Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GdyB5ScmHbuKyofFVOdtOlS3v9c.roa
File: GdyB5ScmHbuKyofFVOdtOlS3v9c.roa (raw, json)
Hash identifier: l4ulh9dAdqI2NmgiUGeN7D+1tHrovT7Ft9UuVQux/pA=
Subject key identifier: 19:DC:81:E5:27:26:1D:BB:8A:CA:87:C5:54:E7:6D:3A:54:B7:BF:D7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019417060988B10464BCF640D997777A3A22
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GdyB5ScmHbuKyofFVOdtOlS3v9c.roa
Signing time: Mon 30 Dec 2024 10:04:19 +0000
ROA not before: Mon 30 Dec 2024 10:04:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:06:09:88:b1:04:64:bc:f6:40:d9:97:77:7a:3a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 30 10:04:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19dc81e527261dbb8aca87c554e76d3a54b7bfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:fe:33:e7:cd:32:c1:17:d6:ba:75:ad:f1:
9f:ef:6e:5b:1e:dc:3f:9d:2f:fb:99:32:35:0b:da:
03:84:35:3a:3e:8a:e1:e6:67:42:ce:41:4f:c4:ad:
d6:94:5e:16:df:70:7d:ed:fb:7c:74:cc:d2:3c:a4:
19:1a:ca:bf:c0:7b:8a:8b:33:23:d6:31:6d:00:6a:
9b:a6:3b:2c:cc:48:ad:2d:a6:9c:7f:fd:01:6c:a7:
c2:de:38:e5:97:39:5e:a5:2d:a5:94:4e:84:5f:b0:
78:53:5e:f5:0f:a9:f8:dd:0c:1c:06:f2:5d:9c:63:
dd:c1:3f:64:8f:08:f8:ea:b8:73:0d:ee:c5:c9:75:
26:12:ba:63:d0:35:5d:4e:45:c6:53:3a:56:65:ae:
6b:28:4c:f2:b9:fb:51:1a:2e:c0:9b:94:b3:81:0a:
ae:24:ca:b6:d0:4b:42:98:e8:b1:11:07:35:32:d0:
91:e2:f8:e1:5e:bd:7c:81:9f:ae:71:72:7a:b1:6f:
9b:5d:c3:71:d1:82:76:5f:1d:ec:dc:08:e5:d9:fe:
49:98:10:51:2b:de:fc:c1:40:fe:25:f7:10:90:6d:
c9:d5:a4:5d:a5:8e:7c:c4:98:81:13:4a:23:d4:49:
b9:31:6a:b3:c3:2f:22:17:c2:e4:0e:f1:04:7a:2a:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DC:81:E5:27:26:1D:BB:8A:CA:87:C5:54:E7:6D:3A:54:B7:BF:D7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GdyB5ScmHbuKyofFVOdtOlS3v9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
20:75:8d:ab:cf:fc:02:1d:bb:f1:dc:3c:d7:54:fa:f9:f6:0a:
99:d1:81:6e:18:ca:1d:3b:5c:fd:68:db:cf:53:f6:bb:c7:05:
9e:a6:b8:72:2e:a0:8b:f9:0f:e3:19:43:53:1d:8e:fb:e1:4f:
8e:20:94:b8:d4:f4:f6:ee:43:6c:7b:dc:95:b0:dc:4a:3b:f5:
b9:cc:2b:0e:58:32:c4:7d:14:7b:00:15:72:15:86:90:c7:22:
ac:d5:d3:25:2f:6d:88:03:1d:95:c3:8b:da:a7:7f:fd:0f:96:
3c:57:7d:aa:ea:12:9e:e6:25:0e:f3:d0:a3:09:ad:34:bd:e6:
db:1c:ca:b2:84:57:ec:a8:fd:80:be:60:32:65:f2:e8:71:11:
ea:31:af:6b:1e:3c:0d:d7:92:2e:bd:f8:58:eb:f3:07:73:69:
5b:a1:92:ee:3a:45:a6:13:ad:c1:20:88:30:0f:29:79:37:d9:
92:3d:0f:03:27:82:ea:ea:b5:c0:2e:d6:26:c0:02:e3:58:85:
4f:0e:e4:70:ab:7c:b5:e2:5c:af:5b:fa:ca:9d:dc:7a:e0:f9:
5c:c9:4e:33:5c:7e:03:92:fb:71:50:81:50:57:19:24:b0:84:
8b:45:20:00:0c:f5:be:f9:e8:de:c4:0c:df:ca:03:b3:b1:bd:
5e:5f:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:10 2025 by rpki-client