Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6Q57DKh8vTbGiJbjjpZ5xbgaYE.roa
File: W6Q57DKh8vTbGiJbjjpZ5xbgaYE.roa (raw, json)
Hash identifier: XafoykimooSZXmFxZwIq5fUUnuosoR+XOa1HwT8vMN8=
Subject key identifier: 5B:A4:39:EC:32:A1:F2:F4:DB:1A:22:5B:8E:3A:59:E7:16:E0:69:81
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193FE277679698C8FF1F31EDF966CC1519D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6Q57DKh8vTbGiJbjjpZ5xbgaYE.roa
Signing time: Wed 25 Dec 2024 14:10:19 +0000
ROA not before: Wed 25 Dec 2024 14:10:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 31.57.44.0/23 maxlen: 23
31.57.148.0/23 maxlen: 23
31.58.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fe:27:76:79:69:8c:8f:f1:f3:1e:df:96:6c:c1:51:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 25 14:10:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba439ec32a1f2f4db1a225b8e3a59e716e06981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:5a:6a:5c:07:1b:6e:4b:ea:53:a0:39:1f:
9a:12:b0:38:07:f9:a3:78:a9:ec:f9:d0:31:7a:53:
09:46:53:f5:bd:71:26:67:d7:8b:3a:16:f3:8b:f4:
92:ef:a4:c7:a1:23:6d:d4:a8:85:56:9c:8b:08:f4:
d9:b1:18:19:69:5f:98:a8:88:bc:c4:55:5e:4e:d1:
38:e6:37:4d:ed:70:7f:e0:e5:9f:65:48:95:46:23:
a3:69:6b:79:d6:92:09:b4:f5:70:db:3f:97:6f:d2:
9e:31:96:55:9f:fd:e0:0f:39:69:18:99:20:2e:b1:
3a:85:39:1d:a7:db:d1:50:31:48:6f:d2:a1:95:2e:
86:9f:8c:a1:7f:9d:a3:09:84:6f:6a:0b:8a:67:77:
83:6b:b6:ea:0c:50:21:f1:1c:df:a1:d1:7e:38:9c:
a0:89:92:04:ff:21:ff:8f:cd:ca:36:51:f9:a9:4b:
c3:33:ad:0f:d0:e6:77:25:b8:13:52:48:e7:cc:e6:
35:f3:be:a0:1e:92:40:53:6a:5a:2f:bb:6a:92:6c:
2b:31:36:c3:7a:b0:40:32:d8:ee:65:9b:e3:8c:6e:
aa:02:1a:a7:8a:da:cf:bc:99:a1:02:aa:5c:7f:1e:
53:86:19:9e:8a:44:7b:87:60:09:de:ad:63:52:a9:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:39:EC:32:A1:F2:F4:DB:1A:22:5B:8E:3A:59:E7:16:E0:69:81
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6Q57DKh8vTbGiJbjjpZ5xbgaYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.44.0/23
31.57.148.0/23
31.58.131.0/24
Signature Algorithm: sha256WithRSAEncryption
61:46:05:b3:b2:ce:7a:1a:8d:6d:08:45:bc:71:d5:8a:79:b1:
47:bd:f7:b9:cd:b5:d4:87:6a:b1:f1:e1:ed:9d:38:9e:5b:2f:
dd:18:db:87:5d:91:38:bf:36:88:8d:e1:65:3f:95:76:ee:a9:
1d:8a:65:7b:09:29:7a:a3:46:70:b6:17:56:09:8f:65:63:2a:
9c:02:0e:91:c0:e9:c5:8d:3b:96:33:32:d2:d4:fa:4f:71:e1:
45:ec:02:1c:5e:62:56:29:1e:0d:02:82:35:3f:67:7c:08:55:
cd:bc:0b:a2:fc:55:99:64:03:c4:0f:dd:e6:ec:7b:22:c2:73:
19:af:00:be:45:e1:84:a0:45:76:76:55:58:35:76:02:71:86:
20:94:28:19:96:3b:72:de:2e:b5:92:0a:df:25:26:4a:ee:72:
84:a6:2a:7d:7f:3b:ae:5a:e1:25:da:24:64:7f:b6:a5:6d:23:
81:d9:be:06:8a:de:67:8d:ee:1c:33:b4:c3:7d:c9:7d:b9:f5:
0e:5a:e8:45:5b:66:f6:bf:b8:50:74:f2:83:95:d0:ba:f8:dd:
77:8f:c3:fa:c2:77:fb:72:97:a1:d0:fb:e6:64:b5:66:46:54:
56:8e:f6:ed:59:a2:f4:b7:57:54:1e:45:dc:6f:ca:40:ce:f2:
6a:ed:c7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:10 2025 by rpki-client