Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RCNuY93Bjb10PA_HGOPIdNHGREQ.roa
File: RCNuY93Bjb10PA_HGOPIdNHGREQ.roa (raw, json)
Hash identifier: tgToqQibn36qqKyvRf7Eh8/d698FEKM61SuJnxHQzuM=
Subject key identifier: 44:23:6E:63:DD:C1:8D:BD:74:3C:0F:C7:18:E3:C8:74:D1:C6:44:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019432E813169A2A3CAC11E538B7D360AFEE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RCNuY93Bjb10PA_HGOPIdNHGREQ.roa
Signing time: Sat 04 Jan 2025 20:00:57 +0000
ROA not before: Sat 04 Jan 2025 20:00:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 31.57.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 19:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:32:e8:13:16:9a:2a:3c:ac:11:e5:38:b7:d3:60:af:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 4 20:00:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44236e63ddc18dbd743c0fc718e3c874d1c64444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:a8:61:e9:c0:3c:73:12:1d:eb:50:e2:50:
b6:52:3f:6d:de:a2:2f:74:4d:fc:eb:75:8a:b3:49:
58:20:1b:f8:04:95:41:ec:3b:22:00:a2:d8:45:fc:
fa:96:1b:16:fe:33:9e:b4:f2:58:d4:a2:d2:28:d0:
3a:ec:dc:e4:93:bf:e8:81:a0:cf:ad:57:06:9b:0f:
26:e3:72:9b:85:d7:1c:c7:8b:6e:2c:ee:6c:6e:c2:
b5:4d:9c:11:3f:6e:8f:95:14:59:4f:1c:c1:ba:85:
b3:75:e4:b2:97:fb:67:b5:28:4a:fa:47:0a:63:f3:
6c:9f:3c:d7:17:08:ee:7e:ba:1a:4a:07:b1:df:fc:
10:5d:c0:fc:3e:ea:03:ef:da:ec:7e:dd:7c:fb:42:
d9:48:7f:d7:e4:07:1d:1b:01:4a:c0:35:e8:13:ec:
74:dd:68:9d:e9:05:e3:c2:44:84:ad:b9:64:f4:46:
ab:a8:a7:4a:07:63:70:80:7f:5b:b1:28:e1:b9:08:
4d:52:89:b3:aa:8b:01:3c:a3:9b:28:46:4a:f6:76:
22:9f:57:7e:3e:50:d1:ff:e5:d4:5b:b3:61:01:65:
37:86:65:43:66:f7:18:ea:ad:88:b0:b1:27:e8:03:
d0:26:bb:78:24:78:ff:cc:7f:07:2b:0a:34:85:07:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:23:6E:63:DD:C1:8D:BD:74:3C:0F:C7:18:E3:C8:74:D1:C6:44:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RCNuY93Bjb10PA_HGOPIdNHGREQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d3:ea:7b:35:23:f0:fd:9d:ea:4f:0c:89:39:45:16:3e:a6:
84:f2:9d:22:1f:9a:34:7b:78:d1:2a:30:c4:21:69:0d:09:0f:
6f:b1:8d:51:b6:5b:11:e7:d7:5a:a6:1d:58:31:99:18:d5:b5:
32:e8:04:e3:84:63:a3:57:b4:8b:a6:7f:f0:89:84:8c:2d:9a:
e1:e7:ed:ff:70:15:45:70:d1:a7:53:7c:2d:48:c6:00:bc:8a:
92:f5:d1:68:22:7c:f9:52:d6:ad:3e:4c:48:ce:4b:ad:40:97:
f2:31:fd:fb:8c:5b:8a:6e:93:99:62:5d:44:dc:4d:33:36:27:
20:d2:70:c3:0e:ca:ee:d3:3d:b6:df:3d:dd:68:b7:51:31:62:
61:d6:aa:42:27:85:2f:dc:0c:f4:2c:64:63:38:d3:3d:13:68:
05:1f:9d:ac:e5:b4:8a:55:bc:62:c4:59:10:23:68:78:68:46:
63:9b:ab:d7:3d:af:a7:cd:a0:9b:79:2e:7d:e9:cd:28:91:fb:
c7:f8:bb:2a:e7:f3:10:53:07:24:8b:30:fd:d7:04:5d:dc:d8:
29:7f:7f:5a:89:c4:a4:7d:26:61:f9:a2:1d:e1:00:8b:00:23:
b6:f0:ac:c4:99:bd:a6:9e:8f:9f:e4:38:8f:57:4f:3b:1a:9c:
3e:d4:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:07 2025 by rpki-client