Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iyM1rkEzTZY-8xvpdt5phIL9F_k.roa
File: iyM1rkEzTZY-8xvpdt5phIL9F_k.roa (raw, json)
Hash identifier: IVAVJm/1UkMYUn1rPwGew2B89BfOW7gHVENIbtbZ18c=
Subject key identifier: 8B:23:35:AE:41:33:4D:96:3E:F3:1B:E9:76:DE:69:84:82:FD:17:F9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01944B5E9DBC9CE32F09B25CED33EE130651
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iyM1rkEzTZY-8xvpdt5phIL9F_k.roa
Signing time: Thu 09 Jan 2025 14:01:19 +0000
ROA not before: Thu 09 Jan 2025 14:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.184.0/22 maxlen: 24
31.59.68.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 17:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:5e:9d:bc:9c:e3:2f:09:b2:5c:ed:33:ee:13:06:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 9 14:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b2335ae41334d963ef31be976de698482fd17f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:da:db:a4:99:87:29:9b:4b:41:5e:40:38:
19:7f:92:f5:df:bf:d1:fc:69:de:43:5d:66:57:70:
7b:63:50:a6:bd:48:ed:d5:3e:b4:6d:6d:15:da:4e:
a4:1e:de:dc:d2:28:32:89:94:c8:c3:0f:fe:e9:7e:
36:77:57:2f:a8:3b:22:b8:71:64:22:c1:2c:c0:54:
ad:a1:be:d1:9c:e3:62:a2:f2:fe:46:16:40:78:63:
e2:ab:c6:53:0a:1d:28:85:e5:0d:12:57:b9:5a:81:
b8:6d:55:4d:65:3a:0b:66:c3:52:61:46:8c:88:56:
70:03:4e:72:96:05:44:4a:df:f2:6d:e9:f7:13:e3:
5e:f9:d9:62:28:09:3f:3c:64:1f:f0:f0:40:fc:1f:
c8:8b:ab:cd:33:f6:6d:0a:4d:63:9d:3a:f8:5f:2b:
61:33:d0:f2:05:da:b6:e7:3d:e1:26:72:2f:f6:56:
db:b9:99:67:52:c4:db:e1:e7:59:12:37:6f:0e:67:
d3:67:7b:05:15:7d:e1:de:ae:92:8a:66:b6:81:dc:
93:a1:16:90:84:af:0c:20:a8:3e:70:9a:cd:39:01:
5e:ef:6a:d8:53:12:70:0a:db:d4:a5:a8:77:be:b9:
2b:df:b3:61:7d:f3:19:2b:5f:5e:7f:da:89:b4:1e:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:35:AE:41:33:4D:96:3E:F3:1B:E9:76:DE:69:84:82:FD:17:F9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iyM1rkEzTZY-8xvpdt5phIL9F_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.142.0/23
31.56.148.0/22
31.57.184.0/22
31.59.68.0/24
31.59.136.0-31.59.175.255
Signature Algorithm: sha256WithRSAEncryption
31:7c:33:8d:cd:d9:e2:e3:87:52:64:15:f6:88:9f:8d:25:cc:
35:0a:05:9e:bf:e6:c9:e7:fb:aa:d9:d8:03:93:e4:1f:dd:58:
27:b0:0f:29:5f:a7:47:d1:db:09:5f:ed:ae:3c:d2:fb:e7:2c:
1f:e7:4f:3f:55:64:e5:78:4a:a8:00:6e:94:ef:5d:ca:e7:ff:
55:c4:4b:48:5d:5d:a0:39:50:61:7b:b4:2a:c0:f0:09:f7:ff:
a4:95:95:59:10:a6:79:84:0e:80:2f:19:99:6e:79:a1:39:fd:
17:49:7f:e5:68:a6:ab:0a:9e:07:80:b9:60:fe:c9:7a:19:2c:
1f:d3:a6:5e:7b:2d:23:23:5d:8a:45:c2:5b:2d:bb:b7:8c:9d:
e3:cd:18:48:0f:93:cf:56:3b:a2:d9:d4:b7:e3:af:34:ce:a9:
df:c2:ef:5a:5a:7f:dd:16:c6:fa:fb:cc:96:0f:54:dc:af:cf:
01:5b:49:21:b6:d9:91:14:23:22:65:4b:f8:58:87:41:e3:ee:
f6:cf:fe:7d:be:dd:eb:e4:a6:18:ec:23:eb:9c:94:c8:0e:22:
c1:07:a2:03:65:49:81:73:c3:e8:64:ea:88:81:bd:e6:44:69:
47:ee:23:fa:4c:c3:5a:d1:e6:bf:0c:1f:b9:05:35:99:19:ac:
70:03:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:11 2025 by rpki-client