Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IzJgWoB-v9fYqBQH6pECSothKhU.roa
File: IzJgWoB-v9fYqBQH6pECSothKhU.roa (raw, json)
Hash identifier: QePSvjDRfTB2L3ajgkSZI/G1k/H/rjXvMbpFPmk1Fro=
Subject key identifier: 23:32:60:5A:80:7E:BF:D7:D8:A8:14:07:EA:91:02:4A:8B:61:2A:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428238078219F7A51EFE4AC2AC77B56D9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IzJgWoB-v9fYqBQH6pECSothKhU.roa
Signing time: Thu 02 Jan 2025 17:50:02 +0000
ROA not before: Thu 02 Jan 2025 17:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 31.56.39.0/24 maxlen: 24
31.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 07:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:80:78:21:9f:7a:51:ef:e4:ac:2a:c7:7b:56:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2332605a807ebfd7d8a81407ea91024a8b612a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:e6:aa:b4:6c:5e:3f:f8:4f:bc:bb:cd:7a:
7d:21:fd:11:a6:82:63:32:92:6b:ea:69:32:4c:71:
1d:3d:fe:2f:b0:b4:4c:ba:b0:19:25:21:28:91:e2:
a3:43:c1:f2:d5:71:cd:b9:61:e2:60:18:1f:77:ae:
f6:43:4f:7d:f3:e1:43:89:7f:63:44:cd:78:ae:43:
42:4f:b4:d9:57:ae:9b:d0:1a:24:28:8a:13:d1:20:
d7:5c:ac:6b:7c:73:c4:1f:da:4c:4e:a5:b1:57:18:
10:2c:5c:44:76:ea:5e:cf:5e:00:3e:1a:4d:f2:ba:
81:5d:de:63:69:6c:d0:18:cd:17:f1:72:01:34:de:
2d:33:43:f1:b2:28:55:81:60:f4:86:a6:a0:ba:82:
45:89:86:48:e1:ee:d7:ec:f9:27:f7:48:d9:30:c2:
33:34:3b:54:df:bf:f2:c4:54:50:1a:aa:35:78:71:
99:38:68:6b:e1:24:f2:7b:56:95:c3:c9:b8:9c:46:
55:12:c3:21:33:43:ce:8a:8c:7a:32:d3:7c:cf:55:
0b:a8:78:62:98:ae:af:f0:a1:81:45:3c:b4:c7:57:
ac:3b:cf:f0:5e:e9:40:b3:9e:a1:db:d5:1b:83:32:
02:90:0c:a8:f5:1d:c1:cd:77:e4:4d:f1:23:3d:0a:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:32:60:5A:80:7E:BF:D7:D8:A8:14:07:EA:91:02:4A:8B:61:2A:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IzJgWoB-v9fYqBQH6pECSothKhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.39.0/24
31.58.58.0/24
Signature Algorithm: sha256WithRSAEncryption
78:43:2d:1e:96:1a:b0:5f:a6:3d:5b:45:9e:c6:4a:57:62:71:
4b:e4:ca:f0:4e:2d:15:8d:ab:20:dd:93:40:bb:44:db:cf:4c:
31:7d:fa:8b:b5:28:ec:12:aa:5d:5d:cb:be:8b:3a:5b:62:37:
f0:5d:40:62:e7:a6:61:85:f7:d3:87:b8:25:d3:c0:80:e4:e3:
d7:f8:5b:ea:30:41:7e:ce:a7:3e:df:31:3c:b5:25:9e:ed:4b:
d4:95:fe:9e:c5:65:54:4a:f7:ef:cb:92:74:87:d8:51:42:34:
c1:23:2a:73:5c:1f:5f:d7:b5:6f:9f:9e:27:bb:33:ba:c2:2d:
70:87:f1:88:e2:35:12:cc:27:dd:96:d2:3e:12:2a:15:9b:6e:
10:74:9e:db:cc:1d:5a:28:78:d6:2e:31:b1:63:52:d4:4f:e9:
ed:2f:da:3f:64:f4:9c:4b:b0:12:85:9e:ff:04:04:1f:26:81:
a6:65:3c:3a:d4:9d:a9:8b:f1:8a:88:35:70:35:51:fe:20:09:
8f:d1:dc:c6:7d:73:0b:1b:98:98:0e:27:53:be:81:16:c5:cb:
0b:bf:7a:f3:9b:68:ba:59:32:18:9d:de:7d:10:95:dd:c2:de:
ff:9a:f1:42:7e:4d:34:8b:71:60:7a:f9:9e:24:09:87:47:fd:
3a:ee:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:06 2025 by rpki-client