Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XvAkxQs7skSFrQ_QUKANJIofE08.roa
File: XvAkxQs7skSFrQ_QUKANJIofE08.roa (raw, json)
Hash identifier: tUa46iCD5+AQVXJn90YbZbDCUAGQcA9TluHv8YSwHLw=
Subject key identifier: 5E:F0:24:C5:0B:3B:B2:44:85:AD:0F:D0:50:A0:0D:24:8A:1F:13:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823385D7E4A311235CF50DD94191E37
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XvAkxQs7skSFrQ_QUKANJIofE08.roa
Signing time: Thu 02 Jan 2025 17:49:44 +0000
ROA not before: Thu 02 Jan 2025 17:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.57.196.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:38:5d:7e:4a:31:12:35:cf:50:dd:94:19:1e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ef024c50b3bb24485ad0fd050a00d248a1f134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:f1:57:85:6f:10:cd:84:dd:3c:d2:94:3f:
da:f4:3a:7c:1d:5b:92:a3:a7:d5:cc:85:47:9e:f5:
0d:11:2e:57:f2:90:bb:1e:81:ed:be:f0:3b:c3:a6:
93:66:74:ce:5a:79:6d:12:3c:ed:8d:29:81:57:f0:
b3:c7:55:1c:36:dd:e7:f7:ba:b5:fe:0c:9e:40:58:
6f:40:27:a5:05:6d:1a:79:99:82:8a:76:3e:3e:ee:
59:64:06:05:e1:50:0b:90:03:b4:99:24:d5:b0:65:
a8:a5:46:d0:87:02:86:39:5f:2f:8a:bb:13:2d:79:
5a:72:2d:40:7f:33:76:83:c9:32:9b:9b:29:61:74:
96:5c:d8:89:f7:04:d5:76:19:7b:24:00:6c:b3:e3:
31:0e:26:c1:c8:71:0f:49:d4:68:50:c6:06:ef:66:
d3:cc:c5:16:82:0c:f4:e7:85:ae:56:91:51:4e:3a:
18:58:f2:38:27:97:cd:ac:56:52:cc:cd:a0:46:86:
48:d4:76:c6:d7:6e:32:77:26:bf:04:56:41:51:9b:
cb:b8:4d:4a:a2:61:ab:49:3f:dd:4b:a6:b2:d1:a3:
34:11:51:b6:46:3d:19:f6:26:3b:3f:b2:ae:a3:de:
3f:42:c2:e5:5b:68:02:9a:e3:dc:c4:b8:b2:bb:e8:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F0:24:C5:0B:3B:B2:44:85:AD:0F:D0:50:A0:0D:24:8A:1F:13:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XvAkxQs7skSFrQ_QUKANJIofE08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.57.196.0/23
31.57.199.0/24
31.57.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:56:58:9d:8a:65:38:67:0b:a7:fd:0d:94:64:dd:50:52:aa:
40:ec:dd:cb:1f:5b:5e:14:4e:6a:21:76:10:5f:d2:33:5c:08:
fd:4f:ee:5d:c7:50:6f:4a:39:57:5b:90:3d:c8:45:7a:65:2d:
70:44:07:e5:88:71:ab:6a:13:e9:52:40:20:cf:57:21:b0:09:
01:c7:97:d2:81:be:d3:72:e8:7c:b0:09:d8:57:db:33:c5:10:
9f:fa:db:49:12:08:ee:c6:5a:10:45:1c:13:c2:70:f7:e9:e0:
8e:48:c6:50:7a:9f:cd:74:d2:8c:10:5e:8d:24:bb:64:9b:d8:
33:25:73:f7:a8:49:c4:9f:1a:2a:80:de:89:e1:7b:a7:72:f4:
08:17:7c:43:f9:cf:49:b9:48:81:50:46:cd:17:6d:34:90:9d:
aa:78:a7:63:96:8d:80:14:c9:60:db:0b:79:0a:b8:75:f2:e1:
16:8d:6c:9b:84:b2:86:b5:3c:b4:88:22:4d:80:87:6a:37:61:
9a:44:f7:f0:bd:ce:de:ff:9b:60:13:9c:25:e2:6d:ec:50:67:
5f:93:b1:c3:06:60:0b:09:ed:ea:8f:8a:06:f1:32:65:b3:c4:
94:ee:e3:d1:dd:5b:6c:a9:46:89:fc:c7:07:a0:03:99:23:c3:
5a:04:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:08 2025 by rpki-client