95:fb:37:d4:a0:bd:
08:33:8a:0d:f7:19:82:54:91:bf:a9:a4:f8:5d:19:9d:cb:60:
5b:c3:b5:16:4b:93:3f:3f:7d:32:b8:a0:b6:cd:d8:f8:c0:35:
47:4d:76:7f:8c:0e:71:f1:1a:18:2b:8f:c6:cb:d9:db:9b:1a:
12:de:44:f4:ab:dc:77:03:ae:a1:a3:92:bf:3b:38:0a:ea:ed:
6e:7a:41:07:37:6f:80:f5:c5:6a:a7:26:e7:18:7c:de:65:61:
49:7a:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:04 2025 by rpki-client