Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bBrdgvsQNa-F3inRkt6xGXGTzV0.roa
File: bBrdgvsQNa-F3inRkt6xGXGTzV0.roa (raw, json)
Hash identifier: 96fFryS4Oig1tSOO5oAzszYtAqHQ/hIO2bYv1KWp6Qg=
Subject key identifier: 6C:1A:DD:82:FB:10:35:AF:85:DE:29:D1:92:DE:B1:19:71:93:CD:5D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A25BB57C377815A739537B9499881739
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bBrdgvsQNa-F3inRkt6xGXGTzV0.roa
Signing time: Sun 26 Jan 2025 11:25:06 +0000
ROA not before: Sun 26 Jan 2025 11:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150519
IP address blocks: 31.56.120.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 19:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:5b:b5:7c:37:78:15:a7:39:53:7b:94:99:88:17:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 26 11:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c1add82fb1035af85de29d192deb1197193cd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:bd:b3:9c:21:0c:cc:72:cb:1c:dc:54:d1:
21:65:cc:9e:80:0c:7b:a1:de:cb:d0:fb:54:ee:33:
a0:18:6c:70:7b:85:f1:53:81:8f:1a:37:8b:ea:3f:
1e:0a:0e:d7:14:b8:88:86:26:5b:ac:2f:1a:9e:c3:
52:ce:33:d3:90:d7:20:fa:78:b4:01:45:78:eb:a0:
f0:f0:6e:f6:b7:36:a4:4e:93:eb:1d:a0:29:f8:de:
8c:a1:91:f5:c8:77:8a:db:5f:87:77:38:55:8f:c6:
02:3e:fe:b6:a0:61:b8:01:fe:10:24:02:42:13:80:
83:96:70:05:68:83:e4:4d:3f:e1:50:5e:92:e9:cb:
fd:81:76:18:1a:ba:cf:7c:84:c7:6e:25:3b:30:c3:
11:56:bf:cd:8a:02:2f:79:ae:fa:53:4f:6f:6d:6e:
4e:5c:72:59:9c:d2:39:78:a5:11:66:15:19:9a:75:
0c:b0:96:10:4d:fa:e3:ae:07:32:36:a1:02:17:ab:
8d:76:61:c4:71:16:67:f7:ab:bb:af:e6:8f:12:89:
b6:50:88:49:e9:f0:34:88:1c:d9:c7:a6:e6:bb:17:
7e:54:4c:3c:99:4e:5d:30:73:56:f3:35:a2:e6:69:
b1:c3:da:af:16:51:77:d8:71:3e:41:07:bf:d6:99:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1A:DD:82:FB:10:35:AF:85:DE:29:D1:92:DE:B1:19:71:93:CD:5D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bBrdgvsQNa-F3inRkt6xGXGTzV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.120.0/24
31.57.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:99:2e:4d:1d:bf:fa:66:0f:e8:19:ba:8f:80:02:5d:51:f2:
f4:83:dd:67:34:ee:ed:4b:e3:1e:21:c5:a0:a7:77:31:62:72:
24:37:08:81:00:02:d4:3e:42:97:16:ab:21:27:60:a1:f0:9d:
d8:9a:77:a4:0f:59:db:c9:0a:a8:e4:d0:42:16:e4:9e:90:f6:
af:48:fa:8b:1f:bf:e1:0b:55:6a:65:d6:4f:bf:82:97:57:29:
30:f6:d8:46:9c:5a:c5:5a:20:cb:8e:e9:c9:38:dc:2b:35:43:
4d:51:60:1f:d1:33:f4:24:34:63:73:fd:d9:4b:39:00:e5:1d:
c4:f7:d1:bf:3d:9c:9d:42:0e:33:34:67:fd:58:20:00:80:16:
82:01:c0:cb:d7:7a:0e:5f:1f:69:ce:c5:c0:d2:05:ad:b3:8b:
37:54:8c:1c:88:98:bf:49:fc:1f:69:92:0f:48:63:c6:b6:34:
59:45:f7:50:e0:11:2c:ca:e9:d1:ef:4f:37:d7:f2:a4:a2:bc:
02:bb:1d:16:72:82:7f:b1:9f:21:1c:c0:36:32:8d:36:50:17:
83:7c:0f:32:2b:d6:7c:53:3a:18:95:89:7c:95:8a:52:2d:b1:
ae:4d:7c:29:9a:9e:95:a6:36:53:a5:4c:62:4c:06:3a:03:73:
05:6f:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:11 2025 by rpki-client