Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9D8BrjXRaflP17UExfAK72KiYTc.roa
File: 9D8BrjXRaflP17UExfAK72KiYTc.roa (raw, json)
Hash identifier: Ak41ksN1aH45xM5t5V3RmHa5dDKKIUp/60sVsIOmXZ4=
Subject key identifier: F4:3F:01:AE:35:D1:69:F9:4F:D7:B5:04:C5:F0:0A:EF:62:A2:61:37
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282366EF8AD81A5B910AA3B2E6D63016
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9D8BrjXRaflP17UExfAK72KiYTc.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211407
IP address blocks: 31.56.78.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 13:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:66:ef:8a:d8:1a:5b:91:0a:a3:b2:e6:d6:30:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f43f01ae35d169f94fd7b504c5f00aef62a26137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:04:61:ed:93:96:57:71:ba:7c:5f:18:2a:e6:
2a:6b:25:28:2c:af:c6:82:82:16:5a:74:1f:b4:d7:
e8:01:2c:44:72:19:e2:6c:07:d3:c4:64:72:71:ff:
99:bc:ff:8b:b6:d7:9f:77:33:d0:fb:d8:6a:f3:a2:
6a:54:e8:14:a3:88:9e:b7:5a:5d:b3:cf:00:8c:3d:
e8:fe:b9:a5:39:f7:70:55:b5:2d:9e:7e:42:e5:31:
75:1c:b9:92:09:58:55:55:dd:8d:46:d6:a1:15:68:
00:63:1a:74:62:32:71:b6:66:37:35:03:05:d3:0c:
70:4f:70:1a:c2:bb:01:9e:5e:cb:62:91:a8:bd:a7:
70:5e:91:50:46:94:63:3c:ec:16:b4:06:7b:b8:fe:
1c:2e:00:79:2d:0d:d5:9f:dc:ad:2b:69:b5:4b:f3:
1d:a5:8a:d2:97:ff:e6:59:1d:18:6c:55:e0:0e:79:
01:aa:a6:79:96:8a:f4:d2:c3:55:e3:e6:55:85:52:
55:cb:b0:f8:d5:9e:23:70:9c:92:4f:f8:3a:db:62:
d4:f3:1d:10:95:5f:c2:4e:c7:b6:dc:33:95:7d:1b:
f2:d2:3e:1f:de:b1:8a:e4:d2:a9:8f:26:4d:b3:d3:
a8:9b:c7:dd:ec:6e:dd:56:d2:bf:ff:50:03:88:1e:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3F:01:AE:35:D1:69:F9:4F:D7:B5:04:C5:F0:0A:EF:62:A2:61:37
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9D8BrjXRaflP17UExfAK72KiYTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.78.0/24
31.57.183.0/24
31.58.158.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a7:e6:2c:42:ad:9e:b2:d8:22:ca:99:80:4d:29:41:c8:43:
13:94:81:72:e8:c4:5e:ba:e2:f4:c3:17:ee:21:02:19:10:11:
4e:91:be:02:e5:ef:ac:c0:91:f0:04:e2:41:26:62:a3:5c:64:
39:95:88:97:30:2e:d5:59:77:c5:31:29:4a:9a:ad:13:a1:20:
08:a0:d0:8a:36:fa:45:57:6f:6c:c0:4e:ac:6b:99:2e:81:f7:
b9:1f:b6:21:12:d3:61:e5:5e:ca:50:52:47:ba:8b:34:64:e2:
bf:55:6e:48:88:8b:ed:ce:45:b0:21:a9:04:54:7f:b0:c0:ad:
e9:ba:cf:7f:74:3f:85:11:d9:6f:c7:b5:b0:8a:10:46:f8:e8:
5c:c5:94:92:03:bf:cc:58:e6:a5:61:7e:34:59:54:f8:e2:6a:
ac:fc:34:9b:2d:fa:2f:93:d1:1a:ae:22:50:c8:c5:47:52:28:
b9:f0:23:11:32:3f:9c:a0:e9:fa:21:1f:67:dc:cd:b6:5d:71:
48:b9:d4:32:4b:b3:f7:47:3d:5f:3f:2a:f7:5e:a0:fa:81:27:
f6:aa:d8:bc:8c:19:98:56:91:17:7d:d4:e3:1b:4d:5b:59:47:
41:20:7f:67:81:21:46:29:ac:a1:53:1b:2c:57:fd:6c:12:09:
0b:1f:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:09 2025 by rpki-client