Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6iV-76eMa_ywCJV9syxGbMKsEg.roa
File: n6iV-76eMa_ywCJV9syxGbMKsEg.roa (raw, json)
Hash identifier: mK4kcLcDmBSfeFQW1UDvGEZ42TxfqPxNK3a6uy723Ls=
Subject key identifier: 9F:A8:95:FB:BE:9E:31:AF:F2:C0:22:55:F6:CC:B1:19:B3:0A:B0:48
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195295F8E27CCA2D66E42B55D4655D346A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6iV-76eMa_ywCJV9syxGbMKsEg.roa
Signing time: Fri 21 Feb 2025 16:38:02 +0000
ROA not before: Fri 21 Feb 2025 16:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.89.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.57.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 16:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:5f:8e:27:cc:a2:d6:6e:42:b5:5d:46:55:d3:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 21 16:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fa895fbbe9e31aff2c02255f6ccb119b30ab048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:23:12:f1:f3:01:05:d5:cf:c8:86:dc:54:
40:8b:e8:da:c4:b1:fe:57:bc:31:69:6c:4d:01:a7:
eb:28:81:81:e7:3e:69:79:79:d4:b5:74:c1:f5:90:
5e:f0:f0:29:eb:da:55:58:48:df:d0:e6:ac:47:5b:
18:18:8b:84:9e:63:e0:dc:97:5a:5d:f9:e1:25:52:
f8:8d:d5:28:98:11:a0:2f:5f:c4:52:5b:cc:f7:e1:
b0:2d:c8:a1:b9:bd:01:33:19:f4:89:38:57:fe:b4:
68:4f:11:7d:0f:dd:0f:1a:c1:e7:6c:d4:f0:d0:dc:
2f:34:8e:10:5a:6a:9c:05:c8:08:0d:83:b7:5c:3a:
35:fc:5d:e5:96:a9:2b:7c:18:2f:4b:a3:fd:02:78:
7a:3c:c1:ff:b4:e5:e0:4a:a6:4e:be:c6:2c:ee:80:
68:c9:51:8d:23:c0:a5:1e:47:6d:51:87:78:72:c1:
7c:f9:e9:af:0b:af:7d:f3:92:c6:32:03:38:9b:99:
18:85:38:1a:3f:0b:66:00:c3:71:23:1f:b4:c8:af:
1e:60:3a:21:68:69:f0:53:fc:16:b9:a8:48:21:e2:
5b:fe:b7:4a:14:0d:4e:a9:1f:e2:5a:2f:54:5e:93:
b5:96:4e:59:c4:65:e9:bf:e1:03:74:7f:38:ea:8b:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A8:95:FB:BE:9E:31:AF:F2:C0:22:55:F6:CC:B1:19:B3:0A:B0:48
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6iV-76eMa_ywCJV9syxGbMKsEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.89.0/24
31.57.199.0/24
31.57.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:43:1a:8c:26:ea:4f:90:9d:6d:f3:16:f8:b3:6b:e0:65:48:
eb:f8:19:05:42:89:fd:03:f0:df:98:65:b0:5e:5b:15:8a:b9:
b1:95:c1:28:f3:ac:10:4f:51:20:fa:37:60:9d:6a:5a:a5:d9:
7f:c6:08:07:16:e9:72:e0:1d:67:43:99:70:bf:f5:2c:3d:07:
c9:bd:e7:2e:3f:64:1f:2b:3a:59:01:11:84:37:cc:d5:66:9e:
7b:ed:54:97:24:d7:36:db:6a:a2:1a:84:c6:d6:80:bc:bd:b3:
f3:4f:f0:ed:ad:d2:5d:a2:c5:a9:1c:af:84:0f:9e:35:1c:b4:
56:87:99:00:19:82:ea:a7:77:cd:3d:15:34:ec:f2:56:66:4d:
2f:3a:83:2d:76:37:09:2f:f4:85:2d:09:0b:d2:90:fe:3d:91:
d9:a9:bc:8c:8f:2b:e4:b7:ac:84:94:c5:18:c1:f9:61:0b:a6:
3a:f9:eb:d1:0c:8c:16:38:b0:ed:31:be:a8:26:07:cf:0a:a4:
dd:03:7e:63:a9:60:8a:c8:f5:6c:0b:e5:7e:77:ad:d1:d9:93:
52:eb:65:56:12:8d:8f:7f:71:ce:f8:82:38:70:e0:1b:2d:77:
1b:8b:a7:f1:3c:ee:3a:4c:c9:5f:8c:72:d6:bb:c2:2d:71:5f:
d2:17:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:18:36 2025 by rpki-client