Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OrTbTirB9q5eH3aO7KG-mpD4Du0.roa
File: OrTbTirB9q5eH3aO7KG-mpD4Du0.roa (raw, json)
Hash identifier: JR3mfWTwCP9TbLoI0yOqVitrkCbd/oDH7pODszjEh3I=
Subject key identifier: 3A:B4:DB:4E:2A:C1:F6:AE:5E:1F:76:8E:EC:A1:BE:9A:90:F8:0E:ED
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955B9C3A1F7139E111830B1E1F5D7FD618
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OrTbTirB9q5eH3aO7KG-mpD4Du0.roa
Signing time: Mon 03 Mar 2025 10:45:19 +0000
ROA not before: Mon 03 Mar 2025 10:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 31.57.32.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Mar 2025 16:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:9c:3a:1f:71:39:e1:11:83:0b:1e:1f:5d:7f:d6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 10:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ab4db4e2ac1f6ae5e1f768eeca1be9a90f80eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:87:ca:4e:06:8e:25:5b:89:bc:b7:5a:94:
bb:ec:b2:1a:b6:5e:24:5c:0e:8c:62:45:17:db:ad:
63:62:df:95:db:c9:7c:62:f1:dd:bc:f0:12:ff:5d:
61:8b:71:af:2c:d2:b6:c2:9c:49:29:2d:6e:9d:70:
15:cb:1e:4d:94:40:8b:27:84:70:ec:74:34:3a:3e:
04:7e:28:81:8b:c3:57:09:8a:e4:7c:01:99:63:67:
11:f6:be:b2:72:fd:7a:82:5f:ad:45:5f:09:e2:03:
82:52:6b:21:37:d2:ff:e4:ad:04:7d:6f:98:c4:af:
03:73:cb:f6:89:2a:6a:43:cd:59:8f:ca:35:8b:04:
14:58:e2:cf:ad:0f:d3:45:22:87:57:8a:43:b8:c3:
d0:55:0b:7f:86:2a:a3:18:3f:ab:ff:41:cb:1f:bd:
49:ca:85:64:aa:1c:a3:a5:0e:9a:99:15:a3:28:44:
1b:ce:6c:4f:7b:7a:ee:9f:20:7f:99:82:bc:ac:36:
25:28:cf:e1:1a:50:da:f1:01:fe:88:92:7c:2f:14:
bd:f0:cf:18:e2:f4:db:9a:2f:f0:06:54:70:d4:dd:
f8:39:d4:7b:7a:4e:c6:c2:74:ce:d8:6c:7a:a6:c1:
aa:ab:1a:2e:90:10:55:98:a0:49:92:50:4a:ca:b1:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:DB:4E:2A:C1:F6:AE:5E:1F:76:8E:EC:A1:BE:9A:90:F8:0E:ED
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OrTbTirB9q5eH3aO7KG-mpD4Du0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.32.0/24
31.58.172.0/22
31.59.76.0/22
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:d1:4d:c4:a8:60:9f:fc:a0:b7:aa:7b:c1:e6:cb:3e:df:1f:
e8:ea:c2:b6:45:83:de:85:d2:3c:0c:d5:0f:24:b9:e6:ac:fd:
c4:ea:a3:1d:98:c9:8e:8b:91:3d:10:1e:a2:70:98:af:68:52:
c1:97:3d:0a:3a:0a:43:af:e5:c2:0f:9f:c4:df:18:3f:eb:3d:
96:59:bf:6a:57:a3:22:3e:61:b4:85:c6:98:6b:21:50:c4:f8:
d3:7c:6b:72:9c:c5:7d:24:69:5d:7c:1b:48:2a:02:65:96:a0:
52:50:c9:7a:5b:db:4b:3c:59:49:7a:3a:dd:35:87:55:28:8d:
95:7b:09:76:6f:4b:84:f4:d2:86:54:42:89:59:df:04:1b:69:
e4:77:8f:71:3f:1f:a9:e9:37:45:a0:2d:f3:9a:6d:a6:d7:63:
34:fc:3b:eb:ca:41:b6:ad:f3:b6:e9:c6:22:36:23:09:26:48:
01:8a:a8:ea:66:d2:b6:8c:34:1b:6a:fd:99:7c:58:40:51:d3:
86:b2:17:e2:ce:d9:b3:59:8b:99:7c:72:84:25:58:9f:e4:d2:
7b:f7:2f:1c:4d:be:f5:02:4c:41:29:17:3c:6e:5b:35:48:e3:
10:0a:a4:5d:64:8d:3b:30:0b:9e:c1:d4:a1:9a:6c:60:f7:00:
10:16:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:49:32 2025 by rpki-client