Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HMp4y7axWUWQ8ejjJ5iQJRuDfZs.roa
File: HMp4y7axWUWQ8ejjJ5iQJRuDfZs.roa (raw, json)
Hash identifier: FPuOV8PiBl8AnARXSqq2v2sm3OOEcQE6V9RIjtEyTfU=
Subject key identifier: 1C:CA:78:CB:B6:B1:59:45:90:F1:E8:E3:27:98:90:25:1B:83:7D:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01939C3731518C9731B53947A0C3AB4E2E55
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HMp4y7axWUWQ8ejjJ5iQJRuDfZs.roa
Signing time: Fri 06 Dec 2024 13:44:43 +0000
ROA not before: Fri 06 Dec 2024 13:44:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56594
IP address blocks: 31.58.137.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.59.114.0/24 maxlen: 24
31.59.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:37:31:51:8c:97:31:b5:39:47:a0:c3:ab:4e:2e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 6 13:44:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cca78cbb6b1594590f1e8e3279890251b837d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:ea:2a:b1:d7:d7:51:2b:97:f4:3e:af:9a:
e4:3e:da:25:53:64:b4:a0:bb:0d:66:4a:19:a0:ab:
25:8d:87:d2:90:d0:25:9a:73:65:8c:0c:7b:57:0a:
10:7f:26:8c:db:94:4e:08:22:a0:87:64:6e:ec:c4:
9e:9d:65:09:ad:ff:c7:cd:c6:8f:3c:9b:f9:4d:3f:
af:f2:d9:e2:75:ad:07:13:f8:a7:98:cd:7b:42:db:
5b:de:71:28:df:a4:7e:22:cd:12:51:1f:fa:3a:12:
45:37:f6:04:e5:3c:31:b1:7d:ad:b3:47:34:73:40:
87:fd:44:95:d8:29:e1:a8:c2:2f:f8:ab:95:c2:af:
eb:c3:c3:c5:9d:76:5b:9b:da:8e:50:af:7f:56:e2:
c3:da:8c:cf:b7:b4:eb:99:a9:82:f1:82:c2:ee:94:
49:94:1d:44:46:71:df:17:05:a8:50:59:1d:8b:bc:
83:fd:f0:63:1d:e2:b7:77:9a:ea:fc:c2:38:15:77:
a7:ed:ee:1c:95:21:0e:19:35:69:fa:c5:bb:b6:e5:
68:07:90:3a:88:05:6c:b8:bc:ca:c1:0c:76:87:09:
d5:5e:eb:92:2e:9e:09:e6:79:c5:8f:73:71:d9:2a:
86:e5:c4:5d:2d:69:3c:72:5a:c8:8e:c4:02:23:48:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:78:CB:B6:B1:59:45:90:F1:E8:E3:27:98:90:25:1B:83:7D:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HMp4y7axWUWQ8ejjJ5iQJRuDfZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.137.0/24
31.58.141.0/24
31.59.114.0/24
31.59.185.0/24
Signature Algorithm: sha256WithRSAEncryption
37:dc:63:79:fe:72:86:51:22:6c:27:5d:c8:55:76:e5:d2:59:
99:c2:68:e7:3b:f6:ab:ee:32:da:2d:87:df:ad:2f:c9:c6:15:
4e:8c:a4:e6:ab:c0:4c:4f:65:79:ce:8b:64:89:1e:00:07:fe:
e1:36:53:51:fe:ec:1b:32:26:ff:00:5b:40:ce:f9:52:ba:3f:
60:c3:4f:b1:77:77:a7:ef:d5:46:0f:b7:bb:1d:e6:19:14:f9:
ad:3b:b4:04:bb:30:de:53:15:eb:91:b6:da:50:1b:49:77:00:
7d:95:d4:f0:0c:f7:1a:9c:b3:c7:57:f2:9b:80:24:e3:35:19:
74:e1:9f:c2:85:36:43:d3:cc:f0:a8:5a:07:ed:3e:d2:68:0f:
e4:bb:db:5d:07:6a:13:72:18:34:e7:03:6e:d2:bf:15:78:22:
fa:3e:45:8b:30:f0:cb:75:9b:26:76:bc:3e:74:63:a1:6b:11:
e8:54:e1:e6:4d:d5:13:30:c9:6e:91:da:c0:c2:fa:42:6c:43:
f5:37:8c:72:f9:62:0d:2d:18:04:de:75:8d:9d:49:00:1d:94:
8d:00:fd:40:72:b6:aa:6b:17:73:4c:ff:38:2b:88:d4:ac:a6:
65:ec:f5:8f:ef:e7:69:b4:50:78:68:97:7b:78:79:42:b5:6f:
a7:0d:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:40 2025 by rpki-client