Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JN6vUgFE1Cb_83RwBeKvSu0j8no.roa
File: JN6vUgFE1Cb_83RwBeKvSu0j8no.roa (raw, json)
Hash identifier: 9kqdjabh5U+iMmIX6DUQt+m7K4wJPhqKDGvkaOpRQDQ=
Subject key identifier: 24:DE:AF:52:01:44:D4:26:FF:F3:74:70:05:E2:AF:4A:ED:23:F2:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01939C3F6D3576A33DE129FA32964409C1FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JN6vUgFE1Cb_83RwBeKvSu0j8no.roa
Signing time: Fri 06 Dec 2024 13:53:42 +0000
ROA not before: Fri 06 Dec 2024 13:53:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214979
IP address blocks: 31.56.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 12:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:3f:6d:35:76:a3:3d:e1:29:fa:32:96:44:09:c1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 6 13:53:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24deaf520144d426fff3747005e2af4aed23f27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:b2:77:a0:bc:16:77:b0:09:cf:a7:69:83:
32:d5:68:9d:d0:79:f6:bd:73:59:2a:ba:0a:3a:82:
90:cd:85:10:97:a8:6f:27:75:ed:22:8b:80:d7:94:
81:f4:47:61:3b:0c:10:3f:46:c2:7d:04:0f:ba:90:
36:5f:f0:4a:1d:71:37:19:f7:3e:4f:0f:8f:c2:45:
52:4f:e2:6f:47:cd:d9:65:ca:ed:66:10:fb:1a:b7:
42:b7:d4:ed:55:59:c6:d7:12:21:45:87:b3:55:93:
de:fd:13:d2:72:26:15:25:e3:56:3d:d7:66:1b:0d:
5c:b7:aa:df:52:94:95:76:d2:fe:98:33:b4:0c:cd:
06:78:48:05:04:4c:cc:03:b6:79:5b:09:34:20:ae:
28:03:8c:7d:46:02:90:a8:ab:01:26:63:60:9c:aa:
a5:d2:b3:2c:43:cb:a9:a9:43:c3:bf:f4:8d:ac:ee:
66:84:57:46:2d:c8:1f:88:87:14:c9:9a:84:33:37:
b2:48:0b:64:0b:8e:24:06:64:c1:e2:a1:8a:ea:dc:
7d:93:46:ce:d4:3d:b3:c1:5d:f1:25:35:65:83:bf:
06:3e:93:c5:45:d7:92:af:70:6c:f9:5e:fa:e2:91:
b9:92:30:00:8c:fe:10:5a:3b:67:2f:a7:28:9f:25:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:AF:52:01:44:D4:26:FF:F3:74:70:05:E2:AF:4A:ED:23:F2:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JN6vUgFE1Cb_83RwBeKvSu0j8no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:cb:87:3d:3f:7d:01:90:f0:7b:bb:1f:11:d0:44:fc:14:8f:
a4:a4:7e:c9:0f:46:0a:88:28:1c:57:d2:62:47:a0:47:20:e5:
1e:e4:12:ee:a5:47:cd:2c:23:07:6c:81:19:d2:ac:22:46:d9:
45:4b:e4:8e:ad:c5:58:c6:34:a7:12:8d:de:4f:2b:79:c6:32:
f9:a8:0b:d5:3c:28:a4:65:c1:33:a6:8a:ea:a0:01:8f:bb:9d:
08:ce:9b:78:b3:e2:ce:21:a6:7f:91:ab:f5:50:c2:3d:61:be:
24:ee:52:ad:cd:71:28:d4:82:01:54:ab:d0:57:1b:93:c3:5a:
88:22:f9:88:d8:0e:55:3b:93:ba:49:31:6c:f6:12:f5:9d:5c:
e8:62:92:50:2b:bb:e9:6c:c4:a3:8a:1a:3e:83:05:0a:29:c3:
02:a5:05:ad:49:6f:d9:23:a6:18:9f:f6:79:66:5d:50:2f:25:
89:bd:1a:71:cf:b9:44:ab:f2:86:10:bc:75:c8:1e:d1:90:3f:
63:3c:a4:cc:e4:97:8a:52:f7:07:5c:89:97:aa:fb:e9:10:d5:
4f:cd:d1:3a:76:5d:2e:4d:61:7e:55:ea:eb:bf:6b:1d:9d:4b:
91:1b:99:77:cc:43:42:ea:2f:81:1b:65:41:bc:b1:01:4e:25:
a0:df:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:05 2025 by rpki-client