Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xde-yHO2f3_6jtfeNkNa1V9lT0o.roa
File: Xde-yHO2f3_6jtfeNkNa1V9lT0o.roa (raw, json)
Hash identifier: KHZjXAt+YreBCvYcBBHhu+kTO/Il1gAIunKaHKpQvw8=
Subject key identifier: 5D:D7:BE:C8:73:B6:7F:7F:FA:8E:D7:DE:36:43:5A:D5:5F:65:4F:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282368740D1660F412E2EA2A9BAD54E7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xde-yHO2f3_6jtfeNkNa1V9lT0o.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211750
IP address blocks: 31.56.157.0/24 maxlen: 24
31.57.101.0/24 maxlen: 24
31.57.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 05:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:68:74:0d:16:60:f4:12:e2:ea:2a:9b:ad:54:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dd7bec873b67f7ffa8ed7de36435ad55f654f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:e6:4e:67:36:12:e6:db:07:ca:d3:85:c9:
03:f4:d3:98:d4:b7:f6:8b:6d:00:f5:7a:4b:0e:5a:
b6:a8:52:8e:e1:b7:c9:3f:fd:34:e5:d5:e0:c4:b7:
14:d4:fd:c2:7d:3e:82:aa:58:8e:44:67:fb:09:8c:
80:6f:a9:46:9c:dc:a7:2c:8c:e8:52:b4:07:56:1b:
e0:73:b8:a4:58:64:d8:ab:07:63:72:84:5b:e0:b0:
d4:f0:6b:1a:a1:f3:9b:2f:87:a0:ea:63:2c:69:9c:
b3:81:1e:07:f7:18:6c:3c:12:92:b5:97:4c:a9:0d:
bf:9b:92:d8:04:ce:a2:3c:50:f6:d2:a3:3f:57:0a:
1f:75:62:2a:07:8b:e8:05:18:96:25:66:5a:ea:df:
5d:19:94:aa:76:e7:cb:c6:4e:9f:50:e0:f3:86:fb:
ee:df:f8:03:56:3a:4f:0f:95:23:ae:02:02:7c:77:
db:e8:30:63:cc:4c:bf:8f:c2:c2:62:51:62:43:3c:
cd:0e:f5:6f:12:ba:ca:87:88:e5:4f:2d:6c:3f:ba:
e4:14:de:38:22:e9:e7:71:14:72:94:ed:a0:0c:46:
f5:f6:81:21:f3:74:f7:ca:3c:c9:3b:94:b2:64:42:
b5:8f:ad:cc:58:16:05:5f:98:0c:69:a8:16:81:c7:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:BE:C8:73:B6:7F:7F:FA:8E:D7:DE:36:43:5A:D5:5F:65:4F:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xde-yHO2f3_6jtfeNkNa1V9lT0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.157.0/24
31.57.101.0/24
31.57.245.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bf:ad:d5:87:17:d7:d0:ff:92:6e:a4:a9:12:65:d9:0b:14:
91:ac:de:1a:3e:1c:aa:9a:cc:84:1a:d8:95:d2:4b:28:d8:5a:
1c:57:cc:82:bc:74:05:95:b9:c0:3d:a8:65:bb:94:b1:82:7b:
ec:41:fd:72:35:37:51:c3:73:8a:13:4a:6b:7e:9b:16:d4:57:
e8:3a:a4:5a:60:02:92:69:be:7d:77:71:fa:9c:b3:1a:c3:6b:
3e:8e:77:53:b4:21:79:63:10:be:02:11:02:3c:16:49:fe:a1:
0f:df:e0:51:8d:42:9d:57:60:22:56:17:75:6d:bd:36:e7:9d:
39:fa:88:bf:b8:09:4c:78:a5:fa:92:6a:2c:de:65:42:18:8b:
8f:46:5c:be:15:bd:03:f3:d5:9a:82:6b:e4:f1:41:08:07:a5:
ef:ee:76:a0:2f:fb:a5:ee:65:76:c2:81:d3:50:4f:61:b1:8d:
c9:45:a2:ab:87:6e:d8:bf:ad:d1:94:c9:2d:7b:d5:eb:21:bb:
02:65:18:3f:bc:64:e4:a1:6b:d1:8c:67:2d:77:92:52:d7:f3:
95:11:6e:12:a7:53:f8:f7:a4:09:fb:a1:09:bb:b4:e2:c5:3f:
63:f7:07:1a:b4:98:cb:aa:2e:a4:7a:8b:b4:c4:29:d0:3d:df:
d8:cb:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:42 2025 by rpki-client