Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_TrRM_EA119y9xKudOToCxAndEM.roa
File: _TrRM_EA119y9xKudOToCxAndEM.roa (raw, json)
Hash identifier: Ys1f94eCN6yuLvGb63Y/f6e7B/yJ783q5LovTfkPgvg=
Subject key identifier: FD:3A:D1:33:F1:00:D7:5F:72:F7:12:AE:74:E4:E8:0B:10:27:74:43
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01945126E872BED66FDA09886119FD456EA1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_TrRM_EA119y9xKudOToCxAndEM.roa
Signing time: Fri 10 Jan 2025 16:58:11 +0000
ROA not before: Fri 10 Jan 2025 16:58:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.58.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 18:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:51:26:e8:72:be:d6:6f:da:09:88:61:19:fd:45:6e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 10 16:58:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd3ad133f100d75f72f712ae74e4e80b10277443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:d5:71:c5:e0:da:a8:14:ee:5d:c4:36:39:
35:20:4c:01:24:9e:d9:a6:1c:83:b7:50:61:e1:f8:
8c:34:e7:d4:6b:df:19:f3:0f:94:7d:fd:d5:f4:61:
18:c8:e1:07:a2:b7:b0:fd:33:bc:dc:18:77:17:e4:
27:f4:e2:ac:fb:3e:e5:62:d8:6e:24:f6:7f:cd:c6:
b3:13:32:9e:f9:23:cd:26:ea:61:fd:8a:45:3a:13:
78:a4:04:c2:d9:93:7f:20:cb:b9:24:8a:9b:64:14:
67:73:9f:75:2c:e4:0f:46:0a:8e:06:d1:d4:aa:76:
fc:57:17:2b:70:f5:36:ca:bf:29:60:ba:81:83:df:
74:5d:38:a0:81:5b:2e:36:2c:38:cb:98:e2:73:ce:
34:f9:dd:20:7c:99:1f:f1:a8:ca:6e:a4:be:51:dc:
19:22:01:cc:bc:eb:8a:1a:61:57:54:f0:fd:f4:1e:
20:63:7a:4c:d6:d0:b6:8f:69:28:a0:ce:26:a0:9c:
c0:99:af:0d:0b:52:17:23:ca:6e:82:69:9d:60:33:
35:ae:42:b5:8c:00:60:18:76:12:c8:ec:4a:0d:2e:
e6:de:cb:f1:3e:76:f6:8d:ce:91:da:e7:8a:f5:12:
6b:1d:63:4d:6b:44:01:75:cc:b4:cf:22:5b:fb:3c:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:D1:33:F1:00:D7:5F:72:F7:12:AE:74:E4:E8:0B:10:27:74:43
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_TrRM_EA119y9xKudOToCxAndEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.57.132.0/24
31.57.222.0/23
31.58.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:81:8f:02:30:a5:85:c9:ab:15:17:3e:84:59:35:49:33:d3:
f5:7a:3b:4c:cd:24:1c:76:67:4b:97:2b:84:65:ff:cd:09:df:
c0:c4:f6:0f:43:8b:60:81:e1:5e:09:2a:83:63:c4:bb:0b:6a:
94:d9:77:fb:8b:ab:c2:60:88:76:6b:de:ea:5e:eb:be:01:f7:
33:b8:62:18:3e:4f:58:1d:cf:87:c3:a3:05:75:bc:1b:a2:fc:
a7:b4:d0:14:ef:d0:4f:af:f4:51:f5:98:62:36:f5:e9:44:1a:
e1:c4:e5:99:6d:1d:2c:1c:d2:8c:2f:e3:65:72:4d:4f:99:4e:
cc:f6:27:57:a5:66:f3:a1:a3:42:f1:88:de:ac:9e:97:29:d1:
af:ec:fa:de:31:d0:ca:f1:6a:98:d4:9e:69:9f:ea:54:86:97:
6c:72:e7:07:39:8d:ca:54:74:34:e4:6b:99:b4:16:4d:11:49:
93:07:d7:64:8a:10:17:24:57:b0:7f:f4:c7:4a:63:f7:4d:0f:
19:99:54:e1:c1:ef:fd:62:ee:07:21:5f:47:0e:67:46:cd:df:
ac:4a:45:f9:98:c3:44:37:8e:67:77:14:fa:c9:db:1b:12:c8:
c1:cb:d7:ce:cb:6e:4f:92:18:ab:42:f1:f0:a1:40:56:11:64:
90:3c:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:02:19 2025 by rpki-client