Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RvvnrtoJ2I1BPuLJo5TUYtlibPg.roa
File: RvvnrtoJ2I1BPuLJo5TUYtlibPg.roa (raw, json)
Hash identifier: HBDOtl9laqNJHAyHdrERY3qTJqcZvO7AOFtDTtz4CE0=
Subject key identifier: 46:FB:E7:AE:DA:09:D8:8D:41:3E:E2:C9:A3:94:D4:62:D9:62:6C:F8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193E8ABE7A0B9F24A8C56E0E1BD0E671E35
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RvvnrtoJ2I1BPuLJo5TUYtlibPg.roa
Signing time: Sat 21 Dec 2024 10:03:20 +0000
ROA not before: Sat 21 Dec 2024 10:03:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214453
IP address blocks: 31.57.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:ab:e7:a0:b9:f2:4a:8c:56:e0:e1:bd:0e:67:1e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 21 10:03:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46fbe7aeda09d88d413ee2c9a394d462d9626cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:09:fd:fb:f8:d6:b2:7c:01:fc:32:24:1c:
73:1b:db:30:01:0f:19:66:38:41:4d:b0:c6:c3:a7:
12:0d:10:a5:3e:91:ff:06:f2:95:d6:00:64:a5:32:
f5:34:08:af:3b:fd:3e:73:c5:d6:3f:6e:65:ee:3a:
d0:cb:e0:36:9b:b5:08:89:01:bb:ae:ff:8a:ab:b5:
46:7d:86:dd:2f:7e:3e:74:9f:31:74:79:65:b6:58:
96:8f:f9:2a:e1:bf:9d:a3:ba:b2:f3:28:b5:e2:63:
56:16:4c:0f:56:60:11:56:04:1c:ad:6d:4a:4c:34:
5c:07:93:4f:c9:b7:8f:0c:4f:53:8f:56:63:89:2b:
18:de:07:1d:73:26:52:dd:49:84:df:df:c4:96:80:
bd:41:31:3d:b5:8e:77:5c:a6:da:4d:52:d4:00:26:
8c:0d:98:87:bb:71:36:60:69:1a:9e:c3:ae:af:f8:
d6:d8:91:3d:db:03:95:ad:c4:5e:9a:6e:e9:8c:ed:
c1:9d:e1:76:d2:14:0c:cf:5f:52:60:02:53:d5:8c:
de:d5:8f:bd:ca:39:51:b3:c0:26:19:87:d4:06:6e:
b5:7c:0e:dc:53:29:ec:bc:8c:26:25:ed:22:93:52:
7d:87:4b:3d:53:36:0f:76:97:5e:c2:03:ba:e6:9e:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:E7:AE:DA:09:D8:8D:41:3E:E2:C9:A3:94:D4:62:D9:62:6C:F8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RvvnrtoJ2I1BPuLJo5TUYtlibPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.188.0/24
Signature Algorithm: sha256WithRSAEncryption
07:11:e1:66:62:d4:9d:f6:c5:2c:8d:43:ea:a7:56:43:47:13:
5c:62:bb:3a:33:52:77:49:54:29:0a:2d:cb:c7:a8:06:4a:ff:
44:4f:ea:cc:d9:e7:6b:20:a4:d5:b0:cd:b6:02:5c:a0:1b:0d:
48:d6:fa:41:7d:9e:7e:8c:93:04:ee:80:8d:8f:44:2e:b4:7a:
98:fb:c4:5b:ec:fb:e9:f5:ce:cd:a8:38:79:a6:ef:e1:7f:2e:
f9:45:2e:f5:74:7c:0a:11:28:a3:b5:a7:e3:6d:60:13:06:d7:
70:bd:8d:a7:08:f4:58:7b:28:42:b6:7b:91:5f:d4:c5:d9:62:
ed:9d:36:e6:44:68:09:17:a0:de:b9:0e:02:f5:7a:e6:f6:72:
b9:c0:61:dc:9b:5f:38:2d:49:3f:89:9b:10:0a:b8:62:1e:10:
df:f3:88:00:fa:1b:e3:ab:55:fe:7f:71:48:09:1f:4d:42:c3:
67:ba:ee:62:68:7d:06:c1:cc:bd:0a:f4:dc:4b:15:ea:3d:1a:
86:79:86:98:8b:77:1d:c7:91:14:0c:6f:19:84:87:43:02:69:
97:13:88:a5:66:d5:96:66:11:5d:a6:3e:15:5f:f1:a8:87:bb:
cf:42:89:ff:14:2f:e6:00:f3:43:72:b2:30:ac:5c:c4:fe:ac:
79:29:ad:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:42 2025 by rpki-client