Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g8axAdnnkDZPeq80AkdP_3LAZ2s.roa
File: g8axAdnnkDZPeq80AkdP_3LAZ2s.roa (raw, json)
Hash identifier: LQNxu93hkoSg9wemOnm+3jY+XNWVmZYCJdVkHqeEHWo=
Subject key identifier: 83:C6:B1:01:D9:E7:90:36:4F:7A:AF:34:02:47:4F:FF:72:C0:67:6B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019392C787C26EC25079929BFF23E14F18CC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g8axAdnnkDZPeq80AkdP_3LAZ2s.roa
Signing time: Wed 04 Dec 2024 17:46:10 +0000
ROA not before: Wed 04 Dec 2024 17:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205091
IP address blocks: 31.56.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:c7:87:c2:6e:c2:50:79:92:9b:ff:23:e1:4f:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 4 17:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83c6b101d9e790364f7aaf3402474fff72c0676b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:81:44:9c:10:61:0d:0e:1f:dd:ca:9d:5b:51:
3d:76:7d:6f:fc:bb:97:ac:7f:e9:78:d1:1c:41:67:
2d:0c:9e:df:3d:71:45:16:90:d3:1b:17:08:fb:83:
4e:85:9a:8c:95:02:ea:d7:79:70:cb:97:8f:8d:40:
86:03:71:40:50:ac:78:5e:f2:41:e2:9c:a6:a3:28:
97:fa:b1:c0:11:60:b8:25:0a:75:f1:e8:3f:5a:aa:
44:f0:cd:d8:72:69:a9:de:6e:57:8a:c1:29:7c:33:
cf:cb:0e:b2:36:da:ee:e3:85:e4:2c:e1:6c:9d:c8:
df:e7:88:3c:10:d3:c2:15:e0:12:37:48:e5:51:80:
2b:17:87:76:69:cd:de:c4:d5:26:53:1e:00:0f:48:
bd:ed:54:8e:9d:4e:f4:d2:44:a7:31:3f:7e:a2:8e:
f2:52:67:da:1d:3d:b9:ca:3f:57:9d:05:41:3c:4b:
b7:1f:d0:c3:33:97:51:31:20:14:f2:7e:29:23:9f:
6b:21:41:e9:0c:56:6f:14:b3:f8:6e:85:3f:9e:28:
2c:d9:76:7a:ee:28:d1:92:9a:cd:c3:60:0a:31:6f:
05:54:02:80:aa:5d:9a:30:92:bb:b6:5c:81:9d:47:
80:0c:dd:55:5e:c8:fc:d1:52:eb:3c:79:ca:f0:ce:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:B1:01:D9:E7:90:36:4F:7A:AF:34:02:47:4F:FF:72:C0:67:6B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g8axAdnnkDZPeq80AkdP_3LAZ2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.111.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a7:70:20:26:4e:f6:04:27:82:7d:45:98:c0:74:7f:e7:53:
90:98:0c:9c:9a:8f:97:c8:c7:80:ab:08:73:92:76:97:dd:f4:
0f:eb:c0:8b:14:bd:a5:cb:74:7c:b7:61:34:20:24:64:78:8a:
4a:cd:4d:1f:83:4e:95:1b:08:f7:1f:28:5c:eb:84:53:dd:25:
4a:16:99:94:8d:e7:4a:4c:94:10:dd:4b:60:61:16:db:c7:71:
62:5e:27:ea:ce:cc:43:a8:02:ea:30:de:84:63:fa:f8:bf:bb:
25:bb:11:c6:fb:79:d4:8b:07:bc:55:e5:e9:3b:f7:a3:0d:f0:
52:95:7d:aa:d6:77:c6:7f:f8:2d:c4:ad:cc:1b:78:6f:fb:94:
17:80:ee:fb:2b:34:8e:3e:84:7c:97:c9:bd:d3:ac:fb:c5:99:
72:21:c9:c1:16:c9:25:2d:5a:ce:e4:c9:95:67:72:7a:e9:14:
58:b1:58:36:b2:b7:18:37:61:54:81:f2:33:4c:6e:11:9f:66:
25:f0:01:92:00:bb:94:e8:17:ae:f8:6a:35:3e:3f:d8:73:45:
07:4e:94:5a:49:3c:ed:11:e0:63:7e:fd:c6:c8:cb:3b:4c:90:
40:51:68:ec:ba:a0:07:fd:8a:7c:08:67:44:4f:f9:d6:4d:91:
c0:aa:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:05 2025 by rpki-client