Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VNPkqIQWdaviZL4J4VphXGYhJ_U.roa
File: VNPkqIQWdaviZL4J4VphXGYhJ_U.roa (raw, json)
Hash identifier: Ft9USZFiW2fdcKcExjkgk/lmDjfsd05qONKsV2FbOPA=
Subject key identifier: 54:D3:E4:A8:84:16:75:AB:E2:64:BE:09:E1:5A:61:5C:66:21:27:F5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282332FE5B5834497B2A211A6B41287D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VNPkqIQWdaviZL4J4VphXGYhJ_U.roa
Signing time: Thu 02 Jan 2025 17:49:42 +0000
ROA not before: Thu 02 Jan 2025 17:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 31.56.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 18:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:32:fe:5b:58:34:49:7b:2a:21:1a:6b:41:28:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54d3e4a8841675abe264be09e15a615c662127f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e5:80:6a:86:0f:2a:9a:64:d2:b7:48:ed:0c:
d6:5f:8a:3e:49:53:44:45:5c:8e:9e:85:b5:b1:6e:
77:d6:ba:98:47:76:2b:f1:21:8e:31:5f:6a:cb:88:
98:aa:7f:59:e5:49:42:3b:40:a1:d1:d0:e9:7b:c4:
f7:78:f8:f8:ed:8d:88:d2:9c:fa:8c:61:31:a6:a4:
3f:6f:94:59:3a:33:0e:89:f5:c7:e2:4e:0d:f1:c3:
1e:ae:6b:46:26:95:ee:40:01:74:26:19:b2:5e:5a:
20:e2:6a:3c:76:37:9c:ba:ea:4d:bd:23:c2:50:f5:
87:50:e3:a5:c7:5d:aa:2a:b2:5a:a7:5d:2d:fc:b7:
f1:0a:9b:ff:e7:9f:89:f4:2e:4f:fb:8f:98:35:6d:
77:19:58:e8:f1:24:7d:a5:9d:05:3b:56:d6:7c:5f:
55:2f:91:b1:53:c4:43:77:07:07:ca:4c:6d:6e:8e:
74:59:40:02:0e:2e:80:b6:c7:0a:bc:58:e3:0d:76:
73:d1:3d:5c:ee:5d:90:b7:e7:2f:73:67:2c:7d:41:
6a:09:42:41:98:67:60:a9:3f:4c:5c:a5:18:56:60:
b0:46:3f:e5:ff:dd:76:9a:ea:73:92:5c:9e:6f:1e:
2a:00:36:7c:67:42:18:05:de:a0:f2:6e:46:52:7c:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D3:E4:A8:84:16:75:AB:E2:64:BE:09:E1:5A:61:5C:66:21:27:F5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VNPkqIQWdaviZL4J4VphXGYhJ_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:14:c4:b8:36:5e:aa:d1:ce:cd:1a:cd:91:88:10:dc:c8:94:
92:6f:05:55:8b:15:ca:2d:e6:d0:33:f8:42:d9:1d:84:d3:e6:
ff:03:63:2c:4c:9d:78:75:da:ff:14:41:5a:0d:65:39:70:ce:
49:09:b7:87:02:91:d9:fa:b4:ef:c0:d6:b0:00:13:02:4f:e7:
9f:fe:1f:df:cb:f1:f7:ee:da:1e:e7:f4:83:ef:ad:d6:1f:3e:
46:c8:b5:92:b5:83:69:39:0e:87:29:3e:09:df:14:bb:2f:a4:
72:06:37:95:c8:44:a2:08:64:07:30:02:4a:55:e1:ee:94:31:
57:bd:4e:05:25:75:5f:08:14:dc:e8:3e:65:82:53:56:4d:51:
c3:e0:a4:92:4a:80:9b:3c:80:e7:00:6f:f3:55:d8:b4:08:7b:
8d:0a:30:7f:6c:3b:30:0c:c0:6f:5d:64:bb:cf:47:c2:36:e7:
39:28:70:7c:bc:97:1c:cc:84:19:80:66:ee:b8:62:35:51:f4:
f7:2b:96:38:17:cf:e0:18:23:63:b6:e6:c0:fa:f6:4c:7a:5f:
64:02:0b:eb:ad:0d:79:29:02:3e:18:d8:80:82:c7:7d:0c:57:
d4:cb:81:1c:e4:2e:39:25:90:48:cd:96:69:02:06:d7:ff:d9:
d2:e2:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:03:32 2025 by rpki-client