Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UiLJy0clCP2A7kRr6gJrs8CAh3Y.roa
File: UiLJy0clCP2A7kRr6gJrs8CAh3Y.roa (raw, json)
Hash identifier: 0TlgILHJx+bZuviEyMg7rc8u/JArTYvJkyMZHXghRt0=
Subject key identifier: 52:22:C9:CB:47:25:08:FD:80:EE:44:6B:EA:02:6B:B3:C0:80:87:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955B74DBEED0F983D930E6DB47C88E3B4C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UiLJy0clCP2A7kRr6gJrs8CAh3Y.roa
Signing time: Mon 03 Mar 2025 10:02:19 +0000
ROA not before: Mon 03 Mar 2025 10:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 31.57.32.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 10:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:74:db:ee:d0:f9:83:d9:30:e6:db:47:c8:8e:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 10:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5222c9cb472508fd80ee446bea026bb3c0808776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:8e:e2:2e:2a:0f:1f:23:8b:f7:16:85:f1:
15:11:28:6d:93:51:4f:11:8f:04:3f:a2:64:b9:70:
b1:19:01:23:c3:88:e3:ac:72:45:08:1b:9e:e8:c2:
e9:27:1c:9f:bc:91:4c:f8:e6:92:0b:99:bf:d4:89:
7b:ff:e5:fa:86:58:66:81:49:25:dc:2a:2f:75:a0:
12:ee:6a:19:34:7d:c9:17:72:db:27:73:ca:49:06:
18:0d:d0:f7:f5:5f:06:b4:84:a7:6c:c1:09:d9:57:
03:fb:6e:c1:fb:62:9e:5b:fd:6c:24:a5:9c:65:71:
f4:dd:14:3d:31:70:8a:55:b3:76:da:3d:cb:5e:80:
53:84:4d:c0:1d:97:f5:e9:ac:f5:39:f0:9e:f7:98:
55:f2:1c:3e:29:b1:4a:0e:c5:57:cd:31:cc:36:bf:
6d:26:ff:ef:4f:86:86:7b:30:41:b2:f3:50:b6:e7:
62:ef:66:63:7b:b1:46:f5:9a:13:1b:28:ae:4e:ad:
ab:08:4c:56:58:2d:13:99:f5:9a:4c:52:37:6b:d9:
bd:6c:a2:c5:49:4e:1b:5d:a3:b9:5e:04:0d:47:6d:
62:1b:9b:2f:41:eb:8b:bf:9b:dd:be:7f:4e:7b:05:
ab:23:ae:c6:bf:fa:cc:33:a7:c0:37:f8:38:47:4f:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:C9:CB:47:25:08:FD:80:EE:44:6B:EA:02:6B:B3:C0:80:87:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UiLJy0clCP2A7kRr6gJrs8CAh3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.32.0/24
31.58.172.0/22
31.59.76.0/22
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
04:57:ca:9e:02:fd:6d:1c:19:58:dc:be:d4:5a:a1:e9:f6:af:
08:b6:87:e1:44:2d:21:4d:01:7c:86:bd:05:5d:c2:c6:dd:d1:
9e:3c:cd:8e:a6:94:94:d9:60:0b:ec:cd:63:5b:de:4c:03:37:
a3:5b:95:20:da:8c:5e:d7:e4:6c:d2:d2:31:ff:45:6e:eb:4d:
f2:4e:3d:9d:23:b9:43:86:98:b5:97:67:ae:fd:aa:79:35:a1:
ec:4e:8a:16:1a:67:b6:3a:29:b9:89:60:d4:d7:53:3c:c8:a0:
3a:55:d5:49:e4:f4:d7:74:82:70:94:1e:0e:38:50:50:95:92:
a2:1e:f0:85:ac:78:a8:13:83:fe:cf:b1:c8:c4:66:72:d8:fb:
f7:3a:7c:d5:b9:4f:36:e4:b7:96:ad:43:66:12:b5:6a:58:c8:
87:8b:63:26:cb:af:43:e0:af:b5:2d:c1:bd:3b:8c:c2:46:e9:
25:a7:61:d8:56:2f:2f:8f:32:1d:81:2c:c7:fb:30:1b:83:4b:
6c:c5:38:b7:cf:87:ea:41:e0:09:d0:9d:1e:2b:ef:d4:d1:6b:
4e:91:db:f1:41:d1:09:a9:b6:48:b2:a4:10:b3:0f:d9:41:dc:
d7:5c:c1:ce:b4:00:2a:64:49:b8:8c:39:06:8b:2b:39:fa:39:
7c:01:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:00:57 2025 by rpki-client