Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZFfK_ubCZUEzSTwGs2JtWbigK8U.roa
File: ZFfK_ubCZUEzSTwGs2JtWbigK8U.roa (raw, json)
Hash identifier: dGNzX4m3oy83l86+QP7zo0ndHBF5svEBfoQyN5hU49A=
Subject key identifier: 64:57:CA:FE:E6:C2:65:41:33:49:3C:06:B3:62:6D:59:B8:A0:2B:C5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193BBA0E0E4C785F23719A1E0DBE0DB7FF7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZFfK_ubCZUEzSTwGs2JtWbigK8U.roa
Signing time: Thu 12 Dec 2024 16:08:22 +0000
ROA not before: Thu 12 Dec 2024 16:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151704
IP address blocks: 31.58.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:a0:e0:e4:c7:85:f2:37:19:a1:e0:db:e0:db:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 12 16:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6457cafee6c2654133493c06b3626d59b8a02bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:aa:fe:98:ee:67:46:9a:df:6c:58:63:15:
7a:14:de:03:28:29:04:1d:3d:77:0c:65:1d:bd:2e:
35:c9:92:f4:81:b7:a3:bc:0f:bd:f7:7d:25:6f:3a:
10:ce:b7:1a:25:e2:46:a2:c4:9e:e9:91:a5:2c:aa:
ae:51:97:27:3a:de:88:43:8f:7c:7f:ff:03:3d:24:
06:23:bc:a8:62:33:f6:ce:ae:58:51:f6:00:08:93:
e5:53:33:3e:06:7c:1b:b1:32:ce:56:c0:da:b7:8d:
d3:7f:c4:96:a0:46:85:18:ba:2d:c9:91:d9:fb:69:
e1:a9:b7:bf:41:16:9d:a6:78:f3:8a:d1:54:07:ef:
46:25:61:6e:70:6d:e8:dd:47:9e:48:2d:5c:0c:8e:
fa:61:69:67:0c:41:e2:87:db:8c:3c:0a:54:db:5e:
8d:c8:4d:df:8c:db:05:f4:45:fa:5e:2b:5e:5e:f7:
a5:71:bd:54:e2:e3:66:e7:2d:bd:a4:5b:ba:5d:1e:
17:b0:cb:0f:b1:8d:04:b0:91:58:4b:71:5d:2a:64:
4f:01:f9:b8:d3:b8:9b:82:c8:16:2f:51:76:08:44:
5d:2b:eb:83:47:35:4f:93:07:41:17:33:1d:87:53:
85:ab:bd:65:55:1a:2a:e1:5e:9d:4f:2d:31:ee:eb:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:CA:FE:E6:C2:65:41:33:49:3C:06:B3:62:6D:59:B8:A0:2B:C5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZFfK_ubCZUEzSTwGs2JtWbigK8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.171.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e1:53:2b:77:48:ef:8f:86:93:f5:cb:bd:c6:41:33:eb:1a:
75:33:bb:15:bc:f3:7e:47:bb:d5:e7:77:cf:6d:e5:52:05:01:
1a:2c:da:85:f9:51:7c:7b:7b:16:81:9d:b1:b1:aa:fc:48:04:
81:eb:86:39:34:a9:0d:10:85:90:ea:97:23:ba:96:14:3a:18:
a5:d3:7f:7f:e1:80:83:c4:55:3b:12:6a:e2:c6:90:36:27:f8:
4a:a6:b8:de:bf:7e:70:b3:e6:a0:ee:cb:ba:68:7f:c0:d3:f1:
10:e2:e1:97:dd:ed:34:81:00:34:21:b2:7d:23:0f:a8:92:d2:
49:e3:59:ba:83:b5:bd:6d:2f:7c:9a:bc:f7:63:19:5e:35:73:
5c:cc:62:bb:38:33:84:86:94:17:eb:78:97:50:4a:52:b6:61:
68:c9:01:c7:e5:07:b6:ce:db:d2:a1:cc:05:26:5c:26:21:01:
49:9e:95:d2:76:b6:ed:51:fe:ab:1d:1c:41:b8:72:10:f0:48:
2e:dc:0e:12:bf:8d:8b:85:3e:e6:e0:b5:5a:55:23:27:75:fd:
02:9e:13:cd:92:c9:82:86:53:b0:7d:55:9a:1b:f8:b6:b9:70:
d7:9b:c9:70:0d:8e:53:a2:07:df:72:d4:a1:d5:33:0b:fa:b3:
0e:5c:a4:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO7oODkx4XyNxmh4Nvg23/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjEyMTYwODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDU3Y2FmZWU2YzI2NTQxMzM0OTNjMDZiMzYyNmQ1OWI4YTAyYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW2q/pjuZ0aa32xYYxV6FN4DKCkE
HT13DGUdvS41yZL0gbejvA+9930lbzoQzrcaJeJGosSe6ZGlLKquUZcnOt6IQ498
f/8DPSQGI7yoYjP2zq5YUfYACJPlUzM+BnwbsTLOVsDat43Tf8SWoEaFGLotyZHZ
+2nhqbe/QRadpnjzitFUB+9GJWFucG3o3UeeSC1cDI76YWlnDEHih9uMPApU216N
yE3fjNsF9EX6XiteXvelcb1U4uNm5y29pFu6XR4XsMsPsY0EsJFYS3FdKmRPAfm4
07ibgsgWL1F2CERdK+uDRzVPkwdBFzMdh1OFq71lVRoq4V6dTy0x7uvoTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRXyv7mwmVBM0k8BrNibVm4oCvFMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWkZmS191YkNaVUV6U1R3R3MySnRXYmlnSzhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqrMA0G
CSqGSIb3DQEBCwUAA4IBAQAi4VMrd0jvj4aT9cu9xkEz6xp1M7sVvPN+R7vV53fP
beVSBQEaLNqF+VF8e3sWgZ2xsar8SASB64Y5NKkNEIWQ6pcjupYUOhil039/4YCD
xFU7EmrixpA2J/hKprjev35ws+ag7su6aH/A0/EQ4uGX3e00gQA0IbJ9Iw+oktJJ
41m6g7W9bS98mrz3YxleNXNczGK7ODOEhpQX63iXUEpStmFoyQHH5Qe2ztvSocwF
JlwmIQFJnpXSdrbtUf6rHRxBuHIQ8Egu3A4Sv42LhT7m4LVaVSMndf0CnhPNksmC
hlOwfVWaG/i2uXDXm8lwDY5TogffctSh1TML+rMOXKSq
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:36 2025 by rpki-client