Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gAmj-o04XZjYsbXluktF_ujEtTU.roa
File: gAmj-o04XZjYsbXluktF_ujEtTU.roa (raw, json)
Hash identifier: 9m7Unf0cFXjI3ADcVA5szyT+H9w7ReYyj5arJ8BBQ/I=
Subject key identifier: 80:09:A3:FA:8D:38:5D:98:D8:B1:B5:E5:BA:4B:45:FE:E8:C4:B5:35
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01934528DDD3DE22924CE33D43F111005B0B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gAmj-o04XZjYsbXluktF_ujEtTU.roa
Signing time: Tue 19 Nov 2024 16:02:06 +0000
ROA not before: Tue 19 Nov 2024 16:02:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214305
IP address blocks: 31.58.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:28:dd:d3:de:22:92:4c:e3:3d:43:f1:11:00:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 19 16:02:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8009a3fa8d385d98d8b1b5e5ba4b45fee8c4b535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:4b:4c:27:5a:04:17:64:f8:fb:64:fb:a5:
01:db:27:09:03:0a:85:a5:7a:6d:37:68:fc:7d:23:
79:20:7b:71:ec:01:f4:16:e1:a9:69:67:d5:90:d4:
67:69:09:c0:6f:13:72:03:18:2b:a6:18:db:1f:c8:
9c:17:79:3b:61:6d:3a:ef:cf:ed:58:10:b7:07:8f:
18:cc:4c:00:e1:65:64:46:b3:a7:22:c5:2e:2d:54:
fa:09:fe:28:7a:8d:75:bc:77:0f:3d:68:5b:64:14:
44:72:6d:e8:a8:45:cb:3d:8b:53:e0:56:c6:9c:e2:
0d:3e:e0:7f:b6:de:90:1a:47:ea:e7:5d:51:4c:32:
a7:b0:a5:14:7b:78:d7:b3:85:5d:36:4c:a8:51:e4:
9f:ac:0a:e5:6d:0e:47:21:57:50:fd:b5:fd:eb:2d:
f1:7d:a1:4d:d7:33:21:33:16:8a:50:64:cf:62:28:
4c:4c:df:8f:4a:95:6b:40:9b:7e:34:10:2c:15:a5:
a5:5e:85:6f:c3:cc:84:bb:50:3d:b4:c2:3d:12:76:
9f:f6:41:17:27:29:b6:52:d2:7b:67:36:49:7e:1a:
d0:ad:0b:1b:53:ba:2a:06:40:1a:d0:9c:31:8d:63:
d9:5e:2e:c4:65:6a:f4:e6:68:db:13:56:88:0b:66:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:A3:FA:8D:38:5D:98:D8:B1:B5:E5:BA:4B:45:FE:E8:C4:B5:35
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gAmj-o04XZjYsbXluktF_ujEtTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:46:96:bf:fc:6f:41:97:53:a8:34:5e:b1:6d:46:18:2d:24:
2d:0e:85:80:85:79:4a:88:99:91:8e:f9:5a:03:b0:ca:b6:f0:
75:a4:b7:50:e7:e1:b2:2f:8e:53:0c:89:ec:90:e0:9b:1d:e2:
77:d0:25:4b:da:06:17:93:82:77:bc:56:0c:80:ef:47:f7:76:
40:41:6e:35:75:7c:84:e3:1d:77:ec:9b:ae:3a:ab:9e:5e:62:
05:45:ea:51:81:49:39:6a:09:e9:0c:0b:fc:19:2a:51:bb:6b:
30:ea:f8:39:66:28:63:76:ef:07:6f:d8:b5:33:51:cb:4c:fa:
ca:23:0a:97:40:c3:5e:4c:04:eb:c8:3a:bb:ed:56:69:03:19:
49:77:c5:3e:6e:86:eb:6c:75:50:bc:0c:05:cd:c9:7a:b1:4d:
4f:43:b4:61:9d:e5:2a:fa:34:b3:8e:d3:53:22:e7:70:d5:bf:
64:74:70:b0:bc:54:72:60:9d:73:77:a7:e1:64:a6:9d:45:1f:
b4:11:b3:56:82:f8:84:9b:7a:70:4d:04:d7:94:53:b2:11:ac:
78:f3:5c:22:28:62:85:68:77:66:88:b8:ee:9a:e3:b6:30:e0:
cc:4f:35:bd:8f:ba:3f:d4:65:e7:18:53:a1:80:9a:bc:f4:8c:
ab:66:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:41 2025 by rpki-client