Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/feJY_bBKTG4YVq7aiXlQAMKopzw.roa
File: feJY_bBKTG4YVq7aiXlQAMKopzw.roa (raw, json)
Hash identifier: 0IuL8qx08COmNGbq97EpmyYNZm65PuqN0yHEhFoiEPI=
Subject key identifier: 7D:E2:58:FD:B0:4A:4C:6E:18:56:AE:DA:89:79:50:00:C2:A8:A7:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194B11983F6BA5BD6AF065B2CD5907F7536
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/feJY_bBKTG4YVq7aiXlQAMKopzw.roa
Signing time: Wed 29 Jan 2025 08:07:06 +0000
ROA not before: Wed 29 Jan 2025 08:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213845
IP address blocks: 31.58.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 15:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:19:83:f6:ba:5b:d6:af:06:5b:2c:d5:90:7f:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 29 08:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de258fdb04a4c6e1856aeda89795000c2a8a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:09:54:cd:58:51:46:b4:ae:79:bb:28:30:
69:54:03:02:9c:d2:42:6e:40:fb:64:eb:72:e3:e0:
ae:9b:93:c7:2d:9f:15:f3:b0:b7:a8:d4:ce:f1:87:
4e:90:7b:02:e8:d9:48:ae:d5:b4:d3:d0:1a:38:d5:
98:e4:34:2d:d0:a9:2a:d4:24:f0:73:39:ef:54:88:
38:7b:4f:98:d5:56:2a:fe:55:bc:fc:2d:09:71:66:
73:5e:43:02:2a:0c:03:35:5b:01:b7:71:07:23:9d:
36:89:37:a0:1a:fb:55:81:72:e2:10:43:f8:b0:af:
a0:b3:85:6f:19:95:0b:6d:7e:4e:d6:b8:b5:83:b4:
67:90:79:07:73:f0:97:b8:0d:ec:51:7a:9e:5b:e5:
fa:89:79:60:2a:8c:fa:8d:6f:f8:a0:79:1c:f9:6f:
eb:40:2e:8b:24:0f:be:30:61:ee:63:2b:5b:5e:f7:
55:0f:1f:3c:a5:48:cb:26:d8:89:12:7c:6b:de:a4:
b4:9d:66:ee:af:a1:e9:7b:1a:de:f6:46:38:be:8b:
3a:6c:fe:49:6a:62:22:64:5f:7a:fa:1e:db:48:43:
8e:cb:e6:34:e4:2b:1a:cb:63:eb:6f:2b:ca:61:02:
0e:27:aa:80:b8:a9:c2:ec:56:5f:2c:fc:ec:2f:73:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E2:58:FD:B0:4A:4C:6E:18:56:AE:DA:89:79:50:00:C2:A8:A7:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/feJY_bBKTG4YVq7aiXlQAMKopzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.142.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:d5:d0:3d:4d:67:31:4b:40:65:a4:38:67:05:9c:13:11:cd:
ed:76:58:d7:a6:06:6b:29:a7:b8:82:ad:cc:71:3e:91:81:d9:
23:13:65:85:15:3e:3b:ff:a0:57:5f:9c:05:b1:47:fe:17:28:
c7:2b:15:97:38:4f:48:d9:f9:da:e7:7f:c0:2f:40:f2:f8:a4:
69:ab:74:5d:c6:26:71:ed:3e:dd:c6:5a:a0:39:bb:ca:31:a8:
46:d4:b9:58:55:55:7f:46:78:48:b5:a2:bb:a0:41:8d:fb:d6:
86:e6:37:fa:89:7b:f8:45:8f:63:a9:70:4e:31:ae:35:85:78:
81:25:d1:28:93:d4:57:ee:74:cb:99:dd:3d:bd:8e:54:3f:cc:
f9:2c:48:e3:35:00:be:c2:9c:0e:56:0a:37:8f:95:23:15:93:
7e:d0:8c:a9:c3:40:da:99:03:8a:4f:bc:85:5d:e2:ec:1b:e1:
7b:93:30:b6:3f:9d:14:c6:57:b1:b2:e7:77:ce:5c:03:eb:0e:
61:a2:ce:11:99:de:e1:b1:e5:2d:55:4c:e9:53:78:ba:8e:40:
89:ec:5e:a1:8b:0b:7f:44:41:2b:15:86:90:fe:b6:5d:1c:25:
26:15:35:01:49:6e:b1:3c:82:47:09:bd:34:d2:12:cf:33:b0:
35:b0:60:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:04 2025 by rpki-client