Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L4TBBdcjd4z7u6s_D66oVfDZORc.roa
File: L4TBBdcjd4z7u6s_D66oVfDZORc.roa (raw, json)
Hash identifier: EiM5tkbhBSAaX4XPZWasYM8fNwCFx7wmsndFVVI+Jk4=
Subject key identifier: 2F:84:C1:05:D7:23:77:8C:FB:BB:AB:3F:0F:AE:A8:55:F0:D9:39:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193A6058FB7DBDC3914406CA96A5476F37A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L4TBBdcjd4z7u6s_D66oVfDZORc.roa
Signing time: Sun 08 Dec 2024 11:26:42 +0000
ROA not before: Sun 08 Dec 2024 11:26:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214746
IP address blocks: 31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 19:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a6:05:8f:b7:db:dc:39:14:40:6c:a9:6a:54:76:f3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 8 11:26:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f84c105d723778cfbbbab3f0faea855f0d93917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:f0:88:61:70:d6:fb:53:ab:a8:1c:ce:09:
a9:de:13:c0:c0:a7:ca:0c:7a:0e:09:95:4c:58:c8:
da:d0:16:35:21:3f:6d:3f:80:5e:3f:85:20:67:9c:
23:7e:bd:6d:94:d3:c2:1c:59:af:e2:b4:63:4a:c4:
36:25:e6:f0:a4:0c:2b:1d:55:3d:ab:2f:75:1c:08:
be:e7:7a:80:8f:3c:5f:39:cb:36:20:83:97:ab:c6:
d0:55:9f:d8:8e:0e:8f:f2:08:5c:54:d7:f4:08:1e:
9d:42:59:16:45:40:0f:76:c3:34:ac:f5:02:11:52:
82:d0:53:54:8b:40:cf:fe:41:a9:91:f0:2f:73:7a:
a6:95:c3:89:ba:f8:c1:46:e5:01:a3:94:65:33:a3:
65:d9:db:d8:03:dd:a2:4a:2a:14:83:5d:7f:37:f6:
e5:51:b7:90:a1:10:cf:49:9c:a9:08:24:44:07:4c:
2b:42:69:d5:4e:e3:27:fb:91:5c:93:42:2e:66:f1:
f6:7c:0c:fe:75:4f:7c:ce:44:13:f4:06:f9:6f:cd:
1c:24:9e:ea:af:00:e1:ed:18:42:4c:59:4e:ed:b3:
e3:a8:03:4b:61:a1:8a:87:37:82:68:72:c4:48:7c:
30:11:da:e5:75:41:6d:18:11:62:fd:e0:53:e4:5c:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:C1:05:D7:23:77:8C:FB:BB:AB:3F:0F:AE:A8:55:F0:D9:39:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L4TBBdcjd4z7u6s_D66oVfDZORc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.112.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:a9:2d:d9:20:86:94:d4:1f:60:bd:7a:da:10:b6:e1:0d:d0:
fc:9d:5b:fc:ef:34:0d:26:b1:b7:39:a0:43:66:76:d5:31:1f:
f4:a7:e8:6c:ef:90:69:40:1f:04:ce:19:b9:f3:23:92:45:8f:
90:41:4d:b8:02:45:47:65:94:d7:7d:70:36:18:8a:08:8c:c7:
b9:14:93:b4:6f:71:91:e3:ac:7f:d7:13:00:3e:b5:aa:04:74:
83:19:83:91:8e:20:0a:70:e8:47:71:10:de:84:00:e9:80:4b:
5e:a3:8a:0e:d7:9a:d0:c6:62:e6:27:ba:c9:6d:a2:57:ae:bd:
1a:46:27:85:48:f4:0f:6c:0e:4e:cc:2f:11:5a:72:29:e3:2b:
38:bb:8f:f7:9a:c9:fd:d5:9f:d8:7b:0a:10:39:77:31:15:56:
e5:33:79:99:9c:3c:e6:c3:db:2f:b1:bd:74:7f:29:b3:c4:af:
e2:24:8f:b7:a9:26:b0:b5:f8:36:23:1f:79:df:12:14:42:e1:
82:10:1a:91:c6:9c:dd:a6:65:26:b1:31:d0:26:e2:2f:04:27:
01:16:62:62:93:54:7a:96:f1:74:bb:c4:6f:77:c3:90:93:cc:
a3:f1:13:a3:01:31:47:28:47:10:fa:0f:8a:be:47:7f:75:95:
98:c1:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:42 2025 by rpki-client