Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZtKV3_aEBnefa2QoXU2C9mT0rGI.roa
File: ZtKV3_aEBnefa2QoXU2C9mT0rGI.roa (raw, json)
Hash identifier: Y02foAvFb1wJSsuihNGBIob2DJ+PGtkpyNLOadYodBg=
Subject key identifier: 66:D2:95:DF:F6:84:06:77:9F:6B:64:28:5D:4D:82:F6:64:F4:AC:62
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428233345E6A3059D87BBE320A499009D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZtKV3_aEBnefa2QoXU2C9mT0rGI.roa
Signing time: Thu 02 Jan 2025 17:49:43 +0000
ROA not before: Thu 02 Jan 2025 17:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 31.56.160.0/21 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:33:45:e6:a3:05:9d:87:bb:e3:20:a4:99:00:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d295dff68406779f6b64285d4d82f664f4ac62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:8f:50:14:39:27:7e:27:e3:c3:f4:cd:de:
f7:72:fd:83:00:3a:33:f6:28:90:22:67:1c:a2:6a:
73:ad:01:3f:f9:2f:35:3d:b2:ef:24:24:01:6d:0e:
28:09:e9:b6:e0:f3:f1:c3:7e:c4:64:2a:8d:40:48:
51:1e:47:06:33:8d:2a:8a:7a:55:61:0e:45:f4:3c:
f8:33:7d:46:94:26:9d:62:28:1f:0c:e6:d7:54:22:
d5:6b:5e:ba:c8:04:b0:05:20:9b:c1:62:ea:84:52:
4a:cb:a2:8a:9a:c1:90:47:31:d7:85:d4:17:e8:b9:
6a:a8:68:15:04:a2:b4:11:91:81:6c:40:5c:54:e7:
21:16:35:26:f7:bf:78:09:28:33:fd:56:c0:16:74:
44:39:55:ec:1f:ac:57:38:b2:3c:e2:be:03:c5:14:
70:70:9f:c4:f9:1a:54:43:30:11:72:56:5b:e2:19:
93:45:98:78:88:a1:15:84:f1:53:47:42:d1:8e:75:
9d:88:77:94:37:4a:85:36:79:50:51:4b:c0:61:cf:
c7:43:e0:fa:8d:7f:6f:47:f4:16:1c:8e:22:a7:b4:
3a:1f:f5:5d:b6:3b:48:0c:82:8b:cd:60:7f:30:f2:
bd:48:37:0b:b8:48:7d:37:4b:c8:dd:4d:b4:06:d3:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:95:DF:F6:84:06:77:9F:6B:64:28:5D:4D:82:F6:64:F4:AC:62
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZtKV3_aEBnefa2QoXU2C9mT0rGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.160.0/21
31.57.202.0/23
Signature Algorithm: sha256WithRSAEncryption
67:82:e7:62:3a:88:e3:f9:a7:fa:c1:8c:2c:04:4a:79:d7:ce:
ab:17:e9:3c:bb:75:46:e9:28:da:58:61:a4:19:a7:f4:09:e2:
8e:f9:1d:10:33:72:57:7e:c6:2a:d5:90:c3:67:55:61:43:a9:
85:50:e1:e8:8d:29:80:dd:ba:00:fe:04:6e:e8:82:94:b6:b2:
da:cb:4e:93:92:e2:6d:7d:58:74:cf:5e:48:4e:6e:f1:d5:05:
b4:80:88:8b:54:ac:ae:6b:c9:95:ff:a1:ae:32:5f:36:67:af:
e1:e6:c7:0a:c6:3a:6c:b8:f1:14:87:73:86:24:8e:a1:84:ec:
37:89:09:fb:a3:e5:ac:b5:ae:51:41:e8:97:a3:d4:56:1a:2c:
fa:fd:2c:98:22:c9:9f:14:08:c5:17:3f:b1:f3:f3:b5:2b:41:
06:dd:ad:70:d3:f2:89:6a:d8:a7:72:a0:c2:96:30:b7:88:b0:
8c:7a:11:8a:18:fa:7a:b9:a5:e2:23:b8:31:54:4c:a1:98:f2:
f1:ad:40:2f:4f:a8:e9:f0:ec:96:53:b4:76:33:69:2d:3b:ec:
7e:ed:88:2d:ae:05:cb:6b:bd:db:a4:84:24:77:d0:d5:40:60:
e0:ff:6b:70:41:40:f6:70:a6:4a:bd:c3:a8:87:8d:ce:c2:61:
e3:0b:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:28 2025 by rpki-client