Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UONH6fp8VDB-OWbghoGCyFX0kAE.roa
File: UONH6fp8VDB-OWbghoGCyFX0kAE.roa (raw, json)
Hash identifier: iQQDTeBLmY8iKbwo504I9PqnSk6N3ngp8/kBgWub3kQ=
Subject key identifier: 50:E3:47:E9:FA:7C:54:30:7E:39:66:E0:86:81:82:C8:55:F4:90:01
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019577757168AA6B9F5FFAFDF57C9E93FF1C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UONH6fp8VDB-OWbghoGCyFX0kAE.roa
Signing time: Sat 08 Mar 2025 20:32:19 +0000
ROA not before: Sat 08 Mar 2025 20:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216129
IP address blocks: 31.58.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 20:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:77:75:71:68:aa:6b:9f:5f:fa:fd:f5:7c:9e:93:ff:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 8 20:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50e347e9fa7c54307e3966e0868182c855f49001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:8b:07:c3:ea:db:b5:76:cb:8b:a4:2c:fe:
48:27:55:3d:61:06:29:80:e3:d3:6f:b5:e1:90:96:
0a:08:79:ae:de:1c:9d:38:c3:80:93:74:d7:64:7b:
c0:3a:e4:70:38:07:61:72:af:c9:44:3d:eb:67:66:
a0:bf:04:75:e7:01:33:98:45:3c:09:d6:32:b1:fb:
97:24:f5:2a:84:65:4e:28:04:cb:35:11:58:10:6f:
78:38:a9:95:9b:47:cc:c7:41:27:e2:6e:d7:6a:7f:
3d:4e:00:16:a0:5a:09:11:c4:22:2f:e4:48:91:a5:
35:e5:b4:b8:94:25:51:0d:de:f9:a7:ee:f8:30:0a:
41:9e:dd:89:e7:a5:2f:de:11:7a:e9:f0:91:71:c6:
f8:58:10:bd:d2:6a:59:e4:06:2b:b0:93:ab:6c:c0:
44:3c:9f:da:fd:d5:af:ec:2e:fe:26:79:b5:28:b8:
46:19:54:ec:a7:df:be:21:18:e9:b2:38:3f:4a:1f:
6b:db:2f:7b:f8:bc:1d:59:6c:58:98:09:35:bb:e8:
d3:67:aa:c6:89:ac:51:83:33:36:43:50:a0:70:64:
f6:8e:88:f0:3a:12:50:64:65:5a:19:e7:4f:a2:89:
5e:1d:70:58:67:55:fc:67:85:5a:6f:2c:4f:0e:c8:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:47:E9:FA:7C:54:30:7E:39:66:E0:86:81:82:C8:55:F4:90:01
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UONH6fp8VDB-OWbghoGCyFX0kAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.85.0/24
Signature Algorithm: sha256WithRSAEncryption
38:22:9a:67:4a:e1:33:e9:30:60:30:1d:c6:89:6b:f9:97:c4:
7e:32:ea:10:55:0a:3a:fe:d6:86:15:46:5e:47:55:92:ec:8c:
17:c7:c2:87:d9:b7:e8:3d:34:ca:e4:c6:93:6e:3f:37:ca:e7:
52:c2:ea:1b:db:b7:6e:8b:5e:ec:c1:93:fd:e1:68:59:4f:c9:
12:f1:19:ca:08:c0:aa:27:af:d0:02:fd:67:95:d0:a4:e5:23:
e4:3e:cb:28:39:af:30:9a:1c:96:11:16:ae:81:9e:03:e0:9b:
e3:97:dd:e8:d1:ea:c3:a7:5e:eb:19:3b:4a:c8:09:13:3e:c4:
ce:a9:c0:2b:18:0e:31:c2:d9:43:9a:74:5b:70:72:c5:0e:58:
fa:e2:0e:d9:9f:92:6e:36:07:70:74:8c:f1:2d:08:8c:19:95:
64:db:05:ba:27:9d:71:af:48:c7:35:95:81:d6:9f:b9:ef:63:
8a:c8:34:15:8d:1e:89:31:b5:7f:69:02:2b:b2:ec:e8:33:3b:
d3:4d:40:1b:26:e8:3a:ca:86:5b:fa:26:95:2a:10:1d:b1:13:
b4:29:e4:27:6f:8c:3d:44:18:c3:98:a4:4e:75:16:68:b5:ca:
af:e9:72:17:1a:e8:82:fb:48:fd:d9:b9:71:f8:01:3d:a6:08:
f1:8b:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:48:11 2025 by rpki-client