Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OZOuYiJQiyyuSisBPkl4BJ6B2bM.roa
File: OZOuYiJQiyyuSisBPkl4BJ6B2bM.roa (raw, json)
Hash identifier: GfF/lhKIsKDGxDw5eRBuv9pnjQD+ObyVeymHROIAons=
Subject key identifier: 39:93:AE:62:22:50:8B:2C:AE:4A:2B:01:3E:49:78:04:9E:81:D9:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019512B7B0870CD5918E3FC7A2AAD8FBABD8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OZOuYiJQiyyuSisBPkl4BJ6B2bM.roa
Signing time: Mon 17 Feb 2025 07:03:02 +0000
ROA not before: Mon 17 Feb 2025 07:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 31.58.68.0/22 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.100.0/22 maxlen: 24
31.59.29.0/24 maxlen: 24
31.59.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 07:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:b7:b0:87:0c:d5:91:8e:3f:c7:a2:aa:d8:fb:ab:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 17 07:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3993ae6222508b2cae4a2b013e4978049e81d9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:5b:ba:06:26:c0:3e:f4:69:37:f5:88:ae:
ed:8b:24:57:3a:60:d2:56:6d:0c:cf:30:04:63:d8:
b0:63:0a:67:dd:37:aa:91:d4:56:a5:ca:77:9c:7b:
85:e7:b3:30:b1:6b:cf:a8:3b:3a:c1:f3:d7:f6:ee:
80:f5:9b:34:dd:c4:47:66:96:15:55:87:b6:c8:4d:
c7:c4:9a:76:46:b3:98:96:17:08:f1:2f:4d:6a:6e:
91:5b:4e:a1:d9:0c:d2:c9:26:f0:1b:e9:a0:a4:98:
ad:6d:6a:00:b6:dc:a7:26:a9:10:4e:81:cc:e5:21:
40:56:e1:92:60:5f:36:43:47:81:88:f2:42:84:0a:
1b:29:70:1b:f9:66:3e:f6:3b:c8:74:68:17:8a:96:
02:fe:49:e5:94:9f:25:bd:08:44:aa:cc:4b:d0:0d:
50:85:20:06:31:c0:75:81:06:a9:2e:b5:76:31:4b:
4b:78:08:7b:4e:e8:68:69:b2:55:ae:c8:9a:ed:df:
b6:ad:aa:60:b6:db:72:a9:40:79:be:37:79:fe:cd:
fc:03:8e:bc:07:f2:4c:73:46:ed:e0:d9:4d:5d:d7:
c9:c5:8b:86:6d:a1:e1:31:ab:6e:ed:f6:6d:c6:f9:
62:38:c1:00:91:c4:46:17:da:87:7c:7d:88:24:65:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:AE:62:22:50:8B:2C:AE:4A:2B:01:3E:49:78:04:9E:81:D9:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OZOuYiJQiyyuSisBPkl4BJ6B2bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.68.0/22
31.58.76.0/22
31.58.84.0/22
31.58.92.0/22
31.58.100.0/22
31.59.29.0/24
31.59.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d8:1b:79:a3:93:73:56:d7:43:18:11:2e:06:de:ad:49:1f:
ea:02:d6:49:6e:43:3f:c1:99:55:0c:dd:68:ac:6b:a0:bd:02:
0b:c0:f1:79:a8:5c:41:3a:6c:14:0d:37:63:af:f9:7d:ce:6d:
a2:02:dd:0f:16:2b:9c:24:87:cc:0e:a6:02:a8:5b:20:44:a6:
25:aa:1a:52:72:07:3b:0e:06:31:e5:61:a4:f3:0b:42:7d:2b:
fc:f3:10:02:a3:2f:75:b1:09:5a:90:19:eb:5c:25:58:e6:33:
7f:3e:f8:25:17:75:0b:9f:04:e1:21:27:59:55:8d:a2:fb:37:
d9:b0:e2:f1:3f:9f:60:6e:a4:c5:df:3a:9b:cf:e6:7c:79:6d:
14:74:58:29:5b:c0:0f:2a:82:df:c6:2e:bb:7b:2d:88:22:eb:
60:b2:4b:64:4c:92:cf:99:7d:50:85:6e:5f:87:b9:3c:a1:7e:
0a:be:11:2f:53:85:c7:e2:e7:aa:3d:aa:5e:4b:26:f5:8e:dc:
26:ae:d9:56:c6:c0:df:95:61:6b:bf:cf:83:72:6e:be:c0:7e:
3d:48:a7:59:a3:aa:92:9b:ab:7e:84:ba:dc:7b:9a:76:2d:b9:
99:07:f1:87:b0:1e:a5:d1:bf:dd:9e:8a:b8:7d:53:9a:97:73:
ed:28:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:46 2025 by rpki-client