Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aTfV0Ia_c8eisSJpw3n6_LT5vlE.roa
File: aTfV0Ia_c8eisSJpw3n6_LT5vlE.roa (raw, json)
Hash identifier: NDymxvdVetaWBNZez0Ws7eDATjMQVbYqL0Ycu5dLvjk=
Subject key identifier: 69:37:D5:D0:86:BF:73:C7:A2:B1:22:69:C3:79:FA:FC:B4:F9:BE:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193506A16C70AFA32754D7F09C377D33728
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aTfV0Ia_c8eisSJpw3n6_LT5vlE.roa
Signing time: Thu 21 Nov 2024 20:29:10 +0000
ROA not before: Thu 21 Nov 2024 20:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205463
IP address blocks: 31.58.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Dec 2024 18:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:6a:16:c7:0a:fa:32:75:4d:7f:09:c3:77:d3:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 21 20:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6937d5d086bf73c7a2b12269c379fafcb4f9be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:8b:6b:9e:6c:6e:b6:30:a9:51:97:a4:c9:
1b:a2:17:5e:37:c3:4e:14:97:08:95:38:73:98:2e:
a3:f3:7d:c8:4f:c3:4f:ca:cb:2f:8d:5d:c9:fe:18:
d1:cc:b6:a0:bb:e7:95:a7:7e:fe:1a:00:a9:e9:09:
ac:57:cc:f6:e2:d4:6b:a0:b7:ae:07:25:c7:d1:74:
09:33:2f:ac:a3:6b:6e:71:97:e8:e7:39:a8:7b:c1:
8d:a3:1d:1d:9e:bf:1f:a3:65:81:56:25:08:50:54:
e3:f7:dd:bd:dc:56:af:5a:9e:8f:3c:54:d5:80:a7:
5c:04:33:c6:3d:2b:ac:41:6d:c2:b6:c9:e9:8c:00:
a8:69:96:dc:49:24:bd:e2:dd:ea:af:bd:45:18:bb:
d3:d6:fb:9d:a3:a7:78:82:0a:55:5b:1c:50:a7:42:
a9:4c:fb:e9:0c:d3:11:8a:f2:4e:8c:9c:fd:9a:52:
29:8e:76:44:9b:0a:5b:ad:13:b7:f4:3b:04:49:3a:
e7:2f:31:ff:6c:54:2e:b7:1c:e4:9e:79:48:61:7a:
fa:38:0d:68:24:68:ca:09:ab:13:d3:38:65:0e:ab:
5b:db:f9:c7:5d:c4:49:ce:87:7e:b3:4b:3b:45:f3:
a6:52:75:ba:c3:d3:73:c6:e7:68:10:14:f1:07:99:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:D5:D0:86:BF:73:C7:A2:B1:22:69:C3:79:FA:FC:B4:F9:BE:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aTfV0Ia_c8eisSJpw3n6_LT5vlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:aa:68:9d:68:a3:89:3d:f0:6b:4f:58:0b:d5:f4:84:ef:8e:
26:43:f8:63:13:68:9d:c2:1e:58:f9:ff:d0:3c:ca:44:be:16:
29:1e:c9:07:0f:ec:00:f1:47:28:c5:e8:4b:dd:b6:1b:67:41:
6b:79:c1:1f:2d:a4:e3:4f:be:c9:ba:52:9e:f6:7b:87:23:34:
75:78:44:b0:ce:aa:ab:00:f5:45:13:e6:60:09:f1:44:0b:df:
1e:39:36:3d:e0:0c:10:7c:fa:55:af:18:db:64:1b:79:8c:23:
16:d9:1a:4d:48:ca:13:c6:8b:49:3f:d0:be:0a:7f:6e:93:eb:
cd:b0:93:af:58:3b:2c:a1:2e:db:cc:05:1c:98:34:65:d0:1b:
06:96:fb:29:82:27:ff:0f:6b:b1:10:01:90:1d:35:eb:79:8c:
1f:88:22:6e:10:36:50:c4:3f:24:fe:f5:77:c9:63:87:2f:35:
b5:a0:12:e4:36:53:df:dc:3d:07:18:e6:05:f4:36:3f:02:0a:
84:bc:9b:cc:da:47:4f:57:de:35:2a:c4:82:d5:58:25:3e:82:
f4:da:f1:b4:27:c0:df:72:a1:6e:fb:45:ae:24:c8:fe:0a:c2:
fe:63:ff:81:41:6e:bb:f6:41:fe:cb:d7:84:b7:62:b0:3e:55:
96:90:b0:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNQahbHCvoydU1/CcN30zcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTIxMjAyOTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTM3ZDVkMDg2YmY3M2M3YTJiMTIyNjljMzc5ZmFmY2I0ZjliZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5+La55sbrYwqVGXpMkbohdeN8NO
FJcIlThzmC6j833IT8NPyssvjV3J/hjRzLagu+eVp37+GgCp6QmsV8z24tRroLeu
ByXH0XQJMy+so2tucZfo5zmoe8GNox0dnr8fo2WBViUIUFTj99293FavWp6PPFTV
gKdcBDPGPSusQW3CtsnpjACoaZbcSSS94t3qr71FGLvT1vudo6d4ggpVWxxQp0Kp
TPvpDNMRivJOjJz9mlIpjnZEmwpbrRO39DsESTrnLzH/bFQutxzknnlIYXr6OA1o
JGjKCasT0zhlDqtb2/nHXcRJzod+s0s7RfOmUnW6w9NzxudoEBTxB5k3xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGk31dCGv3PHorEiacN5+vy0+b5RMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYVRmVjBJYV9jOGVpc1NKcHczbjZfTFQ1dmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzr5MA0G
CSqGSIb3DQEBCwUAA4IBAQB6qmidaKOJPfBrT1gL1fSE744mQ/hjE2idwh5Y+f/Q
PMpEvhYpHskHD+wA8UcoxehL3bYbZ0FrecEfLaTjT77JulKe9nuHIzR1eESwzqqr
APVFE+ZgCfFEC98eOTY94AwQfPpVrxjbZBt5jCMW2RpNSMoTxotJP9C+Cn9uk+vN
sJOvWDssoS7bzAUcmDRl0BsGlvspgif/D2uxEAGQHTXreYwfiCJuEDZQxD8k/vV3
yWOHLzW1oBLkNlPf3D0HGOYF9DY/AgqEvJvM2kdPV941KsSC1VglPoL02vG0J8Df
cqFu+0WuJMj+CsL+Y/+BQW679kH+y9eEt2KwPlWWkLAR
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:00 2025 by rpki-client