Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kGG0mslzCWEMgMUGMq4JH4IJeW4.roa
File: kGG0mslzCWEMgMUGMq4JH4IJeW4.roa (raw, json)
Hash identifier: uYr961LK9MAvU1pn3JDwfz86+1xM1qdnvpXhK6OtS3Q=
Subject key identifier: 90:61:B4:9A:C9:73:09:61:0C:80:C5:06:32:AE:09:1F:82:09:79:6E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193C6D27AB2C613AD2FDAC841DA56D303BD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kGG0mslzCWEMgMUGMq4JH4IJeW4.roa
Signing time: Sat 14 Dec 2024 20:18:22 +0000
ROA not before: Sat 14 Dec 2024 20:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 31.56.114.0/24 maxlen: 24
31.57.67.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:d2:7a:b2:c6:13:ad:2f:da:c8:41:da:56:d3:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 14 20:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9061b49ac97309610c80c50632ae091f8209796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:16:6b:0f:56:fd:51:75:4b:b2:14:a5:75:
17:52:cb:99:8e:60:bc:7a:ce:4e:dc:84:33:89:18:
04:2e:f2:4a:16:92:a6:5d:93:a3:c6:59:8d:c5:db:
87:22:8f:65:f4:53:14:22:57:68:93:b2:69:da:04:
e8:fb:20:a7:40:fc:c4:c0:42:38:d3:da:37:fc:91:
ca:1e:1b:bd:db:43:e6:93:c7:0a:41:7c:3a:ac:26:
4a:00:1e:14:ab:74:29:e5:24:de:7d:dd:5f:04:70:
22:9c:b1:8a:a9:60:87:95:ca:ba:d9:da:3d:77:1b:
c4:0b:e6:9a:c7:9e:6b:63:8d:57:bb:a5:a0:43:c6:
ff:bc:d3:e6:50:3c:78:b2:0f:f6:6c:6c:8e:6b:9a:
b4:5c:5b:0f:77:94:66:e3:be:dd:f7:24:b2:20:0f:
2c:2e:01:14:56:cf:60:d8:37:63:2e:fc:22:e9:1d:
a8:16:c1:8b:ef:0d:c1:b7:20:9d:bf:8a:1a:f9:21:
39:ba:15:a7:a0:66:9c:74:ad:47:dc:d2:38:4a:78:
f0:ba:5a:2c:7c:fd:5a:94:ce:e9:df:d1:30:32:73:
f8:dc:8b:d4:ed:22:1a:54:43:aa:68:57:d8:50:25:
96:fe:c0:62:5a:ab:dc:96:76:de:06:51:f9:46:b1:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:61:B4:9A:C9:73:09:61:0C:80:C5:06:32:AE:09:1F:82:09:79:6E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kGG0mslzCWEMgMUGMq4JH4IJeW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.114.0/24
31.57.67.0/24
31.58.49.0/24
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b6:0a:ef:32:2f:85:93:87:88:6b:b3:1e:85:27:f4:e9:24:
39:e4:0d:30:5e:c3:70:a4:a1:e7:81:b1:3f:94:4c:5d:96:8a:
4d:d2:30:3d:45:27:06:19:5e:c4:fc:54:fb:56:db:73:fe:2d:
fb:b3:1a:29:a0:a1:ca:9e:1b:84:3b:26:e0:bc:64:32:78:14:
b6:b5:34:69:6e:36:ec:1d:a3:39:ac:f1:15:cb:00:59:93:60:
88:34:cd:c4:e5:de:71:20:44:05:d7:9f:07:1c:6f:db:24:bc:
38:03:66:4c:02:60:74:dc:8a:3a:b5:f4:76:f2:a5:5d:c3:54:
46:66:71:13:9d:90:e4:cc:3d:93:f9:93:97:8e:7c:33:8f:bd:
7a:55:7a:ab:48:96:99:ce:f0:4f:ef:4e:a5:1b:4d:a2:3c:f1:
40:ca:c2:71:3b:80:65:69:29:34:84:f0:36:76:4c:22:77:1c:
89:54:d3:df:2c:ff:49:1f:c5:0a:88:a2:30:5c:f3:b1:c1:76:
9e:a5:65:f8:af:15:ec:d7:6c:b9:89:98:49:f3:88:47:bb:27:
44:61:49:98:e7:ad:5b:15:18:fe:bd:0f:b2:c3:4a:1c:71:84:
f5:05:9c:0d:29:ae:68:82:e5:06:05:68:93:34:b3:30:85:15:
2b:b7:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:09 2025 by rpki-client