Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6Fu53FFNJT_ZBpDpvlWpld8G_Y.roa
File: W6Fu53FFNJT_ZBpDpvlWpld8G_Y.roa (raw, json)
Hash identifier: 2EyVazbdSlST46NXNiQg9JegXXElXPkk82x6Vsjn2Jo=
Subject key identifier: 5B:A1:6E:E7:71:45:34:94:FF:64:1A:43:A6:F9:56:A6:57:7C:1B:F6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193A0A0F223CFC21344057D87BCDCBA7FFF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6Fu53FFNJT_ZBpDpvlWpld8G_Y.roa
Signing time: Sat 07 Dec 2024 10:18:42 +0000
ROA not before: Sat 07 Dec 2024 10:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.57.206.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:a0:f2:23:cf:c2:13:44:05:7d:87:bc:dc:ba:7f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 7 10:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba16ee771453494ff641a43a6f956a6577c1bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:bf:1c:a8:cb:2a:44:ae:ce:6d:81:06:02:
71:8c:1e:61:b1:ce:73:3e:f4:51:ad:42:17:46:1b:
48:7e:01:84:26:8e:90:76:c3:73:3e:b1:68:e7:15:
4a:f0:d4:85:ca:22:48:46:21:b2:8c:3d:32:e1:10:
d3:09:d7:a9:ac:bf:42:11:dd:85:ea:ab:a8:f2:5a:
21:6c:93:34:40:9c:b7:7d:d0:45:bb:30:bf:75:c7:
12:45:af:84:05:86:3e:4a:bf:28:89:2f:a8:ab:68:
15:6c:58:52:d2:58:c6:3c:ef:a6:4a:a6:d4:5b:88:
c2:44:c7:9c:0a:0c:06:bc:02:f2:7e:a9:ce:e2:35:
55:d4:03:e1:de:df:8f:57:8b:19:aa:86:3c:85:3f:
3f:f8:ec:c4:45:1e:e8:1d:34:23:c6:60:ef:7a:43:
98:ab:ee:29:1a:c4:63:91:66:42:4b:74:23:dd:bc:
dd:99:89:92:cc:2a:af:fb:b8:93:91:97:a6:98:42:
72:9d:a4:79:a1:c3:fa:37:89:c8:35:c5:e6:49:d2:
39:40:e6:70:fc:b8:b2:52:c4:3a:44:d0:f2:f7:14:
72:ce:1e:77:78:87:63:98:dc:90:76:6c:67:73:81:
84:6d:dc:a5:18:57:6c:4a:69:0c:a8:63:e0:d8:e9:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:6E:E7:71:45:34:94:FF:64:1A:43:A6:F9:56:A6:57:7C:1B:F6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6Fu53FFNJT_ZBpDpvlWpld8G_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.206.0/24
31.58.90.0/24
31.58.168.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4d:45:1a:e5:dd:5b:1a:82:50:0c:26:f3:9a:de:37:22:4a:
ae:b0:db:8f:10:ae:84:c3:a8:ff:dc:e2:ae:a9:05:80:c4:90:
0f:a5:e3:b8:cf:a3:66:9c:4e:9f:9d:eb:fa:6e:6a:3c:b3:f7:
03:a7:06:3b:7a:64:19:de:cc:5c:3f:0f:1f:a9:03:4b:cf:82:
ce:09:f0:d3:11:cf:b7:28:fe:b8:c7:4c:b9:53:7f:93:32:2e:
26:6b:be:6d:b8:99:a5:9d:35:57:15:08:c4:f8:15:02:1c:54:
2c:0a:b2:d6:3e:5e:f5:bf:ea:e9:b9:ec:ad:3e:10:9a:4f:20:
90:7c:61:6d:0b:46:ec:f4:40:c5:6b:af:a5:c0:b6:fd:3b:1f:
e9:37:1c:bb:f2:49:a4:7a:5b:92:08:99:b9:14:ac:a3:ce:25:
f8:ab:8d:ff:c2:e4:89:5f:0b:7d:c8:3d:f9:a2:74:c1:ff:67:
73:20:ad:a1:50:3a:57:44:86:7c:70:59:8d:86:02:3a:76:54:
e2:49:4e:34:e7:b9:0a:ea:43:40:58:b9:d3:8c:5f:a7:65:50:
88:d8:fd:b7:72:bc:be:0d:26:16:0b:50:8c:e1:fa:01:65:ce:
6d:27:c9:db:d1:65:21:0e:a8:77:29:83:0b:4a:ad:49:33:58:
3a:05:fc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:12 2025 by rpki-client