Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VTWqrd89RRUdT9Ba1Nr6dSSEXV8.roa
File: VTWqrd89RRUdT9Ba1Nr6dSSEXV8.roa (raw, json)
Hash identifier: Kx+QdQnIN7i4Ka4hqYh3KkwSfRTFqKN8yBblop99Ju0=
Subject key identifier: 55:35:AA:AD:DF:3D:45:15:1D:4F:D0:5A:D4:DA:FA:75:24:84:5D:5F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01936C94C87A18393738C9D337444A42C326
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VTWqrd89RRUdT9Ba1Nr6dSSEXV8.roa
Signing time: Wed 27 Nov 2024 07:45:10 +0000
ROA not before: Wed 27 Nov 2024 07:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 31.58.232.0/21 maxlen: 24
31.58.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Dec 2024 11:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:94:c8:7a:18:39:37:38:c9:d3:37:44:4a:42:c3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 27 07:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5535aaaddf3d45151d4fd05ad4dafa7524845d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:73:db:49:9e:47:4e:9a:97:eb:12:f4:83:
b7:60:03:9f:7d:8a:5f:16:b5:f1:f8:9f:e5:38:35:
7a:4e:f9:4c:00:9f:0f:45:78:1d:8a:94:82:86:5c:
5d:e1:6a:6b:10:09:07:f8:fe:1d:1b:c6:84:76:48:
56:45:f8:9c:01:98:86:ca:61:0e:d2:c8:dd:18:99:
fd:72:61:5b:d3:e6:64:12:f4:21:d3:fd:4e:26:b8:
ed:8b:55:57:c2:d3:1a:9c:77:7b:5c:30:15:e1:b9:
74:8c:ff:a0:5b:b8:1b:8b:f3:a6:b0:e0:f4:86:f1:
2d:75:e0:b8:3f:25:dd:7d:2d:0d:4c:b4:2d:31:78:
66:3c:94:c3:81:07:02:07:63:b2:2b:76:f9:dc:7a:
9a:1d:4c:68:0f:9e:e0:5e:7c:57:75:fe:67:6d:7a:
51:e1:70:d0:93:8e:64:77:0e:e2:a0:5c:6d:1b:c2:
67:f5:55:78:4b:f0:b3:55:c4:63:cf:da:41:f1:0d:
70:a0:59:a1:85:10:a0:f3:58:08:82:fe:d0:fb:44:
ae:13:ff:86:f5:94:d5:25:5c:a9:83:a8:82:b3:a5:
f5:9b:23:a3:93:ec:2a:d4:57:b0:dd:9a:f0:39:f4:
81:8a:6b:2f:17:ee:e5:d1:9d:fe:c1:b5:f0:df:c0:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:35:AA:AD:DF:3D:45:15:1D:4F:D0:5A:D4:DA:FA:75:24:84:5D:5F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VTWqrd89RRUdT9Ba1Nr6dSSEXV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/21
31.58.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:7f:a1:92:1d:b9:2b:32:7e:b8:c5:8c:7a:ab:d7:a3:fc:f6:
aa:3a:c9:83:0b:18:d7:35:d4:0e:ab:18:64:ae:ce:b1:62:fa:
7e:15:43:8e:58:77:f8:a0:cb:42:46:c0:c7:8a:fb:a4:c4:ac:
9d:af:a9:a7:03:20:2c:2a:9b:de:39:e1:c2:96:0c:ca:d5:3f:
b3:a3:d4:65:1c:9f:cf:48:aa:6b:e2:06:9f:6b:95:7c:4c:84:
ac:b2:88:be:88:05:44:69:06:a2:7d:e4:b6:b7:1d:bd:1e:8b:
f9:2a:ad:29:df:bf:d3:10:6d:55:32:3e:d2:93:b2:2e:fa:b1:
0e:84:8b:ee:ed:23:d6:9b:04:33:df:b4:db:95:cc:60:f6:d4:
92:72:e1:2b:4f:ef:cd:0b:a3:af:92:61:4d:0c:99:8a:7e:2c:
f1:c8:e2:65:cb:66:e6:53:1d:99:1c:8c:4a:84:13:14:cb:6c:
c6:c6:c2:e6:1d:5b:c6:ae:c8:7a:d2:ad:6c:8e:40:38:07:ce:
57:39:84:27:be:1b:2f:c6:ad:4e:bb:46:b2:41:86:fa:40:a6:
fd:f7:c4:58:7b:e9:eb:06:4d:28:4f:a0:8e:c1:fe:91:51:64:
8e:b9:e3:c1:45:1c:82:21:f3:25:fe:f3:09:40:df:a8:93:c2:
5c:15:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:17 2025 by rpki-client