Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mR3vKQO1c4CqELKIQ_z5MvxKIRg.roa
File: mR3vKQO1c4CqELKIQ_z5MvxKIRg.roa (raw, json)
Hash identifier: AKWIHvH3NoyErwZSJK3wg2yxU3cNwCbYUt3JS0dRCyg=
Subject key identifier: 99:1D:EF:29:03:B5:73:80:AA:10:B2:88:43:FC:F9:32:FC:4A:21:18
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A34D76D4E7130C79621F6DBA4B34EAFB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mR3vKQO1c4CqELKIQ_z5MvxKIRg.roa
Signing time: Sun 26 Jan 2025 15:49:10 +0000
ROA not before: Sun 26 Jan 2025 15:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 31.56.87.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 17:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:4d:76:d4:e7:13:0c:79:62:1f:6d:ba:4b:34:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 26 15:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=991def2903b57380aa10b28843fcf932fc4a2118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:21:80:32:cf:df:a8:16:4b:18:30:76:14:
62:92:a5:64:a8:20:83:eb:01:11:23:17:8a:52:eb:
bc:36:b5:4b:2f:3d:24:a4:b7:95:06:3b:1b:e1:0b:
72:b9:9c:5d:e2:e9:26:78:59:e7:30:d4:98:97:fd:
81:e3:62:4c:8f:11:8d:4e:b7:92:49:a9:7c:b2:7c:
2c:bd:6b:0c:2f:e6:91:ae:82:4c:54:98:93:d3:2a:
31:5d:6a:36:63:f0:c1:ce:2f:3a:35:30:29:4b:00:
d7:a4:1a:29:f0:4a:04:28:c9:4b:bf:33:1b:4b:59:
8c:2c:4e:db:76:cb:6a:59:f0:e6:fa:7f:27:31:6a:
d0:65:9e:87:d7:44:dc:4c:db:be:8c:8d:5c:39:7b:
97:70:d5:85:0f:5f:06:58:84:e0:61:0c:d3:11:1a:
31:a9:1e:75:8d:94:86:26:71:49:1a:06:b8:3c:9a:
de:f4:62:9a:3b:c8:77:01:7f:f4:d0:4e:0b:da:2c:
55:99:14:c9:f9:29:5e:4f:72:c2:f4:e1:fc:82:a1:
69:a6:e1:1c:d7:51:2a:c3:2c:82:d3:15:8e:39:ee:
2d:d4:1d:2e:46:52:bf:b9:de:68:95:3b:e7:3f:4e:
5b:57:d6:1f:0c:3a:80:93:ab:5b:52:20:bc:1d:7e:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1D:EF:29:03:B5:73:80:AA:10:B2:88:43:FC:F9:32:FC:4A:21:18
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mR3vKQO1c4CqELKIQ_z5MvxKIRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.87.0/24
31.56.122.0/24
31.57.65.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ab:4a:86:02:12:6a:e7:42:78:3c:d6:50:bf:6f:91:ba:6e:
5a:a4:b0:47:32:0e:b5:d5:88:93:9e:93:9c:ac:19:67:d5:33:
ee:4a:5f:ae:e7:7c:2d:b5:d1:cf:18:17:d4:df:fb:0d:d2:79:
ae:13:12:f7:ec:4b:4e:fe:77:e2:40:35:5f:03:5d:59:c9:e3:
5a:b3:ee:e2:4a:dd:cf:d9:6c:ee:aa:60:44:87:aa:c1:e3:66:
d9:07:f1:40:71:f9:ff:7d:2b:1e:57:c7:cc:48:d2:ed:3f:8a:
bd:7a:e0:27:43:9b:8e:4f:82:0f:3d:32:ef:05:88:51:e4:d0:
8a:fd:c8:5b:ec:4a:d2:5e:e4:76:e6:95:a9:4f:5b:7f:05:ac:
ab:88:e9:2d:86:03:af:26:6f:78:d3:cd:36:0a:db:71:e4:5d:
6e:74:96:49:7b:26:bf:ab:f9:85:5a:52:b1:56:7a:55:75:7f:
2b:e4:1f:87:0a:d9:5a:af:4a:05:55:5d:95:54:a7:1c:4f:26:
3d:e0:68:05:9e:da:15:71:b8:bd:16:e7:fb:d9:ae:ce:a0:26:
32:50:fc:f8:35:cc:19:08:45:d7:86:12:73:58:c9:3e:49:4c:
d2:2a:06:5b:97:78:c3:4f:89:e7:53:10:e6:07:4a:23:16:52:
8f:32:4e:5e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZSjTXbU5xMMeWIfbbpLNOr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTI2MTU0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTFkZWYyOTAzYjU3MzgwYWExMGIyODg0M2ZjZjkzMmZjNGEyMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP0hgDLP36gWSxgwdhRikqVkqCCD
6wERIxeKUuu8NrVLLz0kpLeVBjsb4QtyuZxd4ukmeFnnMNSYl/2B42JMjxGNTreS
Sal8snwsvWsML+aRroJMVJiT0yoxXWo2Y/DBzi86NTApSwDXpBop8EoEKMlLvzMb
S1mMLE7bdstqWfDm+n8nMWrQZZ6H10TcTNu+jI1cOXuXcNWFD18GWITgYQzTERox
qR51jZSGJnFJGga4PJre9GKaO8h3AX/00E4L2ixVmRTJ+SleT3LC9OH8gqFppuEc
11EqwyyC0xWOOe4t1B0uRlK/ud5olTvnP05bV9YfDDqAk6tbUiC8HX4lLwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJkd7ykDtXOAqhCyiEP8+TL8SiEYMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbVIzdktRTzFjNENxRUxLSVFfejVNdnhLSVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhXAwQA
Hzh6AwQAHzlBMA0GCSqGSIb3DQEBCwUAA4IBAQBuq0qGAhJq50J4PNZQv2+Rum5a
pLBHMg611YiTnpOcrBln1TPuSl+u53wttdHPGBfU3/sN0nmuExL37EtO/nfiQDVf
A11ZyeNas+7iSt3P2WzuqmBEh6rB42bZB/FAcfn/fSseV8fMSNLtP4q9euAnQ5uO
T4IPPTLvBYhR5NCK/chb7ErSXuR25pWpT1t/BayriOkthgOvJm940802Cttx5F1u
dJZJeya/q/mFWlKxVnpVdX8r5B+HCtlar0oFVV2VVKccTyY94GgFntoVcbi9Fuf7
2a7OoCYyUPz4NcwZCEXXhhJzWMk+SUzSKgZbl3jDT4nnUxDmB0ojFlKPMk5e
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:07 2025 by rpki-client