Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VXPkZbXfdut0BfbT63j8fNDUE50.roa
File: VXPkZbXfdut0BfbT63j8fNDUE50.roa (raw, json)
Hash identifier: UKGO7/WhDuLypEam463Hci0d5DLwo9YskdUOP/W8ZvY=
Subject key identifier: 55:73:E4:65:B5:DF:76:EB:74:05:F6:D3:EB:78:FC:7C:D0:D4:13:9D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019376DFAC6DF3F0495D937F274CBC2E5685
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VXPkZbXfdut0BfbT63j8fNDUE50.roa
Signing time: Fri 29 Nov 2024 07:43:10 +0000
ROA not before: Fri 29 Nov 2024 07:43:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 31.57.145.0/24 maxlen: 24
31.59.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 15:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:df:ac:6d:f3:f0:49:5d:93:7f:27:4c:bc:2e:56:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 29 07:43:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5573e465b5df76eb7405f6d3eb78fc7cd0d4139d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:73:9a:06:ea:0e:74:47:0f:a2:f5:25:4b:
2c:9f:e4:6c:b4:9f:fa:18:bc:94:af:ae:39:86:a6:
f8:c7:09:7c:32:5c:97:b9:c6:6c:db:5d:ed:05:01:
36:5f:7e:20:0f:62:19:e6:29:c3:92:6f:35:70:72:
46:ca:2d:e5:64:33:f7:75:41:e3:a9:45:48:5e:55:
e7:8f:7e:cd:9d:8a:f2:f4:99:2e:36:73:72:f2:9a:
d7:42:7f:d3:92:d9:18:b9:9b:47:65:22:84:56:53:
20:7f:2b:89:59:45:5e:10:22:8a:c6:c5:75:16:df:
a9:ce:c8:16:2c:22:7f:38:85:05:2b:e8:12:fd:8d:
bc:56:f0:1d:3f:11:c9:4b:2f:a8:52:7a:b6:bb:31:
45:b6:ce:99:58:50:8b:fc:e1:89:04:89:3c:06:aa:
12:67:21:0c:07:50:83:fe:13:57:3a:32:c4:e5:4c:
9a:da:4f:97:57:b4:75:31:c5:d8:3e:35:6e:0a:59:
00:8f:01:2c:24:b7:04:66:46:fc:d9:4e:b5:9a:30:
ce:43:ff:05:ea:bf:6b:09:a6:dc:75:c3:fd:af:3b:
1f:cd:60:07:c6:8a:59:4d:9f:c7:3b:cf:0e:78:d8:
96:a5:39:10:ea:83:be:71:52:ce:2a:84:b8:7f:c3:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:E4:65:B5:DF:76:EB:74:05:F6:D3:EB:78:FC:7C:D0:D4:13:9D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VXPkZbXfdut0BfbT63j8fNDUE50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.145.0/24
31.59.184.0/24
Signature Algorithm: sha256WithRSAEncryption
89:87:85:1d:bb:52:34:40:b3:2a:54:82:02:ce:37:2b:df:ed:
57:19:47:ec:b2:ed:c5:41:4d:98:b8:b2:c6:b9:01:78:03:f1:
00:49:53:02:bf:2a:48:18:8a:5f:02:6e:e0:f3:1f:0a:54:58:
37:e7:6c:76:78:fd:ad:27:4e:b5:9e:c0:37:c9:e0:5e:26:88:
90:7d:b4:94:16:13:70:cc:5f:c2:17:0b:9b:4b:28:60:0e:a8:
17:95:6f:8e:be:36:51:f4:68:01:59:2e:e7:af:db:43:8c:ff:
1f:14:0d:fe:28:42:02:e2:16:19:07:f6:3e:49:35:86:69:ec:
9a:51:56:b7:c5:cc:3c:a2:a9:c1:e4:96:4e:a6:c1:62:dc:8d:
22:9b:3e:47:65:9f:61:19:f9:bc:79:e6:6e:87:b5:90:a3:e3:
1b:95:1e:b7:d5:f2:bf:fb:03:76:48:75:03:ba:7c:ca:77:cd:
c8:11:c2:10:a7:a0:a4:15:13:bb:ca:3f:0a:f1:97:80:3a:7b:
5b:d6:ea:39:e7:da:c0:28:ad:77:f3:16:ca:40:0d:15:7d:e9:
7d:5d:72:dc:cc:76:23:7d:95:1d:f5:ec:41:7a:c9:f0:a5:4f:
e2:4c:55:42:e5:47:aa:42:6c:90:2c:30:4f:b0:97:02:99:6d:
bb:73:27:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:13 2025 by rpki-client