Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ms78kaAR3Bt5465N0YxztEzrGoQ.roa
File: Ms78kaAR3Bt5465N0YxztEzrGoQ.roa (raw, json)
Hash identifier: wjZ32ZmL+seZ2NIDObYhqxCaLtxAjJcsJcfcW08BB5k=
Subject key identifier: 32:CE:FC:91:A0:11:DC:1B:79:E3:AE:4D:D1:8C:73:B4:4C:EB:1A:84
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019576742D61511830B1BF0CDC54C39401AE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ms78kaAR3Bt5465N0YxztEzrGoQ.roa
Signing time: Sat 08 Mar 2025 15:51:20 +0000
ROA not before: Sat 08 Mar 2025 15:51:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.58.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 13:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:76:74:2d:61:51:18:30:b1:bf:0c:dc:54:c3:94:01:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 8 15:51:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32cefc91a011dc1b79e3ae4dd18c73b44ceb1a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:e4:63:cf:67:26:54:f6:9e:c0:aa:dc:d4:
47:be:f6:09:88:dc:46:a1:49:57:5a:13:60:6f:37:
d8:29:3f:0f:04:26:de:35:c7:03:68:75:10:e1:d9:
b7:a0:a1:cb:e8:12:7e:c3:ef:49:3c:5c:34:2a:6e:
64:72:83:24:e3:de:89:a0:c5:05:ff:70:81:dd:c3:
08:6c:be:fe:c1:80:3f:bf:a5:69:c5:75:e6:57:9d:
95:19:b6:b4:59:37:22:07:52:16:e7:30:c4:13:5d:
95:73:66:9d:3d:54:07:1a:45:c7:6b:5f:1d:ba:ff:
6c:1b:3d:c3:59:14:94:6a:5d:e3:5d:1a:99:62:27:
5e:63:8b:8d:fd:8f:57:18:ea:72:63:e7:1e:6e:bf:
15:ae:94:45:22:de:d2:e6:d2:65:34:11:1e:07:a6:
fe:86:13:15:26:89:21:92:0e:f0:be:ff:8e:b3:d6:
d9:db:b5:e4:d7:e1:55:5f:a7:f4:20:e9:b5:0f:39:
5f:fc:52:3c:0e:c5:70:da:96:68:f5:ec:61:9d:2a:
b1:4b:96:ee:9b:b3:8b:f8:56:94:c7:ed:6f:cc:0f:
1a:2d:99:2e:42:e9:bd:ae:20:6f:db:bc:07:f4:fc:
78:ba:8a:b4:73:67:2c:81:88:5e:e1:25:e9:3f:62:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CE:FC:91:A0:11:DC:1B:79:E3:AE:4D:D1:8C:73:B4:4C:EB:1A:84
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ms78kaAR3Bt5465N0YxztEzrGoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.87.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1e:97:f0:17:49:2d:cc:60:85:98:25:a5:80:fb:ad:2a:2c:
c3:0a:26:30:58:b0:ff:51:26:0f:23:c3:ff:2a:0e:d3:8f:d7:
c4:be:f7:c5:99:f4:f9:ec:45:27:c2:98:98:cd:38:9d:ad:4b:
12:a1:bf:33:6a:b4:52:3f:aa:3c:42:08:29:ff:88:45:18:92:
62:42:74:bc:72:8a:15:fd:58:ec:53:ea:ed:70:ef:70:44:15:
be:30:2e:64:8b:e6:1f:fb:6e:c4:e4:f5:e2:2e:15:da:1f:3c:
f4:6d:5f:24:f4:8f:b3:ca:82:be:a8:e2:93:49:fc:b3:a6:de:
13:1f:f6:a4:01:3d:dc:98:f6:ce:a5:bf:37:ec:c0:31:1d:49:
c1:78:f5:fb:f2:cd:13:ad:2e:95:49:18:87:c9:1c:b5:a6:c4:
b8:00:ea:1d:0f:50:3a:39:0e:43:0a:2c:ed:d6:13:c3:d0:aa:
f9:c6:d1:37:45:39:85:b0:8c:21:d8:84:6a:f9:f1:6a:aa:88:
ca:d1:c2:00:fc:89:39:9d:fe:84:de:89:61:8e:2d:16:f3:b9:
67:cf:d8:4e:86:d1:c2:ab:6d:5f:cd:af:2b:cd:dc:c5:c9:17:
03:3a:cd:8c:f1:7c:5b:55:b9:04:8c:53:fb:8a:28:d4:96:d8:
9f:a8:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:05:13 2025 by rpki-client