Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f-lhfKjennRqlOBP1c-emEng060.roa
File: f-lhfKjennRqlOBP1c-emEng060.roa (raw, json)
Hash identifier: u503w7hNonzO5xNnV3aEIvt8QEPdT5GAj4dta8lenBI=
Subject key identifier: 7F:E9:61:7C:A8:DE:9E:74:6A:94:E0:4F:D5:CF:9E:98:49:E0:D3:AD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019519FCF61937C0A662602B2D5FD396F8EC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f-lhfKjennRqlOBP1c-emEng060.roa
Signing time: Tue 18 Feb 2025 16:56:03 +0000
ROA not before: Tue 18 Feb 2025 16:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214819
IP address blocks: 31.58.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 19:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:fc:f6:19:37:c0:a6:62:60:2b:2d:5f:d3:96:f8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 18 16:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fe9617ca8de9e746a94e04fd5cf9e9849e0d3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:e4:87:a8:53:02:f9:ce:a8:b3:71:cf:2e:
5b:54:d9:14:2d:3b:eb:18:00:c4:66:2a:9e:0e:57:
12:a9:5b:ad:c6:fb:fe:02:f5:21:5c:00:de:2c:8a:
ee:1d:7d:fa:e6:74:61:88:d4:d2:d4:5a:53:a0:20:
9d:26:9e:4f:2f:62:a9:66:96:8f:59:90:70:83:a5:
9d:54:3c:0e:12:70:a7:d2:a4:36:75:2b:7e:ce:99:
60:66:d0:8f:6e:99:4e:53:1a:ea:04:62:ac:e5:30:
ce:32:26:41:69:6e:6c:7c:70:00:86:64:24:ec:ac:
18:6c:4c:3a:0c:17:60:bd:54:3a:9e:b4:72:bf:45:
22:5a:65:52:cd:06:21:fc:66:83:cc:26:dd:a2:a6:
2b:4f:37:da:95:6f:4a:c2:02:0b:a3:f1:0f:26:08:
72:2e:b6:0f:ae:b9:79:88:d7:a8:eb:08:29:6d:6b:
17:4a:d6:1c:05:bf:a7:0c:a2:0a:a9:1a:5e:78:7f:
c8:f9:ab:c6:7e:93:2d:6e:5b:0c:b3:bc:2b:a4:e6:
c3:e0:ff:4c:a6:b3:e2:34:9a:45:86:44:3c:2e:d7:
f1:72:89:6f:bc:b8:c2:c3:73:65:42:d3:75:83:a9:
cd:f5:c4:92:7e:27:c2:f0:9a:4e:13:93:af:e7:e0:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E9:61:7C:A8:DE:9E:74:6A:94:E0:4F:D5:CF:9E:98:49:E0:D3:AD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f-lhfKjennRqlOBP1c-emEng060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.50.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2c:b8:a7:e9:37:42:5c:a0:02:5a:9c:38:f3:12:66:f1:df:
e5:90:2a:24:71:8a:d7:85:36:ca:a2:9f:c4:81:d0:9a:8a:ba:
99:d7:6d:69:a5:c3:b9:9a:3e:d8:ea:46:92:59:74:28:2b:2c:
85:ad:3f:a4:97:e5:d8:2c:86:1a:10:b7:ee:51:fa:21:e2:a3:
0b:5a:ec:b6:d2:94:93:1c:ee:da:c2:2c:ca:c0:8f:44:08:4d:
7e:a4:e0:33:20:c0:40:46:08:97:ef:c8:65:71:4c:3c:f9:1a:
60:7b:f6:86:5b:4d:27:e5:da:28:39:10:2a:80:4b:e8:02:20:
fd:44:c9:be:fb:f0:73:5e:0d:41:74:15:c9:cd:bf:71:ea:94:
80:1f:22:34:d8:c0:56:6c:6f:e5:be:8f:5b:66:af:d2:45:35:
8d:0a:bf:02:4d:85:0c:7c:2e:e7:64:17:70:7b:bb:01:2d:b5:
65:31:c9:0e:75:8b:a3:f1:ef:8a:cc:be:32:0a:99:01:45:bb:
a7:bf:ba:80:d0:8a:de:97:ed:9b:b1:72:4d:21:2e:39:49:50:
bb:d6:97:5e:5d:fc:87:40:16:89:d6:10:83:94:51:d0:74:74:
db:08:c7:96:e4:ef:1b:2d:13:f3:a3:73:fb:74:c4:5a:71:01:
21:54:54:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUZ/PYZN8CmYmArLV/TlvjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjE4MTY1NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmU5NjE3Y2E4ZGU5ZTc0NmE5NGUwNGZkNWNmOWU5ODQ5ZTBkM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYfkh6hTAvnOqLNxzy5bVNkULTvr
GADEZiqeDlcSqVutxvv+AvUhXADeLIruHX365nRhiNTS1FpToCCdJp5PL2KpZpaP
WZBwg6WdVDwOEnCn0qQ2dSt+zplgZtCPbplOUxrqBGKs5TDOMiZBaW5sfHAAhmQk
7KwYbEw6DBdgvVQ6nrRyv0UiWmVSzQYh/GaDzCbdoqYrTzfalW9KwgILo/EPJghy
LrYPrrl5iNeo6wgpbWsXStYcBb+nDKIKqRpeeH/I+avGfpMtblsMs7wrpObD4P9M
prPiNJpFhkQ8LtfxcolvvLjCw3NlQtN1g6nN9cSSfifC8JpOE5Ov5+CGbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/pYXyo3p50apTgT9XPnphJ4NOtMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZi1saGZLamVublJxbE9CUDFjLWVtRW5nMDYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzoyMA0G
CSqGSIb3DQEBCwUAA4IBAQA3LLin6TdCXKACWpw48xJm8d/lkCokcYrXhTbKop/E
gdCairqZ121ppcO5mj7Y6kaSWXQoKyyFrT+kl+XYLIYaELfuUfoh4qMLWuy20pST
HO7awizKwI9ECE1+pOAzIMBARgiX78hlcUw8+Rpge/aGW00n5dooORAqgEvoAiD9
RMm++/BzXg1BdBXJzb9x6pSAHyI02MBWbG/lvo9bZq/SRTWNCr8CTYUMfC7nZBdw
e7sBLbVlMckOdYuj8e+KzL4yCpkBRbunv7qA0Irel+2bsXJNIS45SVC71pdeXfyH
QBaJ1hCDlFHQdHTbCMeW5O8bLRPzo3P7dMRacQEhVFRM
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:51 2025 by rpki-client