Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y7kJpZZp3oTphikVOzpyJO8zEy8.roa
File: Y7kJpZZp3oTphikVOzpyJO8zEy8.roa (raw, json)
Hash identifier: UdRK17uARyfYHhMvP+kR28gkWVbZukVJzvrTwXhi4WE=
Subject key identifier: 63:B9:09:A5:96:69:DE:84:E9:86:29:15:3B:3A:72:24:EF:33:13:2F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282336F9AA9F54DB7FE23C742B35CCE6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y7kJpZZp3oTphikVOzpyJO8zEy8.roa
Signing time: Thu 02 Jan 2025 17:49:43 +0000
ROA not before: Thu 02 Jan 2025 17:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 08:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:36:f9:aa:9f:54:db:7f:e2:3c:74:2b:35:cc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63b909a59669de84e98629153b3a7224ef33132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:44:18:ca:f7:5b:d4:86:7a:2a:3f:bd:2b:
0d:cf:66:74:a2:9c:13:84:f3:1f:26:ce:49:72:99:
47:e6:26:93:a1:8a:11:e6:1c:46:86:de:db:d2:16:
40:ab:2c:a6:0d:75:5a:e7:c9:4d:cd:47:46:1b:85:
e1:07:09:50:92:a4:52:2d:c1:9f:ed:40:0b:58:3f:
d8:0e:bb:26:e7:c9:82:0b:f1:ae:e7:72:fc:d3:1d:
5f:41:f7:8f:14:bf:a0:44:8c:19:7d:d8:81:04:e3:
d2:b7:2b:5a:58:cf:ab:a2:b0:c0:7f:71:82:1b:99:
f9:4e:d2:4b:f0:a5:85:9a:9c:6e:92:e2:39:17:97:
d3:42:6d:de:7b:dc:db:66:2a:e2:cc:a9:9c:cd:09:
c6:fe:ce:8c:bd:11:90:0c:6c:fd:65:76:fa:9f:a7:
15:61:3a:bf:0c:02:c7:e2:f8:46:d4:c2:5f:b3:11:
f0:62:2d:4b:a1:6f:18:05:f7:cf:b6:7c:e8:35:61:
db:a7:5b:7d:ab:11:56:05:51:d9:26:55:92:10:8a:
1e:89:ef:a0:df:e8:62:b3:a9:6a:93:b2:b0:9e:81:
23:ee:f3:f7:6f:9a:99:b7:f4:2a:10:b5:a2:63:7c:
51:ce:22:de:3a:e2:06:0c:94:21:ff:08:37:b8:1c:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B9:09:A5:96:69:DE:84:E9:86:29:15:3B:3A:72:24:EF:33:13:2F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y7kJpZZp3oTphikVOzpyJO8zEy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:ba:74:82:a0:d0:a4:90:e7:d0:83:e4:d6:cf:3f:a9:24:2f:
59:a4:65:f4:c2:c3:b4:c5:6d:cf:75:cc:cd:6c:e9:9c:91:7d:
26:a6:3d:f8:ac:aa:f0:46:de:a0:59:30:bc:fd:79:d1:5f:fb:
8a:49:7a:95:0b:39:89:59:ff:ff:ee:22:c1:56:4a:4e:eb:a6:
36:3b:66:72:4c:fa:7d:16:4b:9d:1a:f6:a8:12:50:d0:f1:7c:
93:f3:b0:0e:8a:c1:12:36:9f:5a:c2:2c:14:5d:24:b9:a0:b7:
0e:42:15:f8:d4:95:27:3f:7a:7e:f7:32:c9:23:0f:ec:ee:b0:
e8:19:c0:0d:6b:1c:ff:11:21:e9:16:a8:40:be:e8:e9:7b:ef:
fd:5b:38:a4:80:0d:06:09:8f:db:9e:91:88:d2:5f:04:6f:aa:
4d:03:5c:89:4c:cb:3d:f1:fd:51:00:e8:e6:a6:74:8b:f6:b6:
7b:28:7f:ad:14:b7:2a:ed:65:6e:7e:e4:b4:c1:ab:5c:d2:4e:
4b:85:6a:23:d7:62:7c:b6:2f:d0:86:41:04:b6:17:b7:31:8b:
ac:3a:01:01:8c:d8:b4:01:f9:fc:3a:8a:6d:8d:4d:97:6c:c0:
b3:6c:30:d3:bb:be:cd:8c:5e:f7:d5:31:f1:a8:76:a5:4f:af:
d5:02:e3:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoIzb5qp9U23/iPHQrNczmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2I5MDlhNTk2NjlkZTg0ZTk4NjI5MTUzYjNhNzIyNGVmMzMxMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+FEGMr3W9SGeio/vSsNz2Z0opwT
hPMfJs5JcplH5iaToYoR5hxGht7b0hZAqyymDXVa58lNzUdGG4XhBwlQkqRSLcGf
7UALWD/YDrsm58mCC/Gu53L80x1fQfePFL+gRIwZfdiBBOPStytaWM+rorDAf3GC
G5n5TtJL8KWFmpxukuI5F5fTQm3ee9zbZirizKmczQnG/s6MvRGQDGz9ZXb6n6cV
YTq/DALH4vhG1MJfsxHwYi1LoW8YBffPtnzoNWHbp1t9qxFWBVHZJlWSEIoeie+g
3+his6lqk7KwnoEj7vP3b5qZt/QqELWiY3xRziLeOuIGDJQh/wg3uBzF9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGO5CaWWad6E6YYpFTs6ciTvMxMvMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWTdrSnBaWnAzb1RwaGlrVk96cHlKTzh6RXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzg+AwQB
HzneMA0GCSqGSIb3DQEBCwUAA4IBAQClunSCoNCkkOfQg+TWzz+pJC9ZpGX0wsO0
xW3PdczNbOmckX0mpj34rKrwRt6gWTC8/XnRX/uKSXqVCzmJWf//7iLBVkpO66Y2
O2ZyTPp9FkudGvaoElDQ8XyT87AOisESNp9awiwUXSS5oLcOQhX41JUnP3p+9zLJ
Iw/s7rDoGcANaxz/ESHpFqhAvujpe+/9WzikgA0GCY/bnpGI0l8Eb6pNA1yJTMs9
8f1RAOjmpnSL9rZ7KH+tFLcq7WVufuS0watc0k5LhWoj12J8ti/QhkEEthe3MYus
OgEBjNi0Afn8OoptjU2XbMCzbDDTu77NjF731THxqHalT6/VAuOJ
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:08 2025 by rpki-client