Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CbhK8SYu9-HndH7HVNluGK9XB_s.roa
File: CbhK8SYu9-HndH7HVNluGK9XB_s.roa (raw, json)
Hash identifier: vQHv6QzIXxZwVUaHNAz2pS/8AKaErBGTTfYLCa0TPd0=
Subject key identifier: 09:B8:4A:F1:26:2E:F7:E1:E7:74:7E:C7:54:D9:6E:18:AF:57:07:FB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019310E3728732F9A3029F81007F1505B880
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CbhK8SYu9-HndH7HVNluGK9XB_s.roa
Signing time: Sat 09 Nov 2024 12:26:01 +0000
ROA not before: Sat 09 Nov 2024 12:26:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214240
IP address blocks: 31.57.244.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:e3:72:87:32:f9:a3:02:9f:81:00:7f:15:05:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 9 12:26:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09b84af1262ef7e1e7747ec754d96e18af5707fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:25:e5:f4:d3:0a:c6:4c:c6:8e:f1:bd:ef:
a6:bd:22:85:fd:aa:1d:71:77:fc:c4:2f:cf:98:ba:
e5:4f:e5:bf:a5:8c:af:a7:55:b8:67:21:af:4f:2a:
a1:fa:07:69:ff:c5:77:38:33:2e:4a:e6:8c:5c:6a:
ba:4e:7d:59:8a:82:72:9e:ca:7f:6f:31:42:0e:b7:
0e:be:b1:a6:25:76:2f:10:2f:f8:c9:d0:32:85:ae:
ff:63:f2:d8:de:f8:81:b3:28:ef:61:89:04:0f:84:
8e:1b:19:01:a1:26:f7:09:8b:65:36:73:c9:de:18:
da:8a:39:cb:1b:a4:73:18:f9:6e:80:2c:3a:9a:00:
b9:f7:61:8e:a2:51:ac:7b:20:59:d8:be:4c:fb:a2:
82:7e:74:58:e0:a8:f8:2e:97:9e:88:ab:63:de:96:
fa:af:52:7c:f6:e6:04:35:23:c4:c2:78:da:3e:55:
ac:30:d9:60:de:cc:67:73:62:95:cb:63:b5:ef:c3:
a9:79:de:ef:49:32:37:a2:97:0f:75:58:26:a3:2e:
8a:d5:90:c7:a0:1f:08:c8:04:b1:5b:7b:1f:d5:26:
32:e6:9b:95:f3:da:9b:b4:d0:ac:de:f7:a6:1a:0d:
8c:08:22:01:94:69:b2:ad:02:8a:af:f1:c9:be:6c:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:4A:F1:26:2E:F7:E1:E7:74:7E:C7:54:D9:6E:18:AF:57:07:FB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CbhK8SYu9-HndH7HVNluGK9XB_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:26:0c:42:a4:55:29:f8:cd:24:b1:1d:8a:ae:97:8f:81:4c:
ca:77:8d:33:1f:b7:fe:83:ef:0b:8e:d9:e2:d3:e4:ee:39:2b:
75:d9:4d:1d:b5:a1:fc:87:20:38:f3:58:ac:6d:27:7c:5d:8a:
dd:0b:39:ee:85:a4:4e:f1:f5:ce:ee:f5:f9:5e:96:4a:a7:8a:
c5:4e:a7:05:d1:ee:eb:30:f3:b1:c7:4f:e2:2c:30:4b:c4:09:
6e:18:11:84:7b:45:72:cc:65:6d:ff:33:ed:b9:6b:fd:40:3f:
23:b7:bd:3a:80:de:fe:c1:5e:32:e9:a7:24:97:a9:73:e4:f4:
37:99:12:cf:cc:74:d8:c9:79:a2:52:f4:45:10:ac:32:06:8a:
32:2d:c7:4d:2a:16:03:1d:8b:d7:d6:32:36:68:32:03:c3:81:
97:09:4a:4f:7b:70:82:39:4c:da:80:4e:29:6a:b7:35:c5:f7:
cc:0b:94:16:68:7d:1d:f0:d7:73:1a:21:dc:b3:47:18:5c:2c:
3c:c2:d2:6b:82:db:dd:5a:28:aa:74:ff:57:b7:1d:c8:a7:35:
df:31:5f:5d:79:c2:a8:95:95:9d:9f:ae:8d:ae:9a:4a:15:2a:
25:1e:2a:2b:69:a0:9d:9f:c7:b8:72:98:40:62:c6:05:f2:d0:
39:4c:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:28 2025 by rpki-client