Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mmfO_lIGYqqa8r44HSR2MQpn3sI.roa
File: mmfO_lIGYqqa8r44HSR2MQpn3sI.roa (raw, json)
Hash identifier: welN5LMSiNS8lv/nv+0p8Efd5y3OhaZ8Z3F61l6HEVE=
Subject key identifier: 9A:67:CE:FE:52:06:62:AA:9A:F2:BE:38:1D:24:76:31:0A:67:DE:C2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193AB052B6BBE238637CADCA28BE45904A4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mmfO_lIGYqqa8r44HSR2MQpn3sI.roa
Signing time: Mon 09 Dec 2024 10:44:22 +0000
ROA not before: Mon 09 Dec 2024 10:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134675
IP address blocks: 31.58.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 07:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:05:2b:6b:be:23:86:37:ca:dc:a2:8b:e4:59:04:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 9 10:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a67cefe520662aa9af2be381d2476310a67dec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:a4:b6:59:46:47:a5:b5:6e:1a:f7:3a:27:
ad:68:0d:1b:94:a2:37:b8:59:eb:77:aa:06:f8:22:
69:8b:72:23:fd:7e:78:d4:13:d3:41:e0:c9:e0:5d:
1a:8e:76:c8:9e:f9:bd:de:0a:49:09:e9:1f:31:05:
32:5a:a9:c8:f4:44:43:db:e8:d4:71:2b:c9:04:62:
66:8f:3d:a2:0a:5d:89:fd:e8:fe:ab:59:a4:89:dd:
bd:8a:d7:94:34:b2:70:b9:93:8d:19:78:92:f0:be:
4b:8c:68:dc:9c:d8:09:9d:4a:a9:0a:c6:9b:77:c8:
c2:de:fc:33:a6:1b:f1:97:b9:80:ea:79:d3:cd:0e:
4b:99:fd:7c:7e:70:f0:cb:4b:63:88:20:67:2f:ff:
bb:d6:63:e6:f1:01:85:50:3c:f8:0b:fc:8b:91:23:
85:5d:c4:59:40:a2:80:31:f1:17:54:55:d3:d7:be:
0c:23:b7:c8:3f:c1:12:22:f9:5f:23:55:d5:89:88:
79:af:36:7e:4b:ce:dc:e2:7e:d0:06:ff:9f:f5:83:
45:63:af:fb:30:fe:39:51:9c:c2:99:e0:d0:6b:b5:
97:8b:1a:13:46:cc:59:42:bd:e1:6e:3f:de:93:c3:
5d:93:0f:19:00:62:5d:72:5c:22:ac:3e:64:02:1e:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:CE:FE:52:06:62:AA:9A:F2:BE:38:1D:24:76:31:0A:67:DE:C2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mmfO_lIGYqqa8r44HSR2MQpn3sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.152.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f2:af:fa:13:57:cc:82:aa:9d:13:ed:4e:a8:8a:cd:3c:5b:
58:b2:39:d4:c9:cb:7b:54:21:d3:bc:e1:5a:8b:75:ef:75:8f:
12:76:c9:e6:7a:ee:f8:6c:34:fc:33:8b:ae:c4:c9:b3:e2:d3:
2d:6a:01:43:19:1f:2c:d9:89:09:b1:ac:3c:94:cb:3f:73:81:
c3:d2:81:f5:f4:16:bf:70:ae:08:38:ac:07:4f:e2:6a:8f:9d:
f0:1d:b3:13:7b:d8:f4:ed:89:5f:97:6e:01:9b:b0:42:97:c2:
1c:92:ba:d1:d1:54:0b:88:84:87:56:03:ef:e8:ea:1a:0d:93:
f3:0c:39:46:c5:ee:06:4e:d8:31:90:90:5c:6d:29:4a:5a:ae:
bf:07:c0:d3:4a:39:e2:ee:c7:d9:cd:90:33:f6:04:12:24:86:
2a:5f:3a:22:92:2d:38:7a:fb:e2:ac:89:6f:9b:78:07:c4:22:
ad:a1:97:bb:cd:4f:ba:f6:0d:92:cd:89:b3:1b:e6:a8:a0:3c:
2c:3d:0c:86:d1:9f:d9:64:a6:8e:2e:f1:82:91:0e:43:98:3b:
0f:3b:fd:26:ff:b7:2b:e3:52:f9:7f:44:23:d9:5c:ca:f1:55:
b9:8e:67:8e:4f:1b:0c:98:ec:5f:66:e1:12:5e:0b:cf:ef:64:
43:ab:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:13 2025 by rpki-client