Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MCYzOGkEF_PwuOk6nNr9f34uQFc.roa
File: MCYzOGkEF_PwuOk6nNr9f34uQFc.roa (raw, json)
Hash identifier: ial6xqHX01h2FrOSUcWuqB5lUrVAtZ8op2XGK+DBMXY=
Subject key identifier: 30:26:33:38:69:04:17:F3:F0:B8:E9:3A:9C:DA:FD:7F:7E:2E:40:57
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193BB9FF5E6AF326A6FAB5F3894FF060FFF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MCYzOGkEF_PwuOk6nNr9f34uQFc.roa
Signing time: Thu 12 Dec 2024 16:07:22 +0000
ROA not before: Thu 12 Dec 2024 16:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198020
IP address blocks: 31.56.108.0/24 maxlen: 24
31.56.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:9f:f5:e6:af:32:6a:6f:ab:5f:38:94:ff:06:0f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 12 16:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30263338690417f3f0b8e93a9cdafd7f7e2e4057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:5e:04:c0:db:03:8c:3f:be:65:95:b6:af:
ec:97:f7:06:22:da:bb:ea:96:37:2c:a5:d1:37:4b:
46:3e:b2:21:6c:f8:9e:2f:9d:ff:b3:da:d1:7e:fe:
27:cf:87:1f:57:69:8d:eb:f2:50:54:68:25:e1:83:
68:34:64:72:01:36:9c:1b:bf:b3:a0:16:ae:44:2b:
4d:1b:7f:d6:8a:d2:9d:5e:d0:1d:1c:79:ad:c0:f0:
6a:e2:86:7e:a8:1f:3d:62:d1:3f:c8:55:16:88:7e:
0b:76:db:08:2c:dd:89:35:b6:dc:6c:dd:de:65:71:
35:fc:ca:c7:79:53:dc:17:ac:83:b0:a3:dc:13:89:
ce:21:33:e1:ee:29:58:d0:d8:18:9b:b1:f1:14:b9:
46:f0:73:20:96:84:67:5e:47:99:77:8d:38:27:42:
e8:a2:7e:db:d0:bf:b1:73:de:6b:c2:83:23:36:3d:
e2:48:7c:57:ad:31:42:bf:3f:13:57:21:01:a0:36:
69:1b:72:23:b2:6c:05:92:e9:a9:ed:72:e5:1f:43:
a8:34:18:ef:fb:37:f3:1c:d0:bb:a0:02:c5:27:fd:
82:75:4e:8a:c0:c3:88:3b:d8:70:41:3d:8e:65:78:
3d:1d:f1:7f:92:fa:dc:f2:91:f8:d5:5b:47:bc:ab:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:33:38:69:04:17:F3:F0:B8:E9:3A:9C:DA:FD:7F:7E:2E:40:57
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MCYzOGkEF_PwuOk6nNr9f34uQFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.108.0/23
Signature Algorithm: sha256WithRSAEncryption
17:d4:5a:7e:f1:ec:ce:c1:f9:3c:ac:c6:93:aa:b8:00:0a:da:
ef:cf:f9:b1:cc:e3:8e:f3:4d:5a:df:e1:89:90:a2:d1:50:c6:
98:75:ef:0f:7c:35:cd:e3:ad:c1:f7:73:c8:6e:27:1a:61:e4:
fb:d1:d5:d1:33:03:65:14:db:d5:6a:90:70:ec:f0:da:05:c0:
86:ef:12:05:78:32:8d:e2:10:ca:24:d9:87:ff:88:3b:17:e0:
22:39:0d:98:c4:6c:25:16:ec:f1:1b:88:c1:4f:06:f8:17:cf:
aa:06:e9:16:66:7e:6b:32:5b:5a:d1:f0:e8:21:09:a6:f4:75:
fd:6f:1b:67:6b:b6:dd:80:58:05:05:34:0c:67:64:98:b6:fb:
2e:12:88:8b:7f:f0:8f:71:1d:ec:d7:de:15:ce:19:bb:7c:92:
5f:e6:e0:6c:b1:bd:20:67:03:2f:44:df:0a:b1:39:5e:dd:cc:
aa:c0:2f:d7:07:01:d2:28:e0:1d:83:c5:b7:96:99:ce:4e:64:
e4:57:8e:74:fb:12:15:25:10:f0:eb:ce:66:ec:e2:c5:aa:d3:
13:87:5f:08:53:83:79:66:ec:32:88:5d:6c:79:ae:7c:4c:ab:
0f:6c:c0:0a:ec:7e:14:10:7e:f0:f0:36:87:12:ef:35:ed:4e:
ee:0e:41:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:12 2025 by rpki-client