Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hBIV9SV4uXumpiWilpZWYiUNPNY.roa
File: hBIV9SV4uXumpiWilpZWYiUNPNY.roa (raw, json)
Hash identifier: xjICXCiezf2trTp/Xum2hCsF96pS9vY632aOc/Z9/cE=
Subject key identifier: 84:12:15:F5:25:78:B9:7B:A6:A6:25:A2:96:96:56:62:25:0D:3C:D6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428A043F7E43959DE4B2E54D492BA3132
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hBIV9SV4uXumpiWilpZWYiUNPNY.roa
Signing time: Thu 02 Jan 2025 20:06:19 +0000
ROA not before: Thu 02 Jan 2025 20:06:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213799
IP address blocks: 31.58.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 14:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:a0:43:f7:e4:39:59:de:4b:2e:54:d4:92:ba:31:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 20:06:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=841215f52578b97ba6a625a296965662250d3cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:89:60:9c:43:34:b3:f2:3c:61:e6:be:16:
bb:64:41:0e:3b:8a:0a:9e:71:56:e8:db:45:8b:cb:
33:4c:23:57:64:0d:5f:68:da:78:c8:e1:db:4a:24:
5e:0d:5f:00:be:75:a0:04:58:b9:f5:39:b2:53:42:
1d:c2:5e:14:d9:f3:88:60:e2:2b:0a:24:a4:9d:81:
1e:51:f4:43:16:7d:ee:08:76:67:aa:c8:e7:78:17:
e2:32:af:fc:55:16:1e:5e:d5:b4:01:3c:e1:e8:45:
75:0e:1d:1b:cf:56:12:db:d6:52:c1:e5:c6:27:ce:
0c:1c:4a:8e:bb:dc:90:2f:80:1b:3c:62:3d:fa:27:
ed:9f:82:f4:50:0b:c8:25:f2:69:54:6b:a6:e2:0f:
03:c5:35:76:66:cd:b3:ab:0b:a6:c1:e9:a8:da:b0:
72:87:f6:d7:c9:59:e0:17:a4:31:ad:6a:87:b2:69:
80:bb:7b:87:25:ad:48:dc:df:34:ba:1e:ea:8d:ab:
0e:1e:8b:f1:89:61:24:13:02:b8:81:8f:8b:38:3f:
d3:b5:63:ac:60:af:83:b8:b3:bf:e5:ee:88:09:ea:
7b:50:01:9a:c9:3a:81:5f:7e:1d:9c:9b:f5:00:d3:
53:6b:4e:11:2e:71:5f:63:14:19:2f:6c:0a:09:a5:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:12:15:F5:25:78:B9:7B:A6:A6:25:A2:96:96:56:62:25:0D:3C:D6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hBIV9SV4uXumpiWilpZWYiUNPNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6c:b4:db:c7:89:f5:7d:c2:92:7e:dd:5f:4f:f9:e4:33:43:
70:ae:4e:82:81:37:e5:26:a4:1d:5b:5c:dd:0f:11:9d:81:e4:
34:41:68:b2:2e:83:df:26:62:db:42:1e:fe:01:cd:4b:83:35:
92:28:8d:17:8d:5f:bc:ef:35:58:c7:8f:d9:d0:a0:79:6d:b5:
ca:b7:71:0e:2b:a4:ab:bb:ef:52:06:60:96:0d:83:91:29:f3:
b2:69:07:39:cc:95:22:c8:64:86:7b:4d:f9:cf:9f:1d:a9:05:
66:40:b9:d6:1b:6a:73:af:70:db:dd:2d:a1:1f:74:19:2f:31:
51:5c:6d:81:92:10:45:3c:4b:44:c3:8a:63:d3:32:33:32:6e:
a4:b5:4e:28:bc:a5:05:80:e8:aa:cb:d7:3d:71:23:6f:f7:a0:
71:68:1b:47:2c:f5:a1:ca:2e:61:3a:d4:5f:d2:f2:cd:49:28:
f1:09:5c:77:ca:56:ff:6a:e2:e3:4c:70:10:2a:6f:19:55:5f:
91:9c:b4:a3:fa:12:7c:f2:58:4b:8f:56:9f:06:ff:28:db:da:
9a:d4:7b:1d:42:7d:01:62:8d:f6:a8:31:63:e4:aa:20:6e:a2:
ed:b9:bd:1a:85:cb:03:fe:6f:05:55:2f:5c:99:11:2a:63:da:
73:7c:1f:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQooEP35DlZ3ksuVNSSujEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMjAwNjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDEyMTVmNTI1NzhiOTdiYTZhNjI1YTI5Njk2NTY2MjI1MGQzY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0GJYJxDNLPyPGHmvha7ZEEOO4oK
nnFW6NtFi8szTCNXZA1faNp4yOHbSiReDV8AvnWgBFi59TmyU0Idwl4U2fOIYOIr
CiSknYEeUfRDFn3uCHZnqsjneBfiMq/8VRYeXtW0ATzh6EV1Dh0bz1YS29ZSweXG
J84MHEqOu9yQL4AbPGI9+iftn4L0UAvIJfJpVGum4g8DxTV2Zs2zqwumwemo2rBy
h/bXyVngF6QxrWqHsmmAu3uHJa1I3N80uh7qjasOHovxiWEkEwK4gY+LOD/TtWOs
YK+DuLO/5e6ICep7UAGayTqBX34dnJv1ANNTa04RLnFfYxQZL2wKCaWFgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIQSFfUleLl7pqYlopaWVmIlDTzWMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaEJJVjlTVjR1WHVtcGlXaWxwWldZaVVOUE5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzr6MA0G
CSqGSIb3DQEBCwUAA4IBAQB8bLTbx4n1fcKSft1fT/nkM0Nwrk6CgTflJqQdW1zd
DxGdgeQ0QWiyLoPfJmLbQh7+Ac1LgzWSKI0XjV+87zVYx4/Z0KB5bbXKt3EOK6Sr
u+9SBmCWDYORKfOyaQc5zJUiyGSGe035z58dqQVmQLnWG2pzr3Db3S2hH3QZLzFR
XG2BkhBFPEtEw4pj0zIzMm6ktU4ovKUFgOiqy9c9cSNv96BxaBtHLPWhyi5hOtRf
0vLNSSjxCVx3ylb/auLjTHAQKm8ZVV+RnLSj+hJ88lhLj1afBv8o29qa1HsdQn0B
Yo32qDFj5KogbqLtub0ahcsD/m8FVS9cmREqY9pzfB/g
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:13 2025 by rpki-client