Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ELnF0wFGTwBjOv6fTJjUbEMXN7I.roa
File: ELnF0wFGTwBjOv6fTJjUbEMXN7I.roa (raw, json)
Hash identifier: 9yCDZ/qBkPmezTY6knp2Q6zBpcM0hctJaUCKSz5RIU8=
Subject key identifier: 10:B9:C5:D3:01:46:4F:00:63:3A:FE:9F:4C:98:D4:6C:43:17:37:B2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194541B22B703B7D3872D4D33970CDCE197
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ELnF0wFGTwBjOv6fTJjUbEMXN7I.roa
Signing time: Sat 11 Jan 2025 06:44:11 +0000
ROA not before: Sat 11 Jan 2025 06:44:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 31.56.1.0/24 maxlen: 24
31.57.144.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:54:1b:22:b7:03:b7:d3:87:2d:4d:33:97:0c:dc:e1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 11 06:44:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b9c5d301464f00633afe9f4c98d46c431737b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:9b:d4:90:9e:d8:f5:d0:50:f8:0b:01:04:
b8:5f:f4:a3:3c:2a:2f:f7:19:c0:3f:21:49:3b:ce:
d3:a0:df:5b:9f:97:e2:ae:0e:c0:b8:6e:6b:b4:e4:
93:67:21:3d:b2:ec:8a:52:d6:47:cf:28:f5:b3:3c:
09:16:7a:bb:14:c3:dd:ae:90:b8:a7:17:43:05:59:
2b:d6:11:48:d8:a1:20:93:b5:24:52:9c:8d:56:90:
94:de:30:4f:87:29:2c:73:6e:08:bb:ab:0e:9e:24:
a6:d6:40:15:3e:6d:5d:d3:1a:78:07:de:83:49:1f:
a9:43:07:10:5f:d1:f8:fb:29:7a:20:69:f4:2a:32:
fb:c1:a3:7f:3f:17:eb:0c:5b:2a:64:b1:f6:a2:3f:
49:e6:d2:50:dd:55:13:7e:59:7b:88:28:cd:df:c7:
30:3c:c4:a4:e7:4d:cb:d8:33:dc:26:2f:5a:1b:00:
83:b0:b7:00:2e:11:16:3e:f3:9d:11:e1:0f:c4:d8:
c9:a9:25:3c:27:13:c9:15:4a:cf:08:39:2c:02:2d:
dd:b5:e3:af:17:29:5b:96:f2:69:a1:78:6d:45:47:
72:b1:25:21:d8:5b:f6:a0:14:2b:a4:5b:34:e5:34:
a1:51:3d:76:d9:fb:d6:a3:7b:89:a4:cb:26:96:0c:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:C5:D3:01:46:4F:00:63:3A:FE:9F:4C:98:D4:6C:43:17:37:B2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ELnF0wFGTwBjOv6fTJjUbEMXN7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.57.144.0/24
31.57.231.0/24
Signature Algorithm: sha256WithRSAEncryption
85:87:78:f2:a2:1c:65:50:6b:64:21:12:50:35:60:f2:fe:f8:
31:79:cd:1c:31:a0:ce:a3:9a:0e:e0:af:c2:be:2b:c6:eb:22:
e5:f4:8f:1b:4b:28:5a:d7:d1:54:5c:1f:b6:38:93:57:b3:3e:
bc:44:2d:45:aa:0d:ee:7f:42:15:9b:1b:5a:d4:ad:8a:16:13:
9d:f2:be:6b:40:e4:28:71:cb:c1:d5:21:65:5b:52:75:f4:fd:
9f:66:c7:52:89:f6:ae:35:46:84:35:b2:06:d6:ab:3b:f0:05:
b7:f3:4c:11:ae:31:5b:90:6b:34:1a:55:81:55:f4:dc:1c:ef:
ce:d7:02:3b:46:b0:36:e8:c0:58:27:fc:0e:b4:95:26:51:50:
cc:f6:93:75:a2:a5:51:31:ea:e6:30:87:96:2d:00:e0:2a:b4:
0c:4c:36:58:73:d4:28:aa:9b:f3:13:da:70:d9:76:1e:8e:c3:
9c:3f:2b:b3:fa:8b:b7:30:67:96:f9:8a:e4:31:f2:d9:ec:cd:
97:27:39:55:dc:e8:6f:ac:0a:ca:b1:a1:fc:29:7f:31:a7:b9:
f4:e7:c6:90:11:c3:ec:31:00:af:f2:c9:b2:3f:4b:da:d9:6f:
d2:27:4f:62:5f:c8:99:7d:2d:bd:56:f9:39:a1:9d:ca:73:fa:
5f:c4:af:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:15:27 2025 by rpki-client