Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-rUgl3As_0OeIKhzbxboP3qx0c.roa
File: n-rUgl3As_0OeIKhzbxboP3qx0c.roa (raw, json)
Hash identifier: 97BavmUGx1yywiRnhGxloOCYzMVSang4AZEpcPqwt/w=
Subject key identifier: 9F:EA:D4:82:5D:C0:B3:FD:0E:78:82:A1:CD:BC:5B:A0:FD:EA:C7:47
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019402601F4A6E631EBD4287665CC94BFE98
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-rUgl3As_0OeIKhzbxboP3qx0c.roa
Signing time: Thu 26 Dec 2024 09:50:41 +0000
ROA not before: Thu 26 Dec 2024 09:50:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 31.56.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:60:1f:4a:6e:63:1e:bd:42:87:66:5c:c9:4b:fe:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 26 09:50:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fead4825dc0b3fd0e7882a1cdbc5ba0fdeac747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:34:91:35:e4:ab:7e:55:20:48:f4:f6:a0:
c2:ce:01:1b:8d:d8:46:d0:73:54:a9:9b:1e:6d:31:
92:39:c1:0f:46:65:f2:36:99:45:52:1b:9f:26:62:
96:2a:ca:d4:4e:6f:8d:ea:5a:6f:c7:c4:c2:ff:48:
84:ca:96:ff:dd:16:3c:d2:1b:63:23:8e:a3:f5:df:
01:c3:8d:f1:52:5e:21:d9:e1:cf:2e:76:62:30:eb:
dc:56:51:12:9a:69:aa:20:42:de:96:a4:e9:b5:d5:
18:57:3f:a4:fa:74:f2:63:f5:2d:92:d3:bd:00:eb:
db:51:95:df:5b:bd:0c:3c:ba:97:47:11:9c:4c:69:
02:a6:8c:93:84:98:e9:8e:85:c8:7d:06:89:1a:3b:
be:59:e2:0a:f9:da:24:d8:14:3a:33:28:1c:59:22:
5c:6e:f5:56:6e:cc:d5:1b:b3:87:cd:61:ba:59:8b:
21:fd:79:e5:3b:e5:de:b0:a1:69:e6:d2:a2:49:e0:
a9:ee:6a:13:22:a8:55:9f:d5:11:d4:84:52:56:60:
1c:b5:a8:6d:5c:31:36:ca:ac:81:c1:62:58:6b:e0:
f3:9b:90:b2:19:08:63:18:53:35:0d:08:b6:75:0a:
9c:e1:fd:51:5d:64:03:35:79:3c:05:1e:e3:27:eb:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:D4:82:5D:C0:B3:FD:0E:78:82:A1:CD:BC:5B:A0:FD:EA:C7:47
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-rUgl3As_0OeIKhzbxboP3qx0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
Signature Algorithm: sha256WithRSAEncryption
56:70:42:b2:1c:c7:f1:e7:aa:bc:f6:5d:f3:cc:32:8d:44:2d:
12:78:a3:99:0b:ce:29:09:7d:ac:9a:0b:f6:75:54:16:9a:7f:
d9:e4:f0:da:4c:73:b6:03:cb:f9:43:d1:6b:1c:76:94:cf:fd:
49:8c:e7:0a:f7:00:1f:fe:6a:69:7c:1c:9b:a5:13:82:2c:d1:
3d:f7:62:07:33:1f:95:fc:ab:40:8d:76:4e:9d:a3:2b:54:d5:
dd:74:4f:b4:98:65:79:c1:4b:02:bc:4e:61:1a:72:20:fa:0d:
d3:38:7b:73:0a:55:c1:f0:50:cb:40:f1:69:18:bf:f4:ab:4e:
b8:4e:85:51:8d:30:3b:d8:a7:7e:83:8d:1b:60:c3:7f:52:8c:
b9:8e:4e:f6:6d:66:0c:cc:7a:7a:4c:a7:f1:fd:ab:7a:d3:bc:
c3:a7:fe:69:8a:40:0c:58:a9:14:93:8f:64:43:bd:ff:63:0b:
74:8c:92:c3:02:2d:e0:bb:62:6d:67:fe:15:6d:9c:0d:90:1c:
4f:eb:ca:68:f0:bb:35:60:38:31:ec:75:6b:05:c7:80:2e:6c:
bf:24:8c:0f:d2:bc:5b:cd:e0:c6:13:93:13:3e:ea:18:33:9c:
cf:93:7a:03:af:24:f4:5a:9b:e5:64:33:af:2e:32:bc:0e:c1:
f2:d8:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:15 2025 by rpki-client