Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PPeeZraSELu-exEisyicuUpTH-I.roa
File: PPeeZraSELu-exEisyicuUpTH-I.roa (raw, json)
Hash identifier: baLX4uzp7RKk8B7xraj0CG6k9vc4BxeTfEMsupQLt7s=
Subject key identifier: 3C:F7:9E:66:B6:92:10:BB:BE:7B:11:22:B3:28:9C:B9:4A:53:1F:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193D59E0297D842F9BB4A495E6C1B4A50F4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PPeeZraSELu-exEisyicuUpTH-I.roa
Signing time: Tue 17 Dec 2024 17:15:22 +0000
ROA not before: Tue 17 Dec 2024 17:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 31.58.211.0/24 maxlen: 24
31.58.232.0/23 maxlen: 24
31.58.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:9e:02:97:d8:42:f9:bb:4a:49:5e:6c:1b:4a:50:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 17 17:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cf79e66b69210bbbe7b1122b3289cb94a531fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:02:75:08:6b:b2:26:e3:59:87:7e:cf:dd:e9:
4b:d5:d5:5e:81:5c:cf:db:2d:04:01:cb:ea:de:15:
48:22:1b:85:32:41:1f:d3:60:40:8b:30:99:a0:e4:
86:24:10:96:82:d9:d5:cd:f9:c5:ce:5a:13:85:63:
7f:e9:c5:41:1b:0f:49:0c:41:d1:df:da:e0:d6:c6:
73:a2:ef:34:59:07:2b:0a:5b:c9:cd:d2:58:73:7c:
d3:d3:eb:e0:f7:60:51:32:db:46:e5:9e:78:83:58:
21:86:54:92:c3:b1:a5:a0:66:92:a9:75:5a:f8:e3:
38:7d:5b:a4:f5:23:39:82:48:b2:95:db:fc:3c:08:
48:a6:99:a5:d8:e3:3b:56:34:cb:57:57:50:43:e9:
dd:7b:a8:d2:1b:b3:a8:71:72:6f:71:c4:f9:c2:e7:
ef:a2:7c:8c:5c:26:64:2c:ef:90:51:33:22:0a:77:
5f:2e:12:1c:7e:09:5a:03:ca:fc:54:79:a0:4c:07:
e3:25:49:0f:c8:74:6f:13:34:4d:ca:56:c4:d0:c1:
f4:59:d2:34:0e:02:df:90:96:7c:34:28:0a:57:65:
44:b5:f0:3e:61:b0:bb:09:fc:02:ee:d6:3e:57:1e:
06:56:5b:9d:d1:f2:dc:dd:27:22:26:13:dc:ee:41:
8a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:9E:66:B6:92:10:BB:BE:7B:11:22:B3:28:9C:B9:4A:53:1F:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PPeeZraSELu-exEisyicuUpTH-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.211.0/24
31.58.232.0-31.58.234.255
Signature Algorithm: sha256WithRSAEncryption
7b:28:ca:a6:63:3a:c5:07:d2:fc:72:95:f2:74:7a:15:96:33:
fc:e3:f0:bc:23:eb:14:f5:b1:03:59:a5:f0:ab:c9:00:09:73:
62:55:37:44:6e:1e:ec:a2:b7:e6:e8:59:f4:52:29:92:c8:42:
f7:79:20:34:6a:9a:e1:b5:f7:a8:8f:a3:20:3b:3a:cb:6d:38:
71:d9:5d:6f:1b:81:25:d8:3a:9a:9f:ee:80:67:47:c0:da:e3:
75:1b:db:f0:10:4d:34:7c:25:83:2d:51:be:b8:9f:da:3e:31:
a3:91:79:23:6b:fa:3e:31:6d:00:ea:65:c7:41:cf:bb:2e:1b:
b6:da:cd:39:b6:e8:b4:03:e3:e6:f9:ab:ae:63:88:c3:f9:fe:
05:5d:4f:64:6c:31:9c:f5:12:d3:92:6d:7f:ed:a0:ba:6c:38:
47:06:fe:0e:5e:af:3e:6f:1f:9e:8a:a1:81:b8:fb:1a:d9:57:
42:4b:ee:39:2d:52:f6:1b:a2:d6:b7:78:27:f5:5f:0e:93:c1:
a0:de:3c:19:b5:33:88:c1:45:2d:e9:ad:97:11:bc:eb:c9:53:
7b:e5:58:60:0c:61:a3:70:ce:63:10:2a:6f:c0:36:95:72:a3:
41:3a:25:e6:24:63:9f:7a:8a:3c:9d:da:6b:3e:50:37:63:70:
34:9c:28:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:38 2025 by rpki-client