Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BjtkJwRXEmcrdhz-SDHc4voFTQ4.roa
File: BjtkJwRXEmcrdhz-SDHc4voFTQ4.roa (raw, json)
Hash identifier: oJRr/XT4xyDgB4z78Zu6dQSouqn1Eb6zgIjGTXdAds0=
Subject key identifier: 06:3B:64:27:04:57:12:67:2B:76:1C:FE:48:31:DC:E2:FA:05:4D:0E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019417043583F36E7297E490B0EA9E0B40EA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BjtkJwRXEmcrdhz-SDHc4voFTQ4.roa
Signing time: Mon 30 Dec 2024 10:02:19 +0000
ROA not before: Mon 30 Dec 2024 10:02:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20648
IP address blocks: 31.56.22.0/24 maxlen: 24
31.56.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:04:35:83:f3:6e:72:97:e4:90:b0:ea:9e:0b:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 30 10:02:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=063b6427045712672b761cfe4831dce2fa054d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:3c:e9:b1:be:e5:a5:7e:c7:93:e6:d7:e7:
91:b6:4b:7f:7a:17:cf:f5:88:36:a7:0a:3d:aa:df:
4a:8c:3b:1b:39:17:fc:2f:80:f9:4c:01:72:34:3e:
30:ed:a1:4c:2a:f3:c6:1d:09:3a:a6:9b:be:df:03:
54:6e:75:36:51:b5:a2:3d:e8:47:48:7a:26:f8:f1:
e9:d0:62:54:c4:57:c5:1e:8f:9c:c8:21:4f:ab:2a:
f2:79:86:ab:ea:c1:39:f1:99:d6:24:99:a8:30:fa:
8d:5b:fa:84:4e:fd:5c:8a:14:46:1e:64:bd:1c:fa:
17:51:6b:51:95:11:05:01:fd:61:a9:2c:b1:58:ca:
76:d1:4c:1b:d1:65:e5:40:e9:4f:a6:9c:15:84:c6:
d7:09:7c:94:13:4c:a7:52:66:eb:2a:1d:d1:62:10:
83:86:01:d7:66:b6:64:33:dc:18:d2:ce:3c:11:c0:
bb:1a:f2:cc:6b:76:1c:63:3c:1c:90:ac:df:92:8e:
86:db:e0:7e:ab:d7:ee:fb:4b:9f:e2:30:ff:59:13:
a3:ce:1b:c5:34:21:78:9d:5f:84:36:69:c3:6a:e2:
d0:9a:46:29:3d:c5:ac:00:dd:8f:f1:39:25:ec:1a:
d8:a6:d8:a2:bf:19:e1:a9:ab:63:16:1e:9d:b6:50:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:64:27:04:57:12:67:2B:76:1C:FE:48:31:DC:E2:FA:05:4D:0E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BjtkJwRXEmcrdhz-SDHc4voFTQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.22.0/24
31.56.203.0/24
Signature Algorithm: sha256WithRSAEncryption
86:30:2b:e5:03:7f:09:e6:1f:db:67:e3:86:b2:07:71:a0:1d:
c4:cb:7b:fd:d7:4f:7b:60:95:10:fb:1f:10:e1:71:e6:99:1b:
94:86:b0:ae:95:11:48:6f:69:fa:fa:e9:51:1f:3c:da:c3:b2:
be:f0:dd:af:c3:cf:a4:52:23:c5:bf:9c:9f:c3:5a:7d:cc:c2:
70:a7:f7:c1:7e:cc:70:96:9a:61:e8:b9:ba:f6:9e:c6:28:d6:
dd:7b:2b:8a:a3:a5:e9:c7:40:08:6f:b3:1d:e3:c1:dd:9e:4e:
8a:5c:a2:41:ee:d7:6e:5d:28:72:e7:2a:f9:cc:b2:bb:9f:b3:
d0:4e:8f:bc:e5:2f:29:fd:5e:32:3f:5c:94:7f:26:80:1b:de:
a9:d9:dc:31:ed:4f:2f:ac:6b:1b:b3:a6:49:e3:ff:34:da:13:
e8:68:d5:c5:51:32:fd:a1:c8:de:f2:c6:73:a7:80:5c:b6:c2:
d1:9c:50:d4:a6:92:ff:7e:ea:c6:b8:e1:0b:38:05:82:d3:6e:
4d:1a:9e:c3:7d:90:1a:cd:51:6f:12:9a:00:04:ae:99:cc:eb:
d6:ab:a4:fa:e3:8d:6c:fa:f3:c6:f6:10:d0:90:64:c2:6f:47:
8f:da:02:0e:97:6d:c8:ae:89:e9:23:0f:33:34:4c:f2:9a:67:
71:40:1a:c6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQXBDWD825yl+SQsOqeC0DqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjMwMTAwMjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjNiNjQyNzA0NTcxMjY3MmI3NjFjZmU0ODMxZGNlMmZhMDU0ZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxc86bG+5aV+x5Pm1+eRtkt/ehfP
9Yg2pwo9qt9KjDsbORf8L4D5TAFyND4w7aFMKvPGHQk6ppu+3wNUbnU2UbWiPehH
SHom+PHp0GJUxFfFHo+cyCFPqyryeYar6sE58ZnWJJmoMPqNW/qETv1cihRGHmS9
HPoXUWtRlREFAf1hqSyxWMp20Uwb0WXlQOlPppwVhMbXCXyUE0ynUmbrKh3RYhCD
hgHXZrZkM9wY0s48EcC7GvLMa3YcYzwckKzfko6G2+B+q9fu+0uf4jD/WROjzhvF
NCF4nV+ENmnDauLQmkYpPcWsAN2P8Tkl7BrYptiivxnhqatjFh6dtlDgwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAY7ZCcEVxJnK3Yc/kgx3OL6BU0OMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQmp0a0p3UlhFbWNyZGh6LVNESGM0dm9GVFE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgWAwQA
HzjLMA0GCSqGSIb3DQEBCwUAA4IBAQCGMCvlA38J5h/bZ+OGsgdxoB3Ey3v91097
YJUQ+x8Q4XHmmRuUhrCulRFIb2n6+ulRHzzaw7K+8N2vw8+kUiPFv5yfw1p9zMJw
p/fBfsxwlpph6Lm69p7GKNbdeyuKo6Xpx0AIb7Md48Hdnk6KXKJB7tduXShy5yr5
zLK7n7PQTo+85S8p/V4yP1yUfyaAG96p2dwx7U8vrGsbs6ZJ4/802hPoaNXFUTL9
ocje8sZzp4BctsLRnFDUppL/furGuOELOAWC025NGp7DfZAazVFvEpoABK6ZzOvW
q6T6441s+vPG9hDQkGTCb0eP2gIOl23IronpIw8zNEzymmdxQBrG
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:38 2025 by rpki-client