Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jwFerCuvrkI6jEYKNUSGjb-ar00.roa
File: jwFerCuvrkI6jEYKNUSGjb-ar00.roa (raw, json)
Hash identifier: yHDO+hgTmEOyzkqTGESdvErzVmUm1jqm0taWqKUS5wo=
Subject key identifier: 8F:01:5E:AC:2B:AF:AE:42:3A:8C:46:0A:35:44:86:8D:BF:9A:AF:4D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01950DBC5CB25B2ED4F1EB57F0F97EFB0DBF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jwFerCuvrkI6jEYKNUSGjb-ar00.roa
Signing time: Sun 16 Feb 2025 07:50:03 +0000
ROA not before: Sun 16 Feb 2025 07:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 09:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0d:bc:5c:b2:5b:2e:d4:f1:eb:57:f0:f9:7e:fb:0d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 16 07:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f015eac2bafae423a8c460a3544868dbf9aaf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:95:15:1a:31:5b:dd:06:62:28:c0:b6:aa:
be:fb:1c:0b:df:82:38:df:29:a1:02:65:25:4c:93:
6a:cc:ca:69:28:1f:0d:67:4d:cc:ab:89:38:49:58:
e1:b0:24:72:a8:98:8a:1b:4f:54:25:3c:9a:a4:e4:
f2:fa:ac:86:0c:10:3f:25:68:84:fa:5e:e0:1a:41:
cb:d9:df:82:69:f3:bd:3f:93:50:09:00:80:48:94:
b4:28:10:f9:fd:93:5c:fa:35:9c:4e:d6:f0:e0:ff:
97:b8:40:cc:08:8c:d0:4c:ab:a6:1f:02:14:fd:b8:
34:58:5f:c5:55:b8:9a:35:ba:d2:08:99:b3:9a:22:
e1:f0:68:ba:54:b8:47:ce:08:00:5b:53:23:cd:d9:
99:fb:76:fa:e1:ba:b1:ce:62:32:f5:4d:77:b4:b7:
be:82:73:dc:ed:f5:0e:9e:bc:5c:ce:82:d0:0e:0a:
47:16:37:bc:0b:50:bb:94:b4:f1:02:3d:7b:2e:bb:
fd:51:70:74:85:34:3a:c7:dd:a9:74:ed:61:d5:33:
ca:e4:d9:04:cb:56:e8:ef:6b:76:f7:07:28:40:e4:
4e:2f:90:d9:7c:31:62:e6:29:0e:d3:70:69:74:fa:
31:29:05:f4:dd:7f:34:3d:bb:0f:9f:22:4f:c0:ae:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:5E:AC:2B:AF:AE:42:3A:8C:46:0A:35:44:86:8D:BF:9A:AF:4D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jwFerCuvrkI6jEYKNUSGjb-ar00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.160.0/21
31.57.202.0/23
31.59.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:25:ba:0c:2a:da:dc:4a:2e:94:8f:2f:16:2e:77:25:82:95:
b6:1f:57:3b:43:e8:31:79:7b:5a:90:df:fd:ce:4f:1c:f6:19:
52:87:09:07:e2:22:d3:49:d6:99:6a:08:b6:5b:d9:6a:a8:14:
05:ee:f5:f9:14:b9:b0:69:dd:d0:e0:7a:a5:a6:a2:e6:d7:77:
6f:7b:82:63:ec:c5:f2:87:80:89:59:24:ff:38:aa:86:43:30:
ee:f1:c8:9d:44:87:f0:a0:5e:5f:2b:16:af:42:47:99:58:43:
2b:ad:fa:e0:55:d0:a0:00:b2:1b:d3:74:f5:31:15:23:9a:9a:
71:c4:28:12:f4:73:49:81:8e:b2:f8:2f:8c:ca:f3:4e:24:df:
8b:de:6e:e8:66:b6:dd:b0:c5:8e:e7:46:8d:75:a8:8c:4a:25:
41:33:1c:83:df:a7:ff:a4:19:eb:44:8f:f9:59:3d:52:eb:e0:
9b:c2:f3:be:10:22:60:49:c9:de:40:a0:f2:27:b1:66:16:cc:
85:3e:bf:60:4b:59:2a:de:e1:98:2e:5e:27:6d:5f:cf:3d:b6:
e3:21:9d:ac:f0:c8:b1:8a:18:c2:29:00:ed:3b:4b:79:98:77:
d3:09:b6:77:13:53:6b:a1:de:df:9d:d3:a6:74:4a:07:2b:db:
eb:b8:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:56:51 2025 by rpki-client