Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l0Dxe46jTTmg3S38YwuV52QJcOE.roa
File: l0Dxe46jTTmg3S38YwuV52QJcOE.roa (raw, json)
Hash identifier: qOe/rJxjc7XXxEZSCmC+2rrPj31lx3N0YbprJsVipvg=
Subject key identifier: 97:40:F1:7B:8E:A3:4D:39:A0:DD:2D:FC:63:0B:95:E7:64:09:70:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193AB462B99B8E43CF377EBF4F058E1A7D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l0Dxe46jTTmg3S38YwuV52QJcOE.roa
Signing time: Mon 09 Dec 2024 11:55:22 +0000
ROA not before: Mon 09 Dec 2024 11:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 31.58.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:46:2b:99:b8:e4:3c:f3:77:eb:f4:f0:58:e1:a7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 9 11:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9740f17b8ea34d39a0dd2dfc630b95e7640970e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:e9:f2:f8:80:fd:75:79:3a:8c:40:19:ab:
0b:58:bc:65:a7:5e:82:bf:44:11:4b:db:48:b0:1f:
cf:37:ec:86:2f:b4:8f:5f:15:05:b4:a6:1e:61:54:
fc:37:f1:03:89:38:42:3b:21:0c:16:d2:9e:e2:3d:
ca:87:08:c0:e7:f9:5f:9f:3d:af:4f:16:fb:45:a1:
47:45:18:90:74:47:cf:e2:48:74:26:e3:1f:0b:0d:
62:a9:ef:0f:7e:fd:5f:0c:c7:0b:b3:83:97:a9:10:
79:8b:a3:4c:78:93:0e:87:bc:fb:49:a4:81:65:b6:
15:34:ae:58:c4:d4:b5:a0:7f:d1:b5:38:2b:ed:fa:
53:73:63:87:ec:fc:40:88:00:e4:dc:36:8b:ce:16:
cf:77:3d:43:e2:8a:60:c8:c4:5b:53:f2:8f:e5:d0:
69:1d:06:42:f5:41:0d:77:e6:46:d8:c6:f1:9c:ea:
51:14:88:2d:6b:a5:c4:95:e0:59:d8:21:09:04:3e:
a4:ac:7f:55:75:48:a6:4b:c4:85:91:39:37:a2:54:
76:1b:f6:ae:e6:6a:10:54:82:24:01:e2:37:82:dc:
04:7f:fd:77:01:a4:51:2c:0a:3f:cf:ea:0b:f2:fb:
d0:8d:17:0e:e4:64:bc:58:47:5a:e9:d6:f2:ad:2f:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:F1:7B:8E:A3:4D:39:A0:DD:2D:FC:63:0B:95:E7:64:09:70:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l0Dxe46jTTmg3S38YwuV52QJcOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d9:77:b0:7d:32:90:af:2f:b4:10:35:dc:96:dc:31:d5:db:
95:3a:7d:c1:cb:86:d8:20:18:64:a4:b6:75:dc:a7:ab:44:de:
53:0e:6c:1a:48:a1:d2:ab:f2:e6:91:19:12:42:a3:33:38:c0:
14:a4:4b:ef:ea:59:c6:2f:42:94:9a:ec:7d:a5:be:ae:62:69:
76:0f:45:ce:18:13:68:28:55:0b:64:ad:18:3a:02:6b:2c:47:
1e:af:09:0d:8f:d4:b2:66:5b:6f:9b:ab:0a:7b:70:65:d7:5f:
e4:dd:13:c5:2e:45:3d:a2:a5:fa:ca:0a:cb:14:8a:32:0e:e1:
67:d8:c9:23:e6:c3:55:8f:93:49:cc:23:78:f5:ea:15:e1:f9:
11:91:6a:c9:76:b3:aa:56:26:74:69:51:e8:d5:57:ef:9f:ea:
bf:a2:49:da:84:e4:dc:55:26:3a:ef:66:22:e5:6a:db:95:f4:
5b:3e:69:12:8f:d0:7a:7a:0c:39:16:54:99:26:e3:aa:20:a9:
6d:1e:49:87:4b:e9:a1:96:65:f8:50:1f:6e:d8:d3:98:25:e0:
50:0c:b7:49:c8:4b:e1:9a:40:86:ff:3e:f7:45:ed:e0:23:0b:
60:f5:98:9c:25:00:4c:e6:a2:ff:ef:fc:09:8e:17:ca:c0:b5:
d6:0d:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:51 2025 by rpki-client