Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9WyC1lxxVL7ru7VdJKUu1qCH3h4.roa
File: 9WyC1lxxVL7ru7VdJKUu1qCH3h4.roa (raw, json)
Hash identifier: XcEphLlf2G1wK6fmZkhDmznA0Q5zjieiG/D7uL4I75o=
Subject key identifier: F5:6C:82:D6:5C:71:54:BE:EB:BB:B5:5D:24:A5:2E:D6:A0:87:DE:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01940DDAA09DA2E8A8A90087E364EFB12CAC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9WyC1lxxVL7ru7VdJKUu1qCH3h4.roa
Signing time: Sat 28 Dec 2024 15:20:19 +0000
ROA not before: Sat 28 Dec 2024 15:20:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211114
IP address blocks: 31.57.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0d:da:a0:9d:a2:e8:a8:a9:00:87:e3:64:ef:b1:2c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 28 15:20:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f56c82d65c7154beebbbb55d24a52ed6a087de1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:61:d6:bd:45:c1:6a:f2:e6:f7:b0:62:e1:
62:13:22:ce:0b:22:7b:0e:cd:1f:a6:36:cb:f6:4f:
16:09:35:6a:a4:41:8c:8d:c0:c3:89:8d:b5:8c:c1:
16:81:3d:21:10:51:73:a0:29:e9:f7:ac:e2:f4:32:
7b:35:0a:5e:b2:e4:b5:0b:47:2a:c1:4d:c6:94:38:
ac:2a:5c:72:fc:8c:df:08:7c:79:c9:dc:3f:c6:b0:
7a:d2:1c:11:61:15:ae:80:ac:e9:86:b5:8d:51:7e:
8e:8e:db:8f:b5:8e:10:95:31:d4:95:e9:a8:9a:2a:
d1:b6:a9:5f:ef:f9:6f:49:94:99:cb:c5:89:bb:f3:
b9:6c:52:6a:f7:17:11:37:26:76:00:f5:e5:5f:67:
97:c2:de:fa:e8:96:16:86:2a:34:0e:3a:5b:11:d1:
8d:8c:b9:de:fe:ec:39:67:48:91:78:2e:92:bd:69:
97:e5:94:a8:ab:b6:30:06:dd:50:8f:93:ae:d3:48:
1f:1b:48:6f:fc:e8:81:6a:4e:46:84:b7:49:7f:0c:
2e:fe:b4:4c:32:f5:25:23:1d:2c:62:ae:b6:14:55:
ce:d4:9a:d3:d6:ab:4c:4b:85:af:05:0a:05:b1:d0:
fe:7b:f2:24:3b:dc:39:65:99:11:41:a7:9a:38:c1:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:82:D6:5C:71:54:BE:EB:BB:B5:5D:24:A5:2E:D6:A0:87:DE:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9WyC1lxxVL7ru7VdJKUu1qCH3h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.225.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:89:39:07:d5:74:4c:18:3b:86:89:0d:8d:52:22:9a:68:2b:
63:5c:c8:90:b9:23:ce:01:7d:71:e6:f5:19:41:c4:19:c1:42:
e4:a9:34:18:88:18:a0:7d:ec:4e:ea:2a:14:f1:c7:3e:88:0b:
82:b1:9f:72:33:17:1f:51:35:5a:1e:26:5d:6d:ea:54:f4:c7:
a7:48:be:9d:00:77:64:2e:23:e4:77:2c:1b:00:27:74:df:cf:
8c:d5:45:c8:97:75:0c:df:a6:a6:8b:7c:2b:11:d4:70:ad:1d:
63:a1:56:df:4f:c5:42:b5:fc:60:e7:d0:cb:96:65:06:51:69:
44:1d:b8:f4:2b:02:8f:54:b8:fa:d9:df:94:db:a6:15:fb:1d:
15:4f:d3:02:de:1a:52:0e:e3:ad:c7:1a:da:63:bb:14:f5:40:
c6:ab:c4:a8:d3:ea:72:50:e2:96:3e:65:84:6f:7b:8e:d5:fc:
ab:c4:47:f0:2c:ee:c5:3f:1f:40:7b:f7:48:6d:6b:1d:e2:fb:
ed:e9:b7:0b:c9:05:ee:df:31:de:b6:46:cd:f6:ec:a0:35:1f:
68:13:e9:95:2e:68:48:a1:5e:39:9e:d4:43:28:d1:f8:2c:41:
b6:61:32:d8:77:ba:c3:01:8e:44:32:df:a7:6b:12:6b:59:90:
8e:50:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:05 2025 by rpki-client