Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gf9cCkSc-v5f_L5eMhEnktOqdmM.roa
File: gf9cCkSc-v5f_L5eMhEnktOqdmM.roa (raw, json)
Hash identifier: 6pC66OHGQmfmTJWk8PIBaOfN5hyFLnmU08A+QnL7EzU=
Subject key identifier: 81:FF:5C:0A:44:9C:FA:FE:5F:FC:BE:5E:32:11:27:92:D3:AA:76:63
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01936D81E8E17B9A0539C14C2F197814925F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gf9cCkSc-v5f_L5eMhEnktOqdmM.roa
Signing time: Wed 27 Nov 2024 12:04:10 +0000
ROA not before: Wed 27 Nov 2024 12:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 31.56.22.0/24 maxlen: 24
31.56.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Dec 2024 15:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:81:e8:e1:7b:9a:05:39:c1:4c:2f:19:78:14:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 27 12:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81ff5c0a449cfafe5ffcbe5e32112792d3aa7663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:c0:9f:53:be:a0:3e:d5:04:80:f9:34:0c:
13:de:ed:75:e2:5b:b5:ce:b0:73:91:a5:ae:1f:3d:
73:76:8d:49:dc:a2:78:ec:74:0d:76:74:29:52:ce:
91:1a:1d:d9:0c:58:8c:b4:a9:3f:ce:00:ed:e3:4f:
3c:69:6d:14:5c:46:43:3a:b6:5c:79:a4:89:9d:cf:
cf:7f:68:b8:58:ad:ce:e9:06:5c:f9:94:3b:a8:4a:
9b:38:c1:d5:c1:73:af:b4:df:57:63:65:82:a2:d2:
c7:ff:a6:8f:3b:11:24:1b:49:7f:f2:45:26:6a:ef:
8f:66:ad:0e:aa:e6:c5:94:07:a6:88:88:54:b7:ee:
23:d7:47:d6:56:cc:fe:2e:63:63:90:ec:18:11:6e:
61:13:67:32:c8:49:79:0b:e2:50:5c:c8:ec:90:7d:
ba:0f:09:03:36:5b:bf:e4:12:da:1c:5a:47:9d:2b:
e3:b5:b6:ac:84:10:a4:2a:b2:f4:c9:4d:87:65:43:
b4:f4:be:36:c6:a6:31:a4:5f:43:81:94:29:99:97:
2a:09:e4:9c:c3:06:de:5d:15:a4:e4:e7:d5:71:7c:
b7:0c:48:07:50:7a:e8:22:a2:3a:6f:a1:0e:5f:84:
e2:b9:e5:0c:ca:61:bb:b3:71:e1:54:cc:94:37:a3:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FF:5C:0A:44:9C:FA:FE:5F:FC:BE:5E:32:11:27:92:D3:AA:76:63
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gf9cCkSc-v5f_L5eMhEnktOqdmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.22.0/24
31.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
44:bf:9f:a3:7c:41:15:76:4a:e0:50:85:2d:ca:df:47:ad:b7:
0f:4d:1f:30:ad:bc:7a:10:f0:74:1e:30:7c:a8:64:0f:fa:e3:
23:05:e1:09:8e:2c:de:33:ee:cd:80:7f:db:4a:6f:74:12:c7:
ab:69:22:06:72:84:7d:c5:10:3a:a4:eb:4f:9e:05:4c:aa:bc:
a5:91:5d:24:55:48:2d:ef:f3:ba:f0:ea:12:29:f8:ea:de:4e:
ad:06:72:02:9c:62:ed:75:4c:c0:38:5c:6a:12:4c:83:3e:7d:
8a:cb:18:62:c5:80:90:3d:0a:a8:df:7e:1b:0c:f2:2c:ac:99:
bf:8a:20:e8:ed:a9:f8:9d:41:d5:f1:35:0a:20:ea:80:10:80:
08:ad:61:e9:5d:c4:17:7d:90:9f:f9:b8:7e:d8:d2:15:8f:c1:
9e:c2:64:00:1b:78:a5:00:21:31:dc:00:2c:71:99:3e:71:ff:
8c:f4:06:b9:1b:76:b5:05:c7:4f:4f:cc:36:80:7b:3b:0f:f2:
76:03:aa:71:f3:b3:80:38:04:81:cf:66:75:14:02:02:2c:95:
77:ab:74:4e:bb:9f:dc:e9:19:91:e2:2e:8b:30:56:7a:af:cf:
1d:d5:ae:4f:ce:e8:1e:5d:ab:b8:ec:c2:63:0a:59:c4:34:c2:
1a:f1:86:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:20 2025 by rpki-client