Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mzAZa1hSZmw8awaJPymBNEr6TeQ.roa
File: mzAZa1hSZmw8awaJPymBNEr6TeQ.roa (raw, json)
Hash identifier: 7s5d6HN0bnGCVHZIlGq6ZGIsIarO67Lxob/tKuGnH4I=
Subject key identifier: 9B:30:19:6B:58:52:66:6C:3C:6B:06:89:3F:29:81:34:4A:FA:4D:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01945E12B46351CBE57BBB34A5A869E8178B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mzAZa1hSZmw8awaJPymBNEr6TeQ.roa
Signing time: Mon 13 Jan 2025 05:11:11 +0000
ROA not before: Mon 13 Jan 2025 05:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150519
IP address blocks: 31.57.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 11:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:12:b4:63:51:cb:e5:7b:bb:34:a5:a8:69:e8:17:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 13 05:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b30196b5852666c3c6b06893f2981344afa4de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:da:7a:10:48:e8:82:27:fc:cf:51:d9:5d:
85:d3:c2:94:df:67:ea:3c:96:a5:ab:15:59:54:ef:
bb:7d:50:4c:1e:37:cf:a2:ec:6a:c5:74:2e:1a:fe:
38:40:c5:8a:96:8e:f5:3c:15:6b:01:e5:81:3b:9d:
22:09:d0:a2:8a:e9:ff:ad:33:fc:1b:ed:da:eb:eb:
d5:ba:9f:ec:26:01:31:2f:b1:40:71:9d:51:c8:04:
f5:5e:ce:eb:3b:d5:b4:57:6d:cc:c7:a0:ea:03:96:
9c:6d:22:0d:86:63:e9:13:17:86:37:05:83:8d:02:
0e:82:5b:13:b2:6b:69:f7:aa:c5:1c:90:32:ec:7e:
71:e7:70:a9:47:fe:54:fe:fa:79:ff:da:3a:ac:f3:
bf:00:b0:ee:b4:9f:7a:41:57:5a:71:ba:c6:12:4f:
7b:6e:7e:8e:0f:96:19:fb:56:2a:1b:4b:49:6f:c0:
be:31:66:bf:28:42:13:31:d7:0f:d0:0c:6b:0a:11:
b1:83:83:7f:08:90:64:bc:cb:a9:8e:ca:31:93:1e:
62:58:d8:51:b8:fc:88:44:1b:5b:8f:bf:fa:36:84:
0c:a3:07:c4:0a:41:cd:9f:ac:67:07:9a:94:58:c3:
bd:c3:5d:a4:fd:a0:cd:5a:7b:73:d4:e1:d8:99:2b:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:30:19:6B:58:52:66:6C:3C:6B:06:89:3F:29:81:34:4A:FA:4D:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mzAZa1hSZmw8awaJPymBNEr6TeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.143.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:24:8b:e7:05:28:c7:1f:83:6e:1f:14:c1:8b:42:61:3e:c9:
4a:e3:0a:ff:ba:2f:93:c6:19:8f:19:87:a2:3c:e9:9f:04:4c:
8b:bf:3e:b4:57:2d:7a:2c:8a:c2:9c:8c:4f:1b:3d:de:d7:8b:
ca:e1:88:7d:f8:35:1d:bb:f2:7e:a0:88:ae:80:c7:88:1f:68:
0e:9a:4b:b9:35:f4:53:6b:7d:bc:17:a9:7e:9d:75:28:8a:d1:
42:51:c4:0c:87:bf:b2:da:1b:ca:57:f1:89:6e:91:00:2a:96:
04:20:6c:30:28:4e:c6:c7:af:8d:25:80:6b:ba:93:69:03:d3:
91:eb:f0:40:3c:09:d8:7a:df:a8:79:be:2c:9a:d4:7b:35:5a:
fc:8f:0d:c3:c7:5e:65:9f:69:22:79:b0:a6:a3:08:c2:a0:aa:
5d:a6:ec:d5:9a:b1:63:f8:d0:c2:57:8d:97:30:10:c3:3b:15:
ed:41:f1:2e:48:d1:04:e0:e0:ed:82:06:83:72:ec:d4:8b:08:
c3:5c:0c:f3:ba:5e:79:6d:8c:b3:48:00:1c:0d:e3:93:91:45:
54:06:f4:a5:09:08:dc:3b:5c:75:ed:10:8f:7a:35:63:a6:57:
97:6f:7f:b6:2a:8d:dc:f0:09:97:69:bb:c2:d6:2f:06:11:39:
95:a8:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:52:56 2025 by rpki-client