Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R4NqlKeuqSLS_6Pc78ipkus4_44.roa
File: R4NqlKeuqSLS_6Pc78ipkus4_44.roa (raw, json)
Hash identifier: AULSZii/nAXFoPamCaSzNcVHQbz2u2oc4Ik2Ba3yJaE=
Subject key identifier: 47:83:6A:94:A7:AE:A9:22:D2:FF:A3:DC:EF:C8:A9:92:EB:38:FF:8E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193505C5AA70A7A93A8090109D8BE3DDDCA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R4NqlKeuqSLS_6Pc78ipkus4_44.roa
Signing time: Thu 21 Nov 2024 20:14:10 +0000
ROA not before: Thu 21 Nov 2024 20:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 31.57.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Dec 2024 10:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:5c:5a:a7:0a:7a:93:a8:09:01:09:d8:be:3d:dd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 21 20:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47836a94a7aea922d2ffa3dcefc8a992eb38ff8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:78:82:3e:db:48:52:b1:5c:f6:71:ef:fd:
c4:5a:d1:dc:14:6b:d5:6f:2e:cc:50:00:ab:41:70:
a9:44:1b:48:13:b1:7b:e6:21:a3:79:8d:a8:53:3a:
5d:c9:d4:8f:80:4a:92:e0:e2:c1:98:55:f3:07:5b:
2a:35:1e:3f:e5:20:02:d0:82:40:29:e9:91:67:ba:
da:d5:ff:8f:f7:78:45:e4:d9:b6:1c:5b:0d:b9:0a:
2a:5a:a6:d2:75:64:49:fc:d7:52:d5:fe:a8:38:fe:
83:c8:5a:38:81:71:58:9c:ef:20:c2:f8:13:e6:7d:
95:3f:f2:75:27:9c:f3:fd:96:14:69:07:6a:b5:4d:
a5:05:8d:89:b9:98:69:cd:07:3f:77:0c:89:d6:78:
0b:0f:cc:8a:a1:92:38:6b:09:9c:1e:90:d2:ba:49:
fd:12:ee:e6:06:b8:8d:5e:b3:09:ac:1d:92:8d:3a:
d4:18:1f:8a:79:11:4b:3b:f6:b5:8e:ad:4d:09:d2:
66:c6:17:c8:fc:2e:75:ea:b1:09:be:c0:ef:86:14:
7e:b6:7a:77:06:8c:cb:ef:36:a2:ab:dc:5f:15:ca:
41:ba:2d:01:7b:0e:38:2d:16:a2:29:55:0b:c0:c2:
51:63:0b:67:e1:f3:e6:db:bf:56:7f:8f:5a:3d:2b:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:83:6A:94:A7:AE:A9:22:D2:FF:A3:DC:EF:C8:A9:92:EB:38:FF:8E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R4NqlKeuqSLS_6Pc78ipkus4_44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.147.0/24
Signature Algorithm: sha256WithRSAEncryption
72:75:97:ac:30:fa:33:0e:30:2e:ee:ec:ea:99:5a:3e:6d:f9:
07:24:2e:e9:b4:31:da:4e:f5:43:dc:91:4e:84:1e:14:83:ea:
7f:da:9b:c1:27:64:52:24:82:80:d5:0e:42:6d:80:5c:2b:c6:
d7:42:9d:50:cf:09:94:71:88:a1:2c:f8:00:b6:f9:03:5a:88:
50:dd:9f:2f:f9:15:6d:1a:70:d0:02:8b:17:14:cb:65:90:d3:
63:f8:7c:d7:15:9b:99:a3:88:f4:4b:ea:5a:51:71:bb:ca:6c:
3b:35:66:c9:3f:ed:49:b2:27:6d:ae:a9:b6:4d:b1:4d:a7:16:
b8:ee:95:98:dd:e7:2a:b7:bd:86:48:30:72:0d:1b:ef:99:0e:
d0:6e:c4:8b:59:cb:75:ea:49:3e:c5:25:eb:a5:00:cf:4a:5e:
ae:61:08:e7:2b:57:cb:74:97:30:99:a6:98:90:e0:5c:68:e3:
88:83:e6:53:66:8e:8c:5a:70:62:2d:4f:36:30:d3:95:ea:f7:
e3:8f:a9:2f:18:f4:f7:2f:0e:d2:c2:f8:18:8b:f2:80:c0:aa:
74:cd:7d:53:17:19:71:0e:a1:c5:ee:d9:91:78:af:a2:39:8c:
bf:9e:ce:c5:94:ca:f3:cc:e8:87:96:1f:07:27:cd:33:4d:ae:
c9:32:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:47 2025 by rpki-client