Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QaWhNIgcvBv5-qcLbRgPf5lALro.roa
File: QaWhNIgcvBv5-qcLbRgPf5lALro.roa (raw, json)
Hash identifier: 7BF8An0f1jlaxIbu0v/uLqxRVk+SnEaehxXizpTll68=
Subject key identifier: 41:A5:A1:34:88:1C:BC:1B:F9:FA:A7:0B:6D:18:0F:7F:99:40:2E:BA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428237F40204E2E39350014E03FB725FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QaWhNIgcvBv5-qcLbRgPf5lALro.roa
Signing time: Thu 02 Jan 2025 17:50:02 +0000
ROA not before: Thu 02 Jan 2025 17:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215523
IP address blocks: 31.57.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 08 Jan 2025 07:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:7f:40:20:4e:2e:39:35:00:14:e0:3f:b7:25:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41a5a134881cbc1bf9faa70b6d180f7f99402eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:3a:52:61:28:52:04:59:87:04:c1:15:46:
dd:9b:3e:68:57:ec:68:0a:a3:09:15:ba:68:be:47:
41:3f:b3:47:74:5e:c3:d9:79:b7:79:aa:5e:fe:77:
59:9b:a4:f2:00:bf:c6:41:38:d3:a2:91:82:fe:c6:
66:8b:ab:37:44:a8:61:29:98:63:30:b0:b8:eb:84:
07:76:6d:47:62:3d:c3:ff:6f:d8:e9:04:36:32:33:
85:e5:31:a9:51:75:ba:4a:49:bc:30:6e:1f:58:1c:
23:4b:d6:36:93:c6:8d:ee:d3:f9:32:55:de:aa:84:
6c:1a:c3:7c:b2:7b:f1:da:d0:36:22:f5:0c:33:a3:
e8:b1:a5:fb:de:e0:68:a8:4a:b2:19:32:7a:e6:a0:
85:50:5d:28:b9:a0:33:ab:47:e4:45:df:25:18:1c:
64:39:d2:ab:70:4b:a0:86:30:30:03:27:ed:53:03:
57:56:7f:ad:72:42:3c:d4:7d:cb:a0:9f:d5:df:be:
26:23:1e:62:b0:77:1f:e9:7b:1c:35:f5:f8:2f:cc:
94:ef:03:9a:c6:4f:fb:9b:73:e0:d6:06:fd:27:7a:
58:4b:e7:2e:63:66:4a:7e:f4:70:75:a5:96:34:d5:
75:3a:94:80:95:45:10:e9:2d:ac:8e:cb:e3:95:29:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A5:A1:34:88:1C:BC:1B:F9:FA:A7:0B:6D:18:0F:7F:99:40:2E:BA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QaWhNIgcvBv5-qcLbRgPf5lALro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.136.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:d5:04:ef:5e:b9:62:c7:47:ce:4d:06:d3:1b:98:52:a7:70:
d6:6b:fd:20:5b:5e:4c:8e:c1:e2:3f:7c:79:3f:1b:cb:fd:a3:
24:e9:63:22:88:83:e1:e4:ca:af:85:8f:7e:5c:30:ea:a0:8f:
07:19:b8:b9:78:2e:0a:e3:91:38:8f:13:c0:20:5e:c6:36:bf:
14:db:e9:0f:72:99:49:8f:96:8b:44:2f:f6:3d:2e:3b:a5:57:
c0:c7:47:c6:bb:49:22:4a:d9:bd:5e:23:73:a6:2b:cb:5e:e3:
c2:a8:35:e4:0d:45:7c:4a:0f:63:7b:eb:6a:1a:b2:c9:39:e4:
f8:e9:aa:a8:21:a3:64:35:63:e0:c8:0b:09:21:c3:88:c2:07:
3b:eb:80:0e:03:88:bd:52:98:aa:bd:28:9a:11:c7:97:16:17:
e0:15:67:c2:55:02:65:94:18:e8:46:8f:23:af:9f:ac:5a:61:
c6:8a:7a:d7:21:1e:00:88:77:0f:57:ca:39:3b:29:4a:8c:ef:
dd:f7:3f:2d:7c:06:5d:00:88:69:3e:f8:a2:7b:d7:ff:f6:3f:
93:07:d3:b3:11:a8:bb:7d:1f:5b:20:76:cb:c3:43:fc:cd:c1:
13:b2:6c:67:ed:00:e0:2c:e4:fd:aa:4d:76:8c:c4:0f:4f:c5:
ca:93:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:17 2025 by rpki-client