Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mWt37uWDhHIbyCVxmFdlButhLNs.roa
File: mWt37uWDhHIbyCVxmFdlButhLNs.roa (raw, json)
Hash identifier: OJE/4Q/ejlJNc43BQhVtgJ0yjb6eQfat2U6GQb7tNGo=
Subject key identifier: 99:6B:77:EE:E5:83:84:72:1B:C8:25:71:98:57:65:06:EB:61:2C:DB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193A095F78610E8F6AF05A6F35D60A75241
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mWt37uWDhHIbyCVxmFdlButhLNs.roa
Signing time: Sat 07 Dec 2024 10:06:43 +0000
ROA not before: Sat 07 Dec 2024 10:06:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51431
IP address blocks: 31.58.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:95:f7:86:10:e8:f6:af:05:a6:f3:5d:60:a7:52:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 7 10:06:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996b77eee58384721bc8257198576506eb612cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:5d:bb:5a:48:0a:cb:d5:7c:02:e7:09:ac:
26:92:f1:1a:6f:9b:ac:e5:0c:d9:05:07:aa:cb:09:
7b:17:1b:31:50:ba:6f:26:61:bc:2a:e1:9d:0d:e1:
11:02:c8:91:34:9a:90:60:53:fe:f3:38:b1:53:02:
f5:5c:f8:a0:9b:ff:d7:01:32:2c:57:16:a1:eb:a8:
df:32:4e:08:47:9d:48:eb:e1:11:0a:d4:2c:8f:d6:
63:cb:ad:d1:1d:ec:e0:bb:95:b6:eb:9a:10:ab:44:
14:cb:4c:06:21:da:fa:3f:b0:f0:5a:49:8e:b1:51:
eb:af:6d:c6:42:ea:4f:75:ca:de:a7:43:9a:b5:05:
af:df:3f:de:bc:97:a7:c1:9a:b6:df:7b:89:21:a5:
b5:9d:67:57:c9:cf:94:53:a2:22:a8:d2:03:9a:55:
c0:46:03:4d:2a:4c:05:0c:9c:14:d7:4f:d7:ce:ac:
64:65:57:a6:c3:38:cf:ce:62:b5:d7:43:21:fa:87:
0f:9e:fe:7d:a3:61:6f:dd:ad:09:4a:4a:34:36:36:
9d:cf:57:4a:71:43:35:c8:f8:02:ce:8b:96:dc:7f:
bc:00:18:7c:34:f3:6d:6b:01:d6:bc:fd:2d:4f:a7:
59:20:a8:99:d0:0b:b7:75:f3:ed:de:07:1c:21:7f:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:77:EE:E5:83:84:72:1B:C8:25:71:98:57:65:06:EB:61:2C:DB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mWt37uWDhHIbyCVxmFdlButhLNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:60:7b:39:42:19:6b:e4:39:b9:9a:3c:0b:79:52:7f:81:59:
63:1c:71:f6:ca:7f:32:7e:65:88:47:5d:ec:55:26:09:be:93:
1e:eb:96:29:ab:8f:ae:0a:2c:36:7d:96:ef:0a:25:18:ca:a9:
04:3d:5e:f3:ad:19:e2:76:a9:a5:84:cf:2e:1c:eb:99:f7:6a:
a3:bb:3a:bb:48:ce:3c:be:39:66:c4:74:fe:3a:7e:8a:ab:d8:
a6:9d:19:5a:57:6c:47:eb:36:8d:ec:09:9c:08:13:96:0c:95:
72:d8:05:85:d3:a9:9d:6b:99:96:eb:d1:b8:d8:ab:13:04:65:
a0:2f:43:07:10:1d:13:64:f0:c9:3d:b2:d4:8a:7d:c0:35:91:
6f:52:20:04:27:ed:bb:f9:95:b1:64:38:03:10:f4:b3:a0:56:
0b:b1:41:c5:05:50:b6:c5:d9:6d:a1:ac:ea:ef:f5:90:fe:08:
c5:74:8e:5c:63:0e:e2:52:22:48:55:94:19:0c:da:2b:07:a1:
a5:90:65:88:44:49:20:0a:e6:8f:f7:6f:d9:09:cb:63:55:e4:
34:a4:f1:f8:41:e5:ad:15:34:b0:8f:e4:5d:2e:c4:3b:e5:db:
9c:c3:3b:6d:42:4d:bb:f4:21:7e:6a:a3:ac:19:b8:01:ba:21:
a7:73:dc:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOglfeGEOj2rwWm811gp1JBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjA3MTAwNjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTZiNzdlZWU1ODM4NDcyMWJjODI1NzE5ODU3NjUwNmViNjEyY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu81du1pICsvVfALnCawmkvEab5us
5QzZBQeqywl7FxsxULpvJmG8KuGdDeERAsiRNJqQYFP+8zixUwL1XPigm//XATIs
Vxah66jfMk4IR51I6+ERCtQsj9Zjy63RHezgu5W265oQq0QUy0wGIdr6P7DwWkmO
sVHrr23GQupPdcrep0OatQWv3z/evJenwZq233uJIaW1nWdXyc+UU6IiqNIDmlXA
RgNNKkwFDJwU10/XzqxkZVemwzjPzmK110Mh+ocPnv59o2Fv3a0JSko0Njadz1dK
cUM1yPgCzouW3H+8ABh8NPNtawHWvP0tT6dZIKiZ0Au3dfPt3gccIX85zwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlrd+7lg4RyG8glcZhXZQbrYSzbMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbVd0Mzd1V0RoSElieUNWeG1GZGxCdXRoTE5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrvMA0G
CSqGSIb3DQEBCwUAA4IBAQCaYHs5Qhlr5Dm5mjwLeVJ/gVljHHH2yn8yfmWIR13s
VSYJvpMe65Ypq4+uCiw2fZbvCiUYyqkEPV7zrRnidqmlhM8uHOuZ92qjuzq7SM48
vjlmxHT+On6Kq9imnRlaV2xH6zaN7AmcCBOWDJVy2AWF06mda5mW69G42KsTBGWg
L0MHEB0TZPDJPbLUin3ANZFvUiAEJ+27+ZWxZDgDEPSzoFYLsUHFBVC2xdltoazq
7/WQ/gjFdI5cYw7iUiJIVZQZDNorB6GlkGWIREkgCuaP92/ZCctjVeQ0pPH4QeWt
FTSwj+RdLsQ75ducwzttQk279CF+aqOsGbgBuiGnc9ww
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:38 2025 by rpki-client