Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9rEbp9n_g0w87PTam8HrbIAOiXE.roa
File: 9rEbp9n_g0w87PTam8HrbIAOiXE.roa (raw, json)
Hash identifier: YNEcrny5Yg6JO9lVvYftDLFmbeQOT4Hu2obQN1Hm6R8=
Subject key identifier: F6:B1:1B:A7:D9:FF:83:4C:3C:EC:F4:DA:9B:C1:EB:6C:80:0E:89:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019392316233C1A906C2DF5A3341939D9FC8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9rEbp9n_g0w87PTam8HrbIAOiXE.roa
Signing time: Wed 04 Dec 2024 15:02:10 +0000
ROA not before: Wed 04 Dec 2024 15:02:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44714
IP address blocks: 31.58.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:31:62:33:c1:a9:06:c2:df:5a:33:41:93:9d:9f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 4 15:02:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6b11ba7d9ff834c3cecf4da9bc1eb6c800e8971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:23:7e:9a:0c:ff:4b:9d:43:87:9f:a9:f7:
b0:a0:93:d3:ab:2f:45:8e:a0:64:cd:f4:80:d7:bd:
0c:04:f9:7b:27:81:23:8b:64:fa:a2:cd:72:ab:a1:
3c:c5:0d:f9:72:53:6f:f2:b8:ee:52:f2:d0:69:1c:
90:60:99:62:ef:06:6e:04:a4:ac:c1:c8:60:39:13:
a0:17:1e:86:36:81:c8:73:f9:82:da:22:a9:98:89:
94:b7:2c:58:e6:76:1d:f3:cc:66:4a:96:6a:d3:0b:
62:6c:32:c2:d7:3a:5e:29:ef:56:6f:32:7c:b1:26:
b5:49:b9:6c:d4:e0:a2:37:be:50:3b:40:a9:ab:14:
f8:51:55:c6:20:e6:41:ba:d3:24:b4:9a:b9:87:7f:
52:9e:62:0c:5b:e7:d3:12:47:7b:1c:16:73:96:84:
a3:e1:ea:8f:b1:39:f0:c3:51:80:4a:22:7d:51:1b:
7a:cf:d7:76:34:c6:eb:7e:61:f5:88:ba:c9:33:f8:
ee:f5:f9:88:26:0b:62:13:09:e8:d9:2b:a9:62:7a:
a3:19:40:51:35:78:01:3a:9d:48:96:2e:c2:50:79:
18:15:cd:4f:81:c6:f0:d4:5e:59:8d:19:82:a8:67:
25:06:ba:db:73:e4:92:8c:b8:ca:d1:af:9c:47:b2:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B1:1B:A7:D9:FF:83:4C:3C:EC:F4:DA:9B:C1:EB:6C:80:0E:89:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9rEbp9n_g0w87PTam8HrbIAOiXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.246.0/24
Signature Algorithm: sha256WithRSAEncryption
14:0d:1c:64:58:b4:ab:ec:92:b2:bc:6d:9a:66:9b:1d:90:e9:
aa:13:56:15:c4:bf:d7:87:58:33:8a:a6:c2:cd:66:de:ae:f5:
d1:9c:7f:2b:9d:65:41:40:a0:76:57:2f:6d:4a:f8:e7:8d:37:
a4:fa:ac:32:81:9f:9b:52:7c:44:57:80:a3:81:3f:fe:98:46:
4c:1c:8f:7a:9b:3e:16:f4:f8:91:3d:0d:eb:7a:10:d4:85:9c:
8a:96:b7:1b:3a:d4:dd:f7:cf:e6:4b:a0:6e:64:2b:4a:aa:a7:
22:38:82:cb:af:33:1d:06:87:5d:87:86:69:17:de:81:f3:fc:
ee:18:67:b0:87:8c:ca:8c:04:1c:ad:ca:e5:47:ec:80:59:e6:
48:f1:09:8f:1b:89:07:6f:06:55:9b:aa:25:4c:13:ee:b2:2f:
13:43:77:02:20:14:74:18:28:00:b0:67:7c:f2:85:0b:1f:01:
e2:fa:3c:30:11:9f:31:65:5e:85:02:fc:0a:f1:13:dd:3c:e0:
17:ac:af:94:31:52:f1:a7:c5:91:e2:8e:a2:42:3b:08:83:9b:
c8:af:f5:fa:ab:1f:b1:11:54:76:a7:44:2c:c1:87:dc:fa:96:
4a:06:5a:3f:ac:a9:be:89:8a:cf:ca:11:20:ce:09:17:2b:5c:
d7:e9:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:42 2025 by rpki-client