Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/msUYe2dWP_WRuDyr-ZX8pdjFt0c.roa
File: msUYe2dWP_WRuDyr-ZX8pdjFt0c.roa (raw, json)
Hash identifier: xqpVS8o9Mj3CKpy5JVS2q2J3MhLlnCjNaMiS9154Iq8=
Subject key identifier: 9A:C5:18:7B:67:56:3F:F5:91:B8:3C:AB:F9:95:FC:A5:D8:C5:B7:47
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195672EE0E31C8EA181BE5F10E761538AD4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/msUYe2dWP_WRuDyr-ZX8pdjFt0c.roa
Signing time: Wed 05 Mar 2025 16:41:20 +0000
ROA not before: Wed 05 Mar 2025 16:41:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 19:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:2e:e0:e3:1c:8e:a1:81:be:5f:10:e7:61:53:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 5 16:41:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ac5187b67563ff591b83cabf995fca5d8c5b747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:41:04:0b:8b:6f:13:58:4d:9b:5c:4d:a1:
cf:f0:cf:20:05:a8:4c:b2:a5:95:8f:ef:14:49:2a:
45:a9:2a:8c:98:10:5e:36:6a:a2:23:ac:89:c7:a5:
a6:a0:a4:f8:03:cc:bd:dc:38:ab:7d:c1:3c:51:03:
ba:06:20:96:59:70:d8:69:a1:06:54:9a:50:26:49:
48:fc:d8:ae:26:41:9e:6d:78:99:f3:7b:34:f6:f0:
04:54:7a:00:d7:dc:81:bc:f8:35:ff:ab:33:60:eb:
b2:f6:4f:a3:91:81:e0:71:ed:84:16:53:fb:00:87:
71:bb:5a:d4:f1:1f:da:47:99:db:01:62:a2:ec:02:
7a:ee:6e:46:72:97:cd:d1:d1:6b:c5:0e:5c:41:47:
cf:be:8d:1f:cf:27:a1:98:da:77:93:78:90:e4:76:
d3:25:0b:74:99:cd:f3:5a:a5:37:ef:67:aa:a6:b5:
df:18:78:aa:95:51:aa:93:91:c1:04:b4:87:ac:31:
8f:ac:ae:43:09:c9:65:01:ad:6d:0b:31:f7:f6:a1:
57:27:a8:87:62:f8:92:75:72:ae:70:f4:3f:b0:ac:
40:1d:08:ca:78:70:24:d1:dc:77:2d:c1:11:f1:6a:
24:be:be:fc:36:0f:2f:a7:8c:a6:86:a2:88:89:8b:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:18:7B:67:56:3F:F5:91:B8:3C:AB:F9:95:FC:A5:D8:C5:B7:47
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/msUYe2dWP_WRuDyr-ZX8pdjFt0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.57.199.0/24
31.59.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e5:2e:57:77:00:cb:d4:b7:9f:26:bf:94:b7:b9:2c:35:7f:
12:ba:24:d7:29:d6:14:8e:c5:7a:06:4c:87:f1:e2:d5:fc:bd:
ad:7c:ba:1d:a2:06:88:0c:cb:46:70:47:33:25:02:a5:af:0d:
62:00:d5:1e:0a:55:64:29:38:51:b1:df:d8:42:5b:12:a9:50:
ce:99:98:6e:cd:86:c1:43:28:0d:18:99:47:d2:95:dd:36:d3:
3f:dd:d6:1a:a9:66:2d:fa:5c:51:af:78:29:49:6d:ea:a6:68:
94:a0:0e:80:aa:c0:02:34:f5:cb:e3:a6:02:fa:11:f6:04:cd:
82:d1:73:ac:a3:2e:7a:fd:67:ef:28:34:0e:e5:72:36:0d:22:
24:ac:a8:32:4d:e1:5c:72:bc:f2:87:a6:c2:5f:d5:b6:b3:85:
78:56:52:61:34:a8:26:ed:44:83:4d:a8:a3:8c:b3:be:2e:bc:
c9:c7:1f:f8:2b:dd:f3:54:27:d5:9c:e5:7a:aa:4f:29:9b:5a:
db:b3:e7:90:cc:00:1f:7e:53:c9:6a:14:1c:b3:04:d4:91:2a:
2d:a9:7d:60:f1:9c:59:25:3e:8a:17:0e:36:92:0f:79:ff:be:
c7:c7:f1:86:31:82:8a:c6:cf:10:66:59:a8:00:cc:73:93:3c:
d1:84:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:55 2025 by rpki-client