Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jN_77d-iurC97INy2xMUYlFQU0s.roa
File: jN_77d-iurC97INy2xMUYlFQU0s.roa (raw, json)
Hash identifier: EJKVANS41xkVq8iTB4Ztt32NwK0C1cUAUu0O4OsPF1s=
Subject key identifier: 8C:DF:FB:ED:DF:A2:BA:B0:BD:EC:83:72:DB:13:14:62:51:50:53:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196B563AE0A288CEF059758BCAABED7C14B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jN_77d-iurC97INy2xMUYlFQU0s.roa
Signing time: Fri 09 May 2025 14:12:10 +0000
ROA not before: Fri 09 May 2025 14:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211407
IP address blocks: 31.56.78.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 May 2025 17:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:63:ae:0a:28:8c:ef:05:97:58:bc:aa:be:d7:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 9 14:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cdffbeddfa2bab0bdec8372db1314625150534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:d1:b8:45:b8:dd:47:61:60:68:3f:5d:4d:
e8:5e:b5:af:b2:be:5f:6b:b0:e3:66:08:5a:50:aa:
cf:93:4d:76:18:d7:bc:3f:a0:f3:01:23:66:87:1d:
39:75:5a:85:27:9a:a5:46:76:e3:4a:8d:7e:8f:8b:
1f:89:15:fd:ab:46:37:cf:a2:54:16:07:53:de:70:
b0:cb:dc:04:ad:1f:0d:e5:33:69:ac:53:cc:5d:6e:
64:3b:b0:c1:7a:d6:60:66:32:49:a2:54:6d:e1:7f:
38:b9:d9:5e:db:a2:66:58:5a:02:b7:2c:62:4b:cd:
07:fd:8a:84:21:c5:b0:83:8b:38:14:6c:28:b3:91:
af:dd:7e:6e:57:8e:b8:81:0c:f8:ba:f1:3c:20:26:
e3:2b:d4:61:08:a6:20:0d:19:ab:43:11:eb:e6:be:
ec:5e:72:b1:64:26:de:ca:76:52:ff:e4:5f:9f:c2:
d3:b1:14:43:b3:67:22:58:a9:51:81:0d:3c:d1:ef:
5e:16:1f:fc:f7:99:95:9a:d9:8f:02:61:48:22:24:
d4:54:a1:f8:0a:66:c0:64:63:09:93:11:19:cb:61:
b6:36:e7:42:12:30:5a:6d:c4:77:c4:ec:a1:96:66:
24:86:48:e6:54:ce:94:f7:23:1c:2f:4e:8a:ae:23:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DF:FB:ED:DF:A2:BA:B0:BD:EC:83:72:DB:13:14:62:51:50:53:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jN_77d-iurC97INy2xMUYlFQU0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.78.0/24
31.57.183.0/24
31.58.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:66:fb:d5:f3:1f:04:4e:ad:f2:5d:a5:ae:c2:ba:a1:c1:93:
20:40:07:e0:f9:52:97:ac:45:99:35:50:32:46:6e:6a:3e:99:
61:49:88:c5:e6:64:8d:35:9e:03:ba:cc:de:dc:1a:1b:0d:d9:
d6:d1:29:ce:aa:27:e2:9b:a8:75:df:a5:fe:ef:8b:b3:80:36:
41:0d:cd:12:13:2d:44:88:5d:2c:13:d9:4a:88:a5:4d:ca:b4:
3f:a4:5b:b5:e1:33:0b:72:e0:5e:05:58:ec:58:f8:94:b6:7c:
2f:73:91:aa:2c:d2:87:23:17:2f:b0:21:08:8d:6c:58:c1:5c:
89:9d:94:75:9c:7b:d6:cf:e6:dc:ac:54:13:6b:64:17:8c:23:
09:68:51:f9:72:2c:f9:f2:2a:3d:3a:82:29:09:ad:44:ba:85:
e9:23:ef:45:e1:11:69:9d:a6:cf:bf:17:fb:14:c1:be:35:7b:
4d:05:fb:8f:48:90:90:90:93:c3:1f:05:d8:ad:46:44:95:15:
3d:f4:f9:d3:19:28:d0:a1:ec:66:a8:77:fe:0d:41:e9:aa:9b:
c3:1e:65:9e:f0:da:d1:c2:7a:31:40:04:88:a0:e4:f9:29:ab:
d9:a0:8d:c8:5f:fe:b9:84:d9:65:1a:54:64:7d:f5:11:92:03:
47:08:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:51:19 2025 by rpki-client