Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gxTTLvuQM7w65PGnNvsLvpxVXMg.roa
File: gxTTLvuQM7w65PGnNvsLvpxVXMg.roa (raw, json)
Hash identifier: v36l41G1dnwb5wr2HUHeaUp5KsJ6fEqDTMmbJgjDIsI=
Subject key identifier: 83:14:D3:2E:FB:90:33:BC:3A:E4:F1:A7:36:FB:0B:BE:9C:55:5C:C8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193A0A2C6FF29C5043F288B972463D66052
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gxTTLvuQM7w65PGnNvsLvpxVXMg.roa
Signing time: Sat 07 Dec 2024 10:20:42 +0000
ROA not before: Sat 07 Dec 2024 10:20:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213762
IP address blocks: 31.59.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:a2:c6:ff:29:c5:04:3f:28:8b:97:24:63:d6:60:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 7 10:20:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8314d32efb9033bc3ae4f1a736fb0bbe9c555cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:20:4f:f1:83:41:19:3b:8c:03:b4:25:6d:
8d:2e:3b:36:1a:0d:3d:9e:05:0a:2b:14:cc:a4:5e:
ec:15:ca:61:7e:42:49:7b:5b:3c:91:04:91:14:3c:
e2:69:1a:7d:d6:b8:16:41:c7:54:48:c5:97:50:98:
5d:0e:1e:57:dd:6a:5f:82:6f:dc:87:4b:2f:67:cb:
f5:93:c9:72:10:6a:1a:58:ab:08:8f:a2:68:1a:41:
31:a1:fc:de:b9:f9:49:c8:38:f8:aa:9c:d4:66:dd:
8b:57:90:7b:6f:76:86:2e:28:41:6a:fe:be:e9:58:
8e:67:c4:1a:d7:0e:19:e7:97:23:b2:47:81:dc:d4:
97:b3:70:f1:fc:4c:a3:b8:44:65:66:a0:15:12:fa:
5c:71:8a:f3:5f:c3:54:3b:58:23:d2:87:d7:d2:8d:
e5:1b:10:e3:81:89:a8:1f:1c:81:c0:6e:1c:37:6d:
0f:55:b0:bc:b0:50:90:9b:d1:9a:d3:ea:34:e9:f2:
5b:23:27:e0:1f:0a:32:83:c8:e1:a1:e5:55:0a:fe:
ff:8a:79:42:1c:9d:ac:b4:a6:38:46:fd:80:07:70:
9d:30:d6:59:7b:c6:5e:15:79:8e:a7:6d:83:c8:93:
e7:d2:33:06:00:69:4f:a6:f6:49:d2:04:24:f9:b5:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:14:D3:2E:FB:90:33:BC:3A:E4:F1:A7:36:FB:0B:BE:9C:55:5C:C8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gxTTLvuQM7w65PGnNvsLvpxVXMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ee:a9:f5:3e:bd:9b:2f:12:44:39:4e:f0:7f:01:86:51:6e:
68:8b:c6:58:bf:3c:65:43:95:99:94:67:c9:4c:5c:6b:ff:07:
f6:80:6d:98:76:d6:39:40:c1:64:d4:bd:21:e4:76:23:bb:84:
72:6e:ca:18:50:c7:0c:ab:05:d1:89:d7:9a:f3:7e:62:d0:40:
ae:dd:e6:0d:f8:0b:b1:ba:19:cc:73:f7:84:33:8f:16:e9:c6:
9f:78:52:ca:d0:99:b5:0b:08:d7:80:bb:5b:f8:93:2c:e6:a6:
8f:77:21:c6:81:0e:67:6b:9c:5a:c9:e1:3f:24:3e:68:c1:ba:
ec:73:e2:76:11:9b:99:f1:e4:33:00:59:12:b5:74:df:47:fe:
e3:7a:07:da:8e:41:47:52:e1:35:9f:00:5f:3a:01:8d:5d:45:
1f:23:f3:b4:d5:15:1e:37:80:cd:f2:31:5e:35:6f:84:6f:cd:
b7:cc:8f:5b:d2:bc:b7:1f:a4:0f:4d:9d:86:c4:78:e4:9f:d8:
aa:86:e2:d3:56:b7:6a:27:ee:03:3d:d9:bd:17:73:20:0f:12:
80:1a:66:01:5e:64:cb:41:79:59:18:f2:58:8e:ec:61:0c:ff:
e1:55:ed:6f:5c:19:e9:8e:eb:65:30:12:60:d5:c9:08:07:f9:
09:80:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:41 2025 by rpki-client