Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T9UioXiCkG4UMQBxfU4_3bNIQmE.roa
File: T9UioXiCkG4UMQBxfU4_3bNIQmE.roa (raw, json)
Hash identifier: BgyQoV7AG4x/8jqAPcA5up3KfGo5r5iZh2SVAeBl2tQ=
Subject key identifier: 4F:D5:22:A1:78:82:90:6E:14:31:00:71:7D:4E:3F:DD:B3:48:42:61
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195C6CEB4BB31FD253486DF9F5EF4194884
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T9UioXiCkG4UMQBxfU4_3bNIQmE.roa
Signing time: Mon 24 Mar 2025 06:19:50 +0000
ROA not before: Mon 24 Mar 2025 06:19:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 16:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:ce:b4:bb:31:fd:25:34:86:df:9f:5e:f4:19:48:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 24 06:19:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fd522a17882906e143100717d4e3fddb3484261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:07:a4:e6:a0:54:e5:3e:16:d0:e8:d6:fb:d6:
ba:15:4a:08:d4:fb:be:46:72:7d:ae:b0:fd:c5:30:
82:6a:52:c0:5c:c4:8d:0e:c1:94:af:6f:dd:da:8f:
fe:6a:9d:64:47:43:0e:d7:13:73:61:24:fa:89:2d:
9c:4a:a4:33:02:94:e8:dd:60:cc:4c:0c:18:4f:cd:
6f:9d:22:f3:17:79:81:d0:8f:b9:19:95:4f:9c:fd:
6a:1f:b4:1a:b9:20:eb:0e:ab:e9:cf:4e:11:64:72:
d1:7e:7f:d0:2f:19:81:db:b2:30:fc:b0:62:cd:5a:
91:29:f3:c9:90:a5:6b:19:e8:41:39:78:d8:30:fc:
b8:38:9a:55:f6:20:93:ed:0b:f7:81:de:fc:e9:29:
02:85:fc:87:7c:31:c8:8e:58:0f:0a:a0:90:6d:27:
9f:bd:2b:80:d6:3c:17:ab:68:8e:24:b6:8d:b2:8b:
44:3e:45:b5:e1:5c:1a:eb:52:6c:5a:f1:de:ac:41:
4a:96:8a:93:d2:7c:98:e0:dc:c6:35:69:56:b7:b8:
e7:10:a6:34:96:ee:ac:e6:c5:5c:a3:fc:93:71:fb:
a0:d8:36:16:ed:3a:38:8d:37:20:4b:49:d3:c9:68:
c9:25:9d:79:e1:46:77:bf:c7:94:66:66:a3:4a:6c:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:22:A1:78:82:90:6E:14:31:00:71:7D:4E:3F:DD:B3:48:42:61
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T9UioXiCkG4UMQBxfU4_3bNIQmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.56.122.0/24
31.57.65.0/24
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
48:36:52:39:41:e2:f6:f4:ae:5c:c1:32:29:33:90:ab:a1:5e:
79:38:01:f4:37:7b:7c:50:f0:1e:1a:35:a8:d1:4a:0a:0a:b9:
85:47:24:3c:4a:6b:d4:02:7e:6a:01:ef:0d:64:4d:00:9f:de:
61:c6:b4:d5:ce:ff:94:e4:79:f0:39:d7:ff:12:03:4c:81:dd:
cc:03:d2:bf:d0:5d:99:f2:cb:19:e1:ac:9e:e4:8f:fd:52:1a:
f8:ad:d6:08:74:03:1f:82:a5:4e:0b:b5:37:72:5e:24:82:e7:
44:09:5a:e0:67:d7:87:de:24:6c:73:42:14:21:29:90:42:f5:
f3:31:bb:57:b5:7f:2b:84:52:99:85:ea:7f:86:9c:48:a0:82:
73:cf:8a:bc:9e:90:7d:21:46:a2:fb:09:4f:43:af:6b:b7:67:
e0:e4:80:4c:80:9c:8a:18:56:b1:bb:f6:c9:3a:51:e8:99:44:
37:42:9a:ea:48:52:3a:84:14:08:4c:20:ef:32:ab:b2:84:dd:
c4:a1:83:b4:fb:ab:54:42:07:51:6d:61:f7:a0:7e:27:a4:8c:
6e:73:49:dc:f3:e5:44:1f:ef:fd:05:89:fd:06:4e:e3:ae:4b:
ab:ef:68:db:5a:d8:20:0e:4e:74:b3:6b:70:d7:e3:45:9c:64:
92:03:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:39 2025 by rpki-client