Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k8l0OCamzXIyJzettbjKWe7RABI.roa
File: k8l0OCamzXIyJzettbjKWe7RABI.roa (raw, json)
Hash identifier: j3cFEBHKVtN6j4N/73Iy+hsO2TNX2JKYOCwufhKhOCg=
Subject key identifier: 93:C9:74:38:26:A6:CD:72:32:27:37:AD:B5:B8:CA:59:EE:D1:00:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A34D777790C0444BE0164A954BC77585
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k8l0OCamzXIyJzettbjKWe7RABI.roa
Signing time: Sun 26 Jan 2025 15:49:10 +0000
ROA not before: Sun 26 Jan 2025 15:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.58.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 16:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:4d:77:77:90:c0:44:4b:e0:16:4a:95:4b:c7:75:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 26 15:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93c9743826a6cd72322737adb5b8ca59eed10012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:4e:22:b5:44:3e:38:d4:b2:02:96:27:c0:
d9:4c:0e:43:47:38:7b:31:81:d4:4b:29:ab:45:8a:
53:bc:89:4f:51:42:ba:83:55:13:1b:47:e7:8f:81:
e8:7d:0e:ab:04:35:0e:ca:b4:7c:8f:64:e2:91:a8:
ed:13:0b:eb:0e:6f:43:43:9d:f1:f6:c2:ae:1c:e4:
92:94:db:05:5c:61:83:94:ff:1b:80:d6:de:41:82:
8e:55:a3:14:81:bd:77:67:82:ec:e9:ab:93:43:60:
db:eb:53:45:d4:c6:7b:4e:c7:37:66:3e:d9:0c:c2:
92:ce:a5:12:45:04:82:e8:c2:fc:44:7e:d3:2c:12:
39:d6:6b:29:9f:03:49:84:20:93:30:eb:88:4d:d1:
f9:24:8f:bb:2f:ef:c8:d7:8d:1a:8e:f7:12:39:10:
eb:1b:30:c7:b1:0c:13:f1:25:52:5f:58:8c:58:c4:
f5:f2:b7:09:6b:70:5f:49:e8:22:ff:72:d4:03:0a:
af:9a:95:87:80:5d:00:f1:2f:76:87:6e:a9:c7:a4:
32:8b:c4:5b:ad:24:27:ac:81:74:11:54:5e:10:ed:
1b:6f:81:f1:1f:8f:34:34:cb:1e:71:d9:ce:89:2d:
ba:81:64:30:79:14:fb:27:4a:3e:96:e9:23:d6:c7:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C9:74:38:26:A6:CD:72:32:27:37:AD:B5:B8:CA:59:EE:D1:00:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k8l0OCamzXIyJzettbjKWe7RABI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.56.87.0/24
31.56.122.0/24
31.57.65.0/24
31.57.132.0/24
31.57.222.0/23
31.58.157.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b6:d4:6c:52:46:d0:e5:84:bd:5a:8e:86:30:f1:3e:35:34:
b4:38:89:4b:ea:e0:59:3c:c6:53:e0:b3:b6:ee:fd:95:15:1c:
18:9b:43:da:0a:86:3e:f3:7f:fe:8a:7d:87:de:fd:29:8f:64:
5e:c7:c0:74:71:64:45:eb:08:86:14:d9:6c:51:75:7a:bb:ec:
2a:45:dd:b3:c6:5c:6d:c0:3e:1b:a8:8b:40:e3:a8:ca:89:ad:
c6:21:50:fb:3c:76:4e:75:26:b1:de:a2:b3:2b:94:99:ac:c2:
03:d9:ca:2d:a1:c1:6e:5a:42:cf:5b:b0:d4:43:f6:4e:39:82:
bb:f0:da:b5:e2:89:fc:25:b1:50:3e:18:0c:f8:f4:e4:b2:3e:
af:cc:3d:38:bc:7c:58:8d:b5:14:03:97:8a:ed:d7:33:7b:13:
7d:1e:75:fb:d4:c8:f6:91:7c:55:52:f3:f4:75:c1:24:b6:97:
80:da:4b:8f:17:d1:b0:0b:7b:e4:aa:71:c2:6d:6b:db:95:2e:
6a:31:e7:03:03:19:2b:31:e5:44:06:db:2f:8e:d1:b3:5c:c8:
05:5e:2b:de:b2:de:f5:33:af:66:fe:d7:bf:eb:6d:94:3d:4c:
57:39:56:a2:d9:02:58:60:4e:b0:f8:cf:04:02:86:82:5d:55:
02:d8:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:37 2025 by rpki-client