Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C2Dpx8m79suvuCUycwERqQ8Rsdc.roa
File: C2Dpx8m79suvuCUycwERqQ8Rsdc.roa (raw, json)
Hash identifier: +0f4lT+0UVq5UdB3TXdvAxkxhHcojSOhO6QEXv1VMAU=
Subject key identifier: 0B:60:E9:C7:C9:BB:F6:CB:AF:B8:25:32:73:01:11:A9:0F:11:B1:D7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942169A5FC76AEB77F756E9E6CB64070E8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C2Dpx8m79suvuCUycwERqQ8Rsdc.roa
Signing time: Wed 01 Jan 2025 10:29:19 +0000
ROA not before: Wed 01 Jan 2025 10:29:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 31.57.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:69:a5:fc:76:ae:b7:7f:75:6e:9e:6c:b6:40:70:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 1 10:29:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b60e9c7c9bbf6cbafb82532730111a90f11b1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:d5:b6:ce:56:ed:37:b6:5c:62:dd:64:87:
14:ae:b2:5d:ed:de:b9:6e:8a:84:d8:2b:f0:f1:7a:
1a:99:ed:99:d6:9d:75:74:33:4c:fc:a0:2e:13:50:
70:b3:54:81:34:e1:dc:16:29:ca:6f:13:24:77:aa:
4f:05:2f:2f:1d:05:05:7b:e0:1a:de:54:df:96:41:
12:2c:40:20:ce:e9:65:9b:71:ae:0d:f1:af:d3:5f:
62:85:f0:db:5a:18:33:00:79:22:82:f3:5b:af:6b:
c2:81:1c:18:e7:70:41:07:40:6a:f6:58:ff:c7:77:
be:dd:a0:fd:71:47:76:3b:0c:5b:44:c9:ec:c7:5f:
03:10:1b:f6:9f:24:36:38:00:a0:ce:45:97:28:02:
1e:73:d7:5c:b3:af:17:12:e4:73:23:43:e9:c7:4a:
0a:4f:37:38:27:bc:8e:51:88:0a:90:72:03:b5:36:
7b:24:f0:e3:c1:f2:ef:a1:4e:c6:23:3a:71:83:75:
61:df:a7:f3:0e:f0:a3:f8:ec:58:95:c0:3f:45:d6:
c7:37:bb:34:26:f4:b3:e4:b0:02:a2:11:ae:dd:f0:
8b:1c:73:b0:84:9e:28:5a:fb:dc:46:9d:79:10:e5:
0d:41:ff:a0:2d:b5:a5:72:1c:d1:bc:6c:5c:90:d6:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:E9:C7:C9:BB:F6:CB:AF:B8:25:32:73:01:11:A9:0F:11:B1:D7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C2Dpx8m79suvuCUycwERqQ8Rsdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:da:3b:0e:7f:ac:1c:21:9e:70:13:10:30:14:99:d7:65:84:
9a:b7:7b:2b:b5:bf:d0:32:94:b9:01:32:f8:01:93:71:b1:08:
c9:1b:58:8b:70:45:b9:70:09:07:0e:74:10:99:ae:e6:0d:79:
a6:79:08:c0:55:31:b4:ae:fd:b7:7a:7a:b2:9c:9d:23:31:38:
67:0a:b0:c5:13:4a:3c:c2:25:32:86:be:5f:70:ae:e5:f8:00:
79:2a:15:4b:66:47:e3:71:c1:6b:58:19:2a:be:b0:7d:0f:c2:
8e:d9:f6:05:1f:01:af:cf:53:95:c6:77:8d:bd:a0:2b:35:ed:
0e:36:4d:e7:aa:ad:4c:b1:60:70:39:86:05:2d:a0:c0:79:42:
62:a0:a3:02:64:8b:45:23:e3:b2:fa:f8:2f:73:f5:d5:f2:49:
eb:13:fb:b2:f5:05:85:67:7e:60:37:b5:7f:b3:02:de:8d:e6:
4d:a7:c1:87:fe:13:df:7d:07:df:e6:ef:04:87:73:45:c3:e2:
31:26:24:99:d9:ad:9f:7a:ad:c1:a8:72:4d:5e:4e:4a:f7:01:
3d:8a:a4:5e:ff:35:3f:b0:8b:5a:21:c8:ca:4b:09:66:de:47:
b2:21:8e:e9:f4:aa:64:0b:db:1b:04:26:ab:9d:dd:6b:8b:88:
a2:18:25:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhaaX8dq63f3Vunmy2QHDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAxMTAyOTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjYwZTljN2M5YmJmNmNiYWZiODI1MzI3MzAxMTFhOTBmMTFiMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtLVts5W7Te2XGLdZIcUrrJd7d65
boqE2Cvw8Xoame2Z1p11dDNM/KAuE1Bws1SBNOHcFinKbxMkd6pPBS8vHQUFe+Aa
3lTflkESLEAgzullm3GuDfGv019ihfDbWhgzAHkigvNbr2vCgRwY53BBB0Bq9lj/
x3e+3aD9cUd2OwxbRMnsx18DEBv2nyQ2OACgzkWXKAIec9dcs68XEuRzI0Ppx0oK
Tzc4J7yOUYgKkHIDtTZ7JPDjwfLvoU7GIzpxg3Vh36fzDvCj+OxYlcA/RdbHN7s0
JvSz5LACohGu3fCLHHOwhJ4oWvvcRp15EOUNQf+gLbWlchzRvGxckNa1MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAtg6cfJu/bLr7glMnMBEakPEbHXMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQzJEcHg4bTc5c3V2dUNVeWN3RVJxUThSc2RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkKMA0G
CSqGSIb3DQEBCwUAA4IBAQA72jsOf6wcIZ5wExAwFJnXZYSat3srtb/QMpS5ATL4
AZNxsQjJG1iLcEW5cAkHDnQQma7mDXmmeQjAVTG0rv23enqynJ0jMThnCrDFE0o8
wiUyhr5fcK7l+AB5KhVLZkfjccFrWBkqvrB9D8KO2fYFHwGvz1OVxneNvaArNe0O
Nk3nqq1MsWBwOYYFLaDAeUJioKMCZItFI+Oy+vgvc/XV8knrE/uy9QWFZ35gN7V/
swLejeZNp8GH/hPffQff5u8Eh3NFw+IxJiSZ2a2feq3BqHJNXk5K9wE9iqRe/zU/
sItaIcjKSwlm3keyIY7p9KpkC9sbBCarnd1ri4iiGCUs
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:29 2025 by rpki-client