Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cnmozJ_AVS95Syy2Hu4cO2yJtYE.roa
File: cnmozJ_AVS95Syy2Hu4cO2yJtYE.roa (raw, json)
Hash identifier: d5pWVBXbLJqQNO/wrjwP+qca9CMcodwC9g6CuFYxsyU=
Subject key identifier: 72:79:A8:CC:9F:C0:55:2F:79:4B:2C:B6:1E:EE:1C:3B:6C:89:B5:81
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193825245F3AAF7C1146D80FADC48EB23A6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cnmozJ_AVS95Syy2Hu4cO2yJtYE.roa
Signing time: Sun 01 Dec 2024 13:04:10 +0000
ROA not before: Sun 01 Dec 2024 13:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.57.206.0/24 maxlen: 24
31.57.246.0/23 maxlen: 23
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Dec 2024 10:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:82:52:45:f3:aa:f7:c1:14:6d:80:fa:dc:48:eb:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 1 13:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7279a8cc9fc0552f794b2cb61eee1c3b6c89b581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:9c:e9:3f:9d:97:f2:f3:42:3a:2e:51:05:
36:65:e7:bd:85:29:71:96:76:47:54:07:68:24:7a:
25:b9:23:f1:a4:db:26:13:37:03:81:0d:b8:ef:2b:
bf:93:85:9c:4a:22:7f:09:f1:4c:8d:e9:58:fa:ca:
e0:3a:70:ec:a1:83:8f:4f:13:3f:33:97:33:6c:70:
68:36:c8:2d:ef:24:0c:2b:ad:35:bc:09:fe:43:dc:
c1:85:8f:1a:48:dd:54:0c:b4:21:55:32:5f:5c:93:
44:fb:24:38:59:44:c8:92:9a:c0:ac:b6:54:11:de:
dd:2d:5a:95:c5:4c:7f:4e:d0:8a:43:6c:fb:7d:f0:
72:2c:bc:ab:71:fc:88:25:7a:1c:93:6b:ee:81:d7:
23:48:cb:58:65:ae:48:1e:a9:7d:94:05:56:31:0b:
8e:cf:77:18:4c:5c:a7:5f:5a:96:af:e4:33:cf:ba:
e7:11:c7:39:52:d2:0f:71:18:35:ff:13:2c:79:4c:
01:99:c6:c0:dd:f4:44:97:ae:e7:1f:ce:3d:55:2d:
9b:96:d3:77:a7:54:20:f7:a2:43:33:1d:ac:c1:ca:
74:dd:ee:60:b2:ee:bd:17:60:1a:f2:98:d2:37:02:
2e:71:36:40:c4:bb:13:34:3e:37:76:05:f4:25:eb:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:79:A8:CC:9F:C0:55:2F:79:4B:2C:B6:1E:EE:1C:3B:6C:89:B5:81
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cnmozJ_AVS95Syy2Hu4cO2yJtYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.206.0/24
31.57.246.0/23
31.58.90.0/24
31.58.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d5:de:dd:a1:9b:60:b1:f9:8f:32:9f:0a:db:16:03:65:93:
86:35:4a:a3:c7:5b:0b:a9:84:be:f6:70:65:34:55:18:dd:ed:
3c:e5:fb:d7:9c:a2:4c:2f:05:25:90:f5:b1:44:3e:b6:81:30:
63:c9:11:73:74:28:2c:3f:30:a6:fc:17:e7:b6:05:bb:19:c1:
6a:d1:b1:b7:6b:63:91:a5:3b:6b:e7:36:8c:c5:ee:13:67:d7:
1e:76:01:01:bb:69:40:0b:9e:56:48:c6:f0:4a:01:ee:67:01:
f4:c6:3b:fc:08:4b:71:08:21:8e:13:3f:30:57:c7:a4:2f:38:
8e:ba:bb:c5:7b:6f:f4:79:bf:df:e8:6d:07:38:5c:75:41:1f:
47:f8:33:2e:6e:d6:ed:2c:ec:cf:e0:cf:e2:93:7c:2f:a7:9d:
77:33:64:11:14:d5:12:86:81:95:5f:59:71:cf:7b:8b:ce:32:
31:09:ff:1f:fe:2d:ef:ef:8f:8e:46:8d:95:ba:ff:20:fd:e4:
e7:4c:70:53:c1:7c:a8:56:9f:c9:2a:28:d1:26:a8:eb:d4:7c:
c6:c8:5b:0c:7f:e2:bd:97:df:97:d1:d1:1e:a0:86:29:1e:d2:
7f:bc:d8:c7:ac:e6:46:ca:3e:c2:69:be:70:c3:91:b7:6c:7b:
37:2d:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:14 2025 by rpki-client