Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y0hw9eX0zibBXQP9ItYZMdKsLx8.roa
File: Y0hw9eX0zibBXQP9ItYZMdKsLx8.roa (raw, json)
Hash identifier: fRgbAcNXzCCAlUumMWOpvXZGims71qnbbmo8a/XEjSc=
Subject key identifier: 63:48:70:F5:E5:F4:CE:26:C1:5D:03:FD:22:D6:19:31:D2:AC:2F:1F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193CC1AB6F4C7DBAEF2B23B28E8A82F3EAF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y0hw9eX0zibBXQP9ItYZMdKsLx8.roa
Signing time: Sun 15 Dec 2024 20:55:22 +0000
ROA not before: Sun 15 Dec 2024 20:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199654
IP address blocks: 31.57.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cc:1a:b6:f4:c7:db:ae:f2:b2:3b:28:e8:a8:2f:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 15 20:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=634870f5e5f4ce26c15d03fd22d61931d2ac2f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:32:3c:bd:27:21:ad:d1:b8:b1:cb:47:63:
12:b4:e2:38:89:4c:59:98:93:32:80:e9:cd:2d:32:
da:95:28:a7:28:64:95:c6:c9:64:bb:52:4d:0e:39:
c6:54:e4:75:86:98:01:27:fe:b5:55:7d:a1:1c:a5:
2d:7a:45:ad:c1:7b:d5:04:0b:a2:97:5a:61:d9:e6:
39:5c:21:45:bd:72:03:ac:52:84:9e:a6:95:1a:63:
83:1a:ec:4f:b5:05:fe:86:e9:e3:d6:9a:3f:70:e4:
5e:82:f7:90:40:80:ba:13:fe:69:73:ee:8e:53:71:
44:ee:83:5f:16:af:0e:a6:94:1f:1e:ce:28:2b:c5:
7d:af:55:2d:6e:b4:8e:19:65:a4:88:53:10:9c:60:
8f:04:f9:a4:6a:50:72:13:73:1c:49:6a:86:47:c1:
9a:27:db:37:4c:db:5a:bf:0f:cb:57:dc:07:16:14:
c6:ef:82:95:01:5c:41:d6:4c:e9:72:c2:9d:7c:58:
16:6e:35:5b:bd:c1:4b:db:60:43:7d:bd:af:2b:40:
07:3f:80:c0:09:85:cc:d2:73:eb:b0:38:fa:5c:62:
84:43:69:82:11:15:5a:a9:63:ee:95:88:ca:40:84:
21:0b:80:3d:02:12:24:8f:31:e8:3f:77:31:2a:9f:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:70:F5:E5:F4:CE:26:C1:5D:03:FD:22:D6:19:31:D2:AC:2F:1F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y0hw9eX0zibBXQP9ItYZMdKsLx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:81:6d:2c:d9:6e:5a:cb:01:d4:4f:09:47:29:9e:99:c9:22:
79:07:c0:d6:c5:79:ed:a5:da:b5:0b:d0:6b:18:bd:a0:8e:24:
1a:1e:80:a7:16:e5:65:96:3f:09:f1:74:5d:c3:b3:6c:ee:cc:
a6:6f:f0:44:34:fa:71:b6:a2:89:f2:0f:9c:c9:5a:62:c3:02:
1a:d1:c5:6b:a7:a9:d3:6c:bf:44:b6:9a:d1:48:a3:f4:85:91:
d4:5d:59:f6:25:e4:76:32:05:ff:41:b7:40:a6:c7:82:db:db:
2a:2c:fd:11:f5:19:47:4c:e0:97:64:8a:6a:2d:61:e6:bb:fb:
0d:e4:9e:80:bf:b3:64:40:d9:ed:75:0f:46:05:8f:7f:e1:13:
96:dd:66:28:ad:7c:00:91:2a:54:b7:0f:f7:fc:6e:37:5d:88:
b4:b6:fb:7d:2e:a6:bb:d0:62:e7:7f:b9:c4:20:37:0b:0f:d6:
7d:ee:1e:e8:c1:5b:ce:4c:dd:c0:c0:d4:d3:b2:cf:78:f9:b9:
58:f5:82:22:58:0a:2a:a9:e8:10:ff:d5:0c:5d:29:65:2d:b6:
00:e9:1b:eb:6b:7c:c0:fd:90:fe:38:90:36:8d:4d:9f:e8:da:
3a:f5:41:4b:c8:54:ed:e7:8b:c7:ca:1e:a7:4d:94:9f:7c:0f:
e0:e4:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:42 2025 by rpki-client