Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G1woAxdC1Kt6T7yn_76BEXe_s14.roa
File: G1woAxdC1Kt6T7yn_76BEXe_s14.roa (raw, json)
Hash identifier: N/QVt/CZ+/5tdgSC8npVT9BWIcHig3ktl12397lERMs=
Subject key identifier: 1B:5C:28:03:17:42:D4:AB:7A:4F:BC:A7:FF:BE:81:11:77:BF:B3:5E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193C640E96C4F6C52BA2CBB416249318022
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G1woAxdC1Kt6T7yn_76BEXe_s14.roa
Signing time: Sat 14 Dec 2024 17:39:23 +0000
ROA not before: Sat 14 Dec 2024 17:39:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212416
IP address blocks: 31.56.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:40:e9:6c:4f:6c:52:ba:2c:bb:41:62:49:31:80:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 14 17:39:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b5c28031742d4ab7a4fbca7ffbe811177bfb35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:ef:43:a8:65:25:7a:69:5e:fa:93:1e:87:
d6:6b:89:a5:25:c3:ee:ff:5c:40:8b:81:56:57:cc:
e6:c8:d6:cd:ae:2d:23:bc:9b:f2:e7:09:60:33:d7:
64:6f:16:a8:26:70:52:10:c9:bc:e9:9e:51:7e:e6:
26:21:7d:89:2f:a5:c6:17:55:92:ef:e4:5f:ad:1e:
6a:93:37:25:68:6f:32:9d:92:e3:eb:69:92:52:b2:
00:5b:a4:7c:d1:90:e7:c1:3a:0a:ad:f7:d2:d5:3b:
08:5b:06:c8:f2:03:0a:7b:72:48:de:1b:6b:f8:34:
e2:91:54:54:b6:c6:26:0c:10:1c:41:7d:1a:3f:67:
36:1c:62:86:54:6b:0c:5d:1e:8f:2e:94:83:40:28:
7c:43:53:39:a5:db:0b:d0:3e:da:4c:4a:0c:0f:c4:
7f:64:21:37:45:88:2f:ae:0f:fa:eb:e2:8c:67:30:
f6:d1:72:a5:cb:97:56:4f:97:89:03:77:52:39:6e:
4e:57:89:a1:28:e6:b0:b6:fc:d2:e6:42:4b:70:49:
61:d2:19:aa:d3:c8:11:d6:6c:f4:6c:a3:45:ad:6e:
dc:ac:8d:28:a5:c6:d8:ee:84:0f:86:b0:cc:07:9e:
fd:64:d5:49:b9:d9:4c:f4:91:f8:bc:26:f1:9b:bb:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5C:28:03:17:42:D4:AB:7A:4F:BC:A7:FF:BE:81:11:77:BF:B3:5E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G1woAxdC1Kt6T7yn_76BEXe_s14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.118.0/24
Signature Algorithm: sha256WithRSAEncryption
af:dc:ff:86:40:6e:fb:b5:f8:4e:ec:10:d8:d1:12:68:6d:b1:
10:68:33:e5:45:36:62:30:18:d5:7c:2b:f2:c0:c7:a6:7a:10:
87:23:04:dd:37:e3:35:57:27:30:29:8d:a0:f4:44:f0:8a:e6:
44:95:ee:c8:e5:86:74:87:3b:a6:d9:76:e4:f5:47:f2:1d:d8:
cc:74:31:45:a0:a7:46:57:39:d1:cb:b2:f1:d8:1a:5a:22:32:
00:80:4a:9a:8b:32:be:b7:d6:f2:36:50:4e:5e:13:80:9b:75:
20:ae:21:74:a2:54:37:55:71:e7:8b:8f:4f:41:e7:79:3c:a3:
61:1b:62:92:d9:ff:cd:90:f2:a3:09:e0:a6:48:05:f9:ca:f6:
10:1f:19:56:fd:65:1f:17:0e:4e:61:65:45:fd:bf:d3:41:97:
f3:7f:2f:58:39:a9:b1:34:a9:44:51:20:e5:db:c7:5c:52:8c:
25:c9:2f:90:6d:66:67:bd:8a:2d:66:3d:c3:e4:a0:41:74:14:
e2:b5:8d:84:9d:8f:b8:11:36:5e:86:a2:fe:45:66:ab:84:d0:
fd:e2:60:97:cd:dc:05:5d:5b:6a:5b:cc:ef:e2:56:ad:91:59:
03:1c:3f:e1:2a:ef:ac:28:76:b6:32:08:ac:46:ef:d2:42:f9:
57:f9:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:38 2025 by rpki-client