Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B_4NenM_8mOSfCySJt77Qaf5iUw.roa
File: B_4NenM_8mOSfCySJt77Qaf5iUw.roa (raw, json)
Hash identifier: jQIpH2Iqk2bBSJoaT71cSnMmx76HLbiOIHFb8ZAkHNo=
Subject key identifier: 07:FE:0D:7A:73:3F:F2:63:92:7C:2C:92:26:DE:FB:41:A7:F9:89:4C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955D2E25BFBC2D15EBA4A8BE038A38BB8F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B_4NenM_8mOSfCySJt77Qaf5iUw.roa
Signing time: Mon 03 Mar 2025 18:04:20 +0000
ROA not before: Mon 03 Mar 2025 18:04:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214329
IP address blocks: 31.57.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 10:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:2e:25:bf:bc:2d:15:eb:a4:a8:be:03:8a:38:bb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 18:04:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07fe0d7a733ff263927c2c9226defb41a7f9894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:a7:a7:04:b2:83:dd:1c:8e:e6:54:6d:ee:
9d:b1:86:ee:16:8d:f0:c8:4c:49:2f:33:3b:3f:91:
7c:45:a8:12:b2:17:e8:a0:26:95:bb:2b:1f:d5:f0:
fa:99:ae:fe:9a:d1:09:b5:09:34:1a:a7:0a:72:e2:
31:b1:34:d8:da:14:db:df:19:f9:81:dd:1a:a2:55:
7e:69:f3:5f:20:ec:e1:73:f6:f2:1c:50:ee:df:91:
75:e2:fa:26:22:23:af:d7:4c:cb:13:f1:fb:5e:20:
28:b3:bb:28:5f:23:1d:ea:05:0c:e7:d0:56:83:71:
c0:e3:73:0e:37:69:52:28:49:0b:26:84:04:26:84:
fc:99:86:79:16:85:a7:0c:32:50:5f:06:bc:8a:e9:
73:80:27:c9:cf:df:47:1d:e0:60:40:4e:d2:99:c2:
31:f4:39:f9:48:07:b1:88:ac:9b:81:ff:85:6c:54:
de:f1:79:19:cf:55:a1:6b:32:ea:d9:73:4f:74:da:
d5:4f:1e:5f:6a:8a:bf:12:98:43:7d:66:89:99:d0:
1c:9d:af:da:bb:0b:f6:b2:ee:5d:98:4d:96:4a:4d:
77:f0:a5:8c:d2:7f:45:66:c3:07:86:3b:30:b7:08:
84:11:a3:d5:76:36:14:f4:1c:49:28:bf:9c:8d:69:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:0D:7A:73:3F:F2:63:92:7C:2C:92:26:DE:FB:41:A7:F9:89:4C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B_4NenM_8mOSfCySJt77Qaf5iUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.196.0/24
Signature Algorithm: sha256WithRSAEncryption
03:be:63:59:3c:79:86:80:cb:19:55:b0:69:4b:f6:62:80:24:
86:6c:1f:be:3b:78:06:ff:91:5e:6e:5b:7a:0c:d9:a1:1f:10:
78:8e:21:6b:0e:8a:c3:05:53:16:aa:97:e0:74:e2:4e:6f:01:
e2:58:72:72:e3:b9:f8:d9:89:16:e0:7a:fa:de:a4:58:d0:94:
70:37:de:d2:47:b2:47:b2:de:b0:98:75:b5:f6:dd:7a:21:c0:
aa:df:bd:ff:02:18:96:b8:fa:3b:14:d1:e2:23:1a:6b:24:76:
da:b3:9a:be:22:80:eb:58:4e:07:f0:43:dd:fb:44:aa:e9:2b:
76:74:76:31:16:68:20:69:db:15:39:8e:b6:e2:45:c6:78:8b:
35:23:35:00:29:3c:13:10:20:ae:48:6b:6f:4e:19:7e:a7:e8:
fc:f5:a8:8e:70:a9:09:ea:5c:55:10:c4:06:b4:59:eb:47:d7:
ef:e4:cc:b6:75:38:0b:d0:d9:28:3c:09:dc:71:2f:46:67:46:
21:f0:26:3f:46:4d:ba:08:69:de:67:30:15:e9:a2:ef:60:f4:
07:42:61:3b:d2:81:85:a3:19:44:b4:0e:87:b1:49:d6:8f:ce:
a8:4b:b3:40:5a:de:28:3c:d2:4d:82:68:41:0f:d3:f7:53:f1:
4a:02:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:54 2025 by rpki-client