Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SaL3iCQkPWO5Lr0TGQX7_Qm5cGY.roa
File: SaL3iCQkPWO5Lr0TGQX7_Qm5cGY.roa (raw, json)
Hash identifier: TLL2KeTMsLXf+4x2u9HAwhsngiViN+FfNbFfXDGv8jM=
Subject key identifier: 49:A2:F7:88:24:24:3D:63:B9:2E:BD:13:19:05:FB:FD:09:B9:70:66
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01959AA6B0AB9AF0BC163F2A765DE9B0E9DF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SaL3iCQkPWO5Lr0TGQX7_Qm5cGY.roa
Signing time: Sat 15 Mar 2025 16:32:50 +0000
ROA not before: Sat 15 Mar 2025 16:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213200
IP address blocks: 31.57.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 15:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9a:a6:b0:ab:9a:f0:bc:16:3f:2a:76:5d:e9:b0:e9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 15 16:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49a2f78824243d63b92ebd131905fbfd09b97066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:35:e0:e7:ed:4c:81:c4:fe:3f:4b:96:f9:
2d:b4:d4:8e:27:bd:79:c5:ca:6a:b6:27:a1:67:5b:
31:28:b5:96:e3:67:0d:27:df:6c:8c:b0:c6:67:e3:
cf:0a:6c:a8:d2:a0:b6:75:ed:5c:ae:2f:34:e7:3c:
3d:99:1e:d0:2b:3a:da:32:f1:a3:f6:81:ff:5e:23:
19:26:a5:52:22:11:33:6f:90:9b:3e:d2:3b:4a:85:
db:07:c0:4a:24:4b:b3:c2:7b:ab:d1:f7:37:28:b2:
1e:1e:37:07:2a:06:ab:97:ab:b6:91:d4:8b:9c:02:
95:cc:f3:b5:2a:b8:fa:16:74:f6:d5:ef:8d:1d:09:
d8:ef:5b:07:fa:6d:d7:f1:6a:28:bc:fa:e5:05:f9:
1b:3a:5d:b8:13:58:90:4e:5b:8a:22:be:b8:f2:76:
08:4f:27:b5:e5:94:d4:18:fe:5d:b8:98:2e:3e:39:
84:c4:40:64:df:80:b3:a3:5a:ca:cc:54:2e:23:09:
cb:64:0c:77:80:19:fd:8b:3e:07:c2:57:a5:55:77:
fd:af:b3:e0:40:2f:f7:76:56:57:63:a5:b6:40:5a:
ec:a1:59:1b:9e:70:ed:64:f5:25:e0:a8:2b:c8:e0:
43:3c:81:f1:fe:1d:2a:a6:19:ee:1e:09:10:77:bb:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:F7:88:24:24:3D:63:B9:2E:BD:13:19:05:FB:FD:09:B9:70:66
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SaL3iCQkPWO5Lr0TGQX7_Qm5cGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.96.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:8d:f3:32:96:e3:01:ee:6e:77:b5:d4:7d:9b:42:76:f2:f1:
8d:d6:41:23:6c:6b:bd:47:a5:e4:af:02:a5:08:7f:c0:b4:7e:
3c:f0:bc:ff:22:1d:24:c8:b2:ed:3a:37:dd:aa:27:cd:c7:18:
83:bc:dd:d1:8f:91:48:63:c9:5b:f7:86:ab:f3:69:e9:10:23:
3c:d3:df:e3:9d:1e:8f:ad:f6:ea:d1:17:23:a0:60:e4:d8:c5:
79:d4:d1:a1:e1:59:78:28:36:22:da:e6:99:39:ca:0f:08:f9:
d1:b7:29:39:7d:e8:67:8c:2d:2f:ab:bc:9b:ba:cb:95:92:cb:
81:a4:60:aa:59:6a:80:af:cc:dc:eb:ea:71:c8:22:fb:ee:c0:
67:00:76:68:bf:0e:c4:58:81:26:b6:e1:8e:45:f7:a2:67:56:
52:d8:f2:3a:45:0d:ef:d0:83:f2:ac:28:17:85:bc:18:f9:a6:
ce:35:32:80:55:71:e8:40:9c:d8:4e:8c:98:aa:07:48:69:f4:
ee:eb:91:31:14:39:1b:00:22:fe:9b:ae:26:09:bc:33:c5:18:
ef:2a:b4:87:b2:4b:78:c9:29:b1:b8:c5:bd:d5:4c:d3:8a:53:
7e:bd:e2:42:3d:b8:82:59:89:02:cd:a1:ef:a9:dd:a0:86:1e:
f9:79:2e:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWaprCrmvC8Fj8qdl3psOnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE1MTYzMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWEyZjc4ODI0MjQzZDYzYjkyZWJkMTMxOTA1ZmJmZDA5Yjk3MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BI14OftTIHE/j9LlvkttNSOJ715
xcpqtiehZ1sxKLWW42cNJ99sjLDGZ+PPCmyo0qC2de1cri805zw9mR7QKzraMvGj
9oH/XiMZJqVSIhEzb5CbPtI7SoXbB8BKJEuzwnur0fc3KLIeHjcHKgarl6u2kdSL
nAKVzPO1Krj6FnT21e+NHQnY71sH+m3X8WoovPrlBfkbOl24E1iQTluKIr648nYI
Tye15ZTUGP5duJguPjmExEBk34Czo1rKzFQuIwnLZAx3gBn9iz4HwlelVXf9r7Pg
QC/3dlZXY6W2QFrsoVkbnnDtZPUl4KgryOBDPIHx/h0qphnuHgkQd7v/fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmi94gkJD1juS69ExkF+/0JuXBmMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvU2FMM2lDUWtQV081THIwVEdRWDdfUW01Y0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzlgMA0G
CSqGSIb3DQEBCwUAA4IBAQC0jfMyluMB7m53tdR9m0J28vGN1kEjbGu9R6XkrwKl
CH/AtH488Lz/Ih0kyLLtOjfdqifNxxiDvN3Rj5FIY8lb94ar82npECM809/jnR6P
rfbq0RcjoGDk2MV51NGh4Vl4KDYi2uaZOcoPCPnRtyk5fehnjC0vq7ybusuVksuB
pGCqWWqAr8zc6+pxyCL77sBnAHZovw7EWIEmtuGORfeiZ1ZS2PI6RQ3v0IPyrCgX
hbwY+abONTKAVXHoQJzYToyYqgdIafTu65ExFDkbACL+m64mCbwzxRjvKrSHskt4
ySmxuMW91UzTilN+veJCPbiCWYkCzaHvqd2ghh75eS70
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:05:21 2025 by rpki-client