Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9O-2cveHD-LGsvEmCmPL3fMXmas.roa
File: 9O-2cveHD-LGsvEmCmPL3fMXmas.roa (raw, json)
Hash identifier: VmhAODjWEuoAkVyQIij5fYWpvxr47RDoRnENXnncNZM=
Subject key identifier: F4:EF:B6:72:F7:87:0F:E2:C6:B2:F1:26:0A:63:CB:DD:F3:17:99:AB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428233BF9F482115B212E5A896EDDB382
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9O-2cveHD-LGsvEmCmPL3fMXmas.roa
Signing time: Thu 02 Jan 2025 17:49:45 +0000
ROA not before: Thu 02 Jan 2025 17:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 31.56.114.0/24 maxlen: 24
31.57.67.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 10:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3b:f9:f4:82:11:5b:21:2e:5a:89:6e:dd:b3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4efb672f7870fe2c6b2f1260a63cbddf31799ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:b6:b6:72:52:ae:35:fc:60:24:c9:21:da:
dc:43:2f:c0:46:26:a6:42:58:ef:c1:c7:1f:5a:e4:
14:fa:79:4f:a0:85:ed:0f:e8:e0:4d:f7:bf:3a:02:
2e:51:c9:53:84:38:87:e1:8b:58:ef:3b:0a:f9:7e:
90:d9:2a:fd:4b:49:4f:ee:0b:bd:95:76:a5:4d:f3:
76:47:35:c3:10:4c:29:ad:66:f1:1a:10:76:4f:61:
14:5f:58:ed:a2:92:c7:96:c9:28:c0:96:77:54:29:
5b:e2:e8:5f:ba:fc:3a:16:6f:71:ff:f8:b5:2c:e7:
54:29:46:09:6d:c2:65:29:0c:bc:dd:13:53:49:9d:
0c:e7:11:ec:fe:45:ef:90:54:b8:48:eb:de:06:84:
03:94:69:4c:3b:af:3e:f8:cf:f1:c4:8b:ff:52:4d:
75:20:c8:c9:d5:ec:42:69:ba:91:73:50:9c:cf:8d:
cf:e7:c9:95:f0:b3:dd:22:70:d7:49:cf:d2:c3:16:
ec:74:15:b0:42:8e:8b:aa:84:9a:35:ed:12:fd:97:
b5:8a:0d:86:f3:1c:85:cc:86:ef:cd:98:1d:b8:bd:
58:43:49:8d:ab:8a:4e:96:d1:99:a5:d5:4d:7e:35:
0b:03:d5:e7:55:a5:17:c7:d0:0b:a6:77:41:e7:76:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:B6:72:F7:87:0F:E2:C6:B2:F1:26:0A:63:CB:DD:F3:17:99:AB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9O-2cveHD-LGsvEmCmPL3fMXmas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.114.0/24
31.57.67.0/24
31.58.49.0/24
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
80:81:0e:27:af:67:9c:08:8e:dd:0a:96:84:cd:c1:1a:c1:27:
f4:5f:31:6e:ce:d5:02:8f:e2:bd:79:93:a9:ab:35:ba:88:56:
97:81:42:d9:15:99:4f:fd:7e:e7:55:50:b8:a2:b2:6b:55:34:
2d:fc:66:a9:79:5c:3e:35:10:fc:37:8e:a7:d9:2e:96:83:1b:
b2:1e:dd:c9:06:11:09:e8:e5:61:25:f4:d2:55:be:58:93:d1:
8a:d2:46:8b:70:9d:7a:6b:95:27:78:ff:9c:5a:dc:ed:fd:ab:
56:27:39:48:c3:11:7e:81:7d:cc:29:46:45:ef:6e:e3:fe:94:
f9:97:17:86:ab:ca:c2:a5:50:c9:92:81:8b:04:cf:f4:b2:05:
d8:3f:38:8b:e5:bf:89:7d:6a:6c:26:47:aa:4e:4b:12:dc:43:
2f:51:3e:71:8f:17:e3:56:1f:b1:13:1e:e9:98:a5:32:a1:80:
55:81:ea:5f:0b:8b:74:bd:cb:2d:4a:2d:9d:21:bc:39:c4:ad:
89:0d:26:0b:ca:3a:dc:b5:da:d2:ed:74:a6:db:d5:10:36:c3:
b4:88:90:73:5f:85:7d:0e:08:9e:99:b5:bf:dc:9c:e4:e9:f8:
73:3c:85:a6:c0:9c:95:6e:24:87:c4:d9:fa:a4:0a:e7:ae:f5:
05:7c:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:09 2025 by rpki-client