Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E1Jkr7jjRNRiAIc7ouh5O7g3VvM.roa
File: E1Jkr7jjRNRiAIc7ouh5O7g3VvM.roa (raw, json)
Hash identifier: Xs7HlWUyx0abFXslpSoB7oOri65eNVAo/rZZGDldUkQ=
Subject key identifier: 13:52:64:AF:B8:E3:44:D4:62:00:87:3B:A2:E8:79:3B:B8:37:56:F3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193A0A845CB928CEB40E0477BE823FC8F5F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E1Jkr7jjRNRiAIc7ouh5O7g3VvM.roa
Signing time: Sat 07 Dec 2024 10:26:42 +0000
ROA not before: Sat 07 Dec 2024 10:26:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214560
IP address blocks: 31.59.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:a8:45:cb:92:8c:eb:40:e0:47:7b:e8:23:fc:8f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 7 10:26:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=135264afb8e344d46200873ba2e8793bb83756f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:a5:d1:8f:a0:39:61:d1:ab:51:08:52:68:
28:0f:59:c4:c2:f8:ec:43:3c:e1:b5:76:e5:b1:03:
14:00:3c:87:5e:96:fd:04:9e:26:71:19:9d:96:5e:
f5:92:a1:ca:64:de:4e:06:d2:b2:88:eb:fe:1d:8b:
b0:be:2c:f2:82:c7:24:99:cf:18:0d:57:b0:a2:a5:
a2:04:4b:a6:1d:f2:db:76:f5:fc:3a:97:43:b6:4b:
6b:f2:76:6c:dc:02:6d:44:40:e8:7b:ee:bb:62:46:
d8:88:ee:06:92:97:d9:2f:b2:83:4e:e0:5d:1e:b8:
80:dd:bd:b8:30:f4:9d:ce:c8:49:76:f7:ea:4a:c6:
59:35:25:31:d5:6f:f8:3f:31:f4:36:0d:a3:c3:f7:
c9:9a:b7:e4:fb:08:55:21:a2:a1:1c:d3:b4:3a:f6:
2b:50:13:70:7b:be:fd:ab:47:0f:b1:5f:72:69:5e:
a7:09:5f:54:b5:68:54:ca:27:c3:07:cf:15:d1:76:
7c:e1:cd:f1:6f:80:5b:78:22:c5:82:c0:a9:99:98:
68:7a:c4:4c:ea:75:6f:c2:f6:fd:ca:df:8e:a4:5a:
90:dd:d4:c1:c4:c3:11:9d:59:f8:85:30:53:80:1b:
85:76:40:8c:ab:91:36:3a:a7:f0:48:c6:be:a0:3a:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:64:AF:B8:E3:44:D4:62:00:87:3B:A2:E8:79:3B:B8:37:56:F3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E1Jkr7jjRNRiAIc7ouh5O7g3VvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.96.0/24
Signature Algorithm: sha256WithRSAEncryption
42:31:62:a1:e8:dd:a5:09:4e:9e:bf:ae:f5:44:29:d9:e0:fd:
46:97:27:a4:9e:1d:cf:61:ce:b9:63:94:9a:ee:60:64:7c:e5:
4c:8c:63:8d:df:b5:cd:7a:b5:20:35:56:e5:aa:20:bf:7e:1b:
89:2c:1d:e1:b1:87:03:7e:04:a7:39:23:d9:ec:07:90:0f:06:
4f:2a:04:0f:8a:64:07:65:e9:91:8d:61:21:6b:30:47:1e:16:
6f:46:2a:d4:44:a5:e0:58:66:92:55:d0:ae:0e:1c:22:2f:6c:
2c:9a:14:5c:32:d6:57:88:68:b0:c8:92:8a:ef:c5:c5:45:5a:
71:33:d2:6c:9f:e7:94:a2:9f:fd:37:32:87:47:df:d2:c1:13:
8e:28:0f:81:6e:33:c6:b2:de:3f:f2:2e:d5:56:92:01:92:44:
69:67:fc:d8:18:fa:6c:09:6f:a8:cd:50:82:37:bc:1d:48:83:
18:2d:2f:2e:ea:4c:06:d2:72:c2:55:74:cc:15:71:19:3e:04:
d6:41:81:3a:67:b5:b3:6a:46:a8:0f:dd:9f:51:f8:a0:b2:06:
62:a5:30:e2:52:c5:26:a3:c2:b0:f8:f0:c4:75:ca:52:55:90:
fd:2f:4f:c8:ce:67:40:e2:51:11:50:89:95:14:c0:e5:b6:14:
4f:d7:c7:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOgqEXLkozrQOBHe+gj/I9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjA3MTAyNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzUyNjRhZmI4ZTM0NGQ0NjIwMDg3M2JhMmU4NzkzYmI4Mzc1NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Cl0Y+gOWHRq1EIUmgoD1nEwvjs
QzzhtXblsQMUADyHXpb9BJ4mcRmdll71kqHKZN5OBtKyiOv+HYuwvizygsckmc8Y
DVewoqWiBEumHfLbdvX8OpdDtktr8nZs3AJtREDoe+67YkbYiO4GkpfZL7KDTuBd
HriA3b24MPSdzshJdvfqSsZZNSUx1W/4PzH0Ng2jw/fJmrfk+whVIaKhHNO0OvYr
UBNwe779q0cPsV9yaV6nCV9UtWhUyifDB88V0XZ84c3xb4BbeCLFgsCpmZhoesRM
6nVvwvb9yt+OpFqQ3dTBxMMRnVn4hTBTgBuFdkCMq5E2OqfwSMa+oDqvYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNSZK+440TUYgCHO6LoeTu4N1bzMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRTFKa3I3ampSTlJpQUljN291aDVPN2czVnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHztgMA0G
CSqGSIb3DQEBCwUAA4IBAQBCMWKh6N2lCU6ev671RCnZ4P1Glyeknh3PYc65Y5Sa
7mBkfOVMjGON37XNerUgNVblqiC/fhuJLB3hsYcDfgSnOSPZ7AeQDwZPKgQPimQH
ZemRjWEhazBHHhZvRirURKXgWGaSVdCuDhwiL2wsmhRcMtZXiGiwyJKK78XFRVpx
M9Jsn+eUop/9NzKHR9/SwROOKA+BbjPGst4/8i7VVpIBkkRpZ/zYGPpsCW+ozVCC
N7wdSIMYLS8u6kwG0nLCVXTMFXEZPgTWQYE6Z7WzakaoD92fUfigsgZipTDiUsUm
o8Kw+PDEdcpSVZD9L0/IzmdA4lERUImVFMDlthRP18cd
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:51 2025 by rpki-client