Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BG7tSUTFAoKt1lPaw0s1jXTrm-0.roa
File: BG7tSUTFAoKt1lPaw0s1jXTrm-0.roa (raw, json)
Hash identifier: WmexQUiXcBC8xM1K6mBrkXa0aNkXE7XMjkmu6poudsU=
Subject key identifier: 04:6E:ED:49:44:C5:02:82:AD:D6:53:DA:C3:4B:35:8D:74:EB:9B:ED
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193BF1805BAB2A5032F51077F405D6EA1BB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BG7tSUTFAoKt1lPaw0s1jXTrm-0.roa
Signing time: Fri 13 Dec 2024 08:17:22 +0000
ROA not before: Fri 13 Dec 2024 08:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213734
IP address blocks: 31.56.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:18:05:ba:b2:a5:03:2f:51:07:7f:40:5d:6e:a1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 13 08:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=046eed4944c50282add653dac34b358d74eb9bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:1d:3e:a5:e3:05:6c:f6:e0:80:86:a0:3c:
d5:f8:8a:bb:82:95:b0:2f:f5:f1:a5:03:c0:ec:e2:
73:5c:65:79:a3:28:4c:5f:d7:a3:fd:15:6d:1f:c3:
a9:33:84:23:5e:de:6b:cb:27:60:66:5f:fb:c0:c0:
ef:59:6f:0b:ef:4a:11:96:4b:11:54:9d:88:58:0b:
46:d4:a0:2a:c5:33:e3:98:bb:82:3f:57:ed:48:1f:
9c:3e:22:dc:52:26:a0:01:91:80:71:03:e4:d1:ca:
b3:b5:ef:2b:5d:63:16:e2:0d:e8:2f:be:c5:4b:12:
e0:f3:57:33:fc:57:ee:38:ab:3a:4d:38:ec:fe:5f:
ee:a4:6e:98:b8:a3:51:b5:ae:2f:58:b8:86:4b:ec:
52:f0:da:e5:f9:d5:ef:45:6a:e9:4b:71:5a:38:7f:
8d:30:3f:5a:06:ec:f2:f3:5e:11:0b:6c:c3:45:10:
d0:76:dd:6b:ad:f5:15:bb:f6:36:c2:16:02:f2:8e:
9a:d3:d5:e0:6d:f5:06:0f:e6:1b:4f:38:b3:f0:45:
80:dc:17:70:76:e7:93:9c:11:12:8b:83:b0:7d:af:
70:7b:6b:01:c3:3d:1f:0d:c6:f8:c0:95:d0:89:77:
3f:9d:a1:83:1f:a4:6a:e6:3e:67:f9:01:fe:26:dc:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6E:ED:49:44:C5:02:82:AD:D6:53:DA:C3:4B:35:8D:74:EB:9B:ED
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BG7tSUTFAoKt1lPaw0s1jXTrm-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.105.0/24
Signature Algorithm: sha256WithRSAEncryption
54:84:38:09:47:a1:90:dd:c3:5d:bb:16:24:5e:9a:58:fe:37:
ae:03:76:02:2c:13:ea:9e:ba:f0:7c:8e:81:34:6c:91:7b:a4:
e2:ab:51:dd:6e:5e:0c:ff:11:e1:16:09:15:94:96:3a:4e:1d:
17:0e:48:c0:af:7e:69:72:c9:ae:e1:29:5e:3c:b0:93:03:29:
37:42:60:ad:d2:21:48:b4:17:b4:52:f0:5c:f4:49:51:63:ed:
78:b3:bd:e0:6a:f1:97:0b:82:82:eb:74:91:57:bb:42:01:5b:
c1:fe:74:63:56:64:49:b5:a1:ea:f6:fd:65:31:ae:19:1b:95:
aa:96:d1:78:f9:23:50:43:e6:87:83:f7:a9:d5:78:72:b1:7b:
8a:4b:59:e7:ef:e5:0a:ab:16:c0:c8:36:67:e1:c2:53:55:16:
e2:61:61:00:00:de:12:e7:45:5b:bb:58:0a:b5:3a:49:0c:14:
9a:07:2c:0a:8a:5f:de:47:26:36:2e:f1:2c:78:b1:b7:06:30:
33:48:7a:8a:ea:a2:b8:e6:32:1c:3e:52:22:18:be:fc:40:b4:
21:be:09:b3:3e:44:fc:bc:f7:94:57:b9:3e:e4:0e:e2:83:2d:
db:fa:a9:2e:3a:6f:9d:fc:88:b0:12:4a:92:1a:13:eb:3c:55:
7c:20:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:39 2025 by rpki-client