Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_ouR07Z6GxjatLOl96X8yM6O_wE.roa
File: _ouR07Z6GxjatLOl96X8yM6O_wE.roa (raw, json)
Hash identifier: xuWV03J68BFTnfVtcLV2BNnIbthCvPwctjMbMb6EYn8=
Subject key identifier: FE:8B:91:D3:B6:7A:1B:18:DA:B4:B3:A5:F7:A5:FC:C8:CE:8E:FF:01
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193825331323348CD50386E58A87F458EC1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_ouR07Z6GxjatLOl96X8yM6O_wE.roa
Signing time: Sun 01 Dec 2024 13:05:10 +0000
ROA not before: Sun 01 Dec 2024 13:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 31.57.10.0/24 maxlen: 24
31.57.189.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 10:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:82:53:31:32:33:48:cd:50:38:6e:58:a8:7f:45:8e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 1 13:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe8b91d3b67a1b18dab4b3a5f7a5fcc8ce8eff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:c6:75:38:0a:9d:7e:df:e0:9e:32:ab:e8:
9c:c4:91:d2:16:2d:ca:f1:2d:1a:c4:6d:ca:45:76:
45:62:bf:cf:ff:ab:32:63:b4:a5:dc:34:4d:8b:55:
1f:77:10:d4:89:6f:33:87:58:61:ea:23:8f:4e:3c:
06:13:5e:f2:31:78:0c:0a:9f:1e:af:1d:b7:39:cd:
13:56:08:ac:8c:f8:a8:54:b9:f2:8e:7d:36:fc:41:
3a:4d:a2:79:7f:3d:db:47:85:2e:9e:d7:13:39:0e:
41:a6:9d:b5:1d:e7:88:b7:04:3e:ce:96:11:da:04:
ae:9e:eb:f6:62:81:08:b3:68:b8:b5:a5:3f:25:7a:
4f:ed:c8:b4:6f:aa:f9:ca:81:03:51:26:48:a5:fe:
9c:1f:74:9f:b4:9f:cb:4b:1c:44:ad:5a:04:f4:89:
35:5a:76:f2:d7:ef:1d:fa:49:cc:14:b7:08:c8:68:
fb:4c:bd:f8:4d:a7:b1:19:b3:f1:5c:39:0f:8a:d4:
5d:97:98:31:97:10:56:46:94:32:ea:f2:70:85:80:
29:dd:e6:83:db:e2:9f:d1:65:7f:c8:dd:74:ff:be:
c0:33:33:46:a7:87:0a:d9:bc:c0:20:b7:7f:04:b4:
9f:76:c1:cc:4f:a5:d1:0c:9a:4c:12:51:00:b2:c0:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:91:D3:B6:7A:1B:18:DA:B4:B3:A5:F7:A5:FC:C8:CE:8E:FF:01
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_ouR07Z6GxjatLOl96X8yM6O_wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.10.0/24
31.57.189.0/24
31.57.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fe:cb:b8:39:18:c1:c9:a2:ac:f8:ee:ef:4b:9a:c5:21:3c:
29:e3:2d:bc:58:09:af:9c:de:97:7b:8d:02:1f:a4:f9:cf:be:
99:45:17:a2:17:88:3d:f1:62:a7:1a:12:1b:01:cc:19:2a:85:
a5:21:53:a4:96:a1:4a:27:a7:66:82:90:29:87:84:c6:28:3d:
49:f3:b3:fa:e8:c4:53:74:1e:b3:0b:d8:be:28:d1:01:14:f8:
08:71:3e:51:75:70:73:fa:8f:d5:78:80:5b:da:8c:92:9d:e8:
1f:55:91:c2:56:af:29:f5:b7:95:bd:50:43:cf:92:a6:6f:9a:
06:ae:8c:69:a3:fd:6b:32:82:e2:b6:44:6e:50:73:bd:39:dd:
e1:0a:8b:ee:99:18:eb:00:4e:92:80:91:01:7d:0c:44:b4:b6:
de:61:9f:94:d7:4b:6a:67:06:ba:e4:39:3e:6b:21:b1:14:ea:
bb:52:1b:41:ae:c4:b8:a1:73:dd:d5:60:08:95:4b:57:78:25:
52:42:fa:08:7d:8c:fe:46:ed:3d:96:84:4e:12:3c:38:e2:6e:
94:a4:2c:c8:8c:d9:6f:49:7a:41:aa:ce:6b:4e:03:7e:53:7d:
75:7d:80:2f:81:6d:66:74:0a:7f:eb:4a:2c:ca:04:11:55:d6:
dc:75:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:04 2025 by rpki-client