Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nHIzsvH4gXAw_ClaRASOnb-OXuc.roa
File: nHIzsvH4gXAw_ClaRASOnb-OXuc.roa (raw, json)
Hash identifier: us5AKt/X7c1isxXXjxVg2a9W9epG/9KoOb/SV8Ub2ak=
Subject key identifier: 9C:72:33:B2:F1:F8:81:70:30:FC:29:5A:44:04:8E:9D:BF:8E:5E:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193C5E1B0B1E96AE6D7BDC5F055F09E9C2C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nHIzsvH4gXAw_ClaRASOnb-OXuc.roa
Signing time: Sat 14 Dec 2024 15:55:22 +0000
ROA not before: Sat 14 Dec 2024 15:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.60.0/24 maxlen: 24
31.57.135.0/24 maxlen: 24
31.58.235.0/24 maxlen: 24
217.60.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c5:e1:b0:b1:e9:6a:e6:d7:bd:c5:f0:55:f0:9e:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 14 15:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c7233b2f1f8817030fc295a44048e9dbf8e5ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:df:dc:46:49:9a:9d:8d:7b:6c:c5:cc:19:
0e:08:8a:eb:6a:5f:f6:f4:a2:af:fd:8c:1c:25:33:
82:81:78:5f:12:7b:23:73:a3:0e:4a:30:c1:a5:4e:
37:6c:fc:27:6d:54:07:d6:39:ac:f7:1b:ee:47:69:
ab:22:de:5b:64:d4:2b:f0:63:99:ae:fd:c2:c0:cc:
ed:eb:fb:d6:67:2e:18:8b:d3:4e:35:c5:30:cc:10:
76:c8:16:86:b7:6b:a2:b0:35:fe:96:65:55:6a:9e:
cc:05:80:e1:b1:d1:5e:8d:d3:9d:25:fd:fa:a6:5e:
42:91:f8:23:52:74:72:b0:45:f7:96:a2:79:52:6a:
25:64:1a:a6:44:24:8f:b2:e4:84:4b:e2:85:39:3c:
02:d0:28:5a:fa:19:fc:cc:3d:c4:4d:bc:1f:6e:62:
ca:95:ea:3a:b7:5d:f7:37:eb:43:fd:9b:07:59:34:
34:90:3c:bf:68:4a:a8:c9:7e:04:db:9d:bd:b7:9b:
7a:c9:a8:4c:10:74:ba:9a:8d:40:77:e7:45:b8:ad:
24:00:37:d7:60:f6:cc:e1:94:dc:e8:13:14:d0:2e:
9f:54:b3:60:d8:35:82:a4:22:8b:f6:12:1c:3a:a5:
57:49:7d:40:8d:f7:8d:1e:32:50:91:5f:24:f7:ae:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:72:33:B2:F1:F8:81:70:30:FC:29:5A:44:04:8E:9D:BF:8E:5E:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nHIzsvH4gXAw_ClaRASOnb-OXuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.60.0/24
31.57.135.0/24
31.58.235.0/24
217.60.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:f1:12:61:21:1a:5d:16:d4:6d:84:7f:09:5b:75:a2:88:a6:
97:0f:3f:0a:59:74:fb:e8:5e:88:83:27:44:70:76:0e:5f:12:
43:a5:4d:b5:20:3f:e8:ca:ea:38:12:de:b8:15:dc:7c:3f:3c:
5e:39:12:af:c5:cd:b9:f6:8b:26:23:74:85:72:eb:53:e0:02:
f0:2f:f5:1b:99:b2:f2:81:d8:74:c1:cf:b8:9a:ec:8a:e9:2f:
6e:cb:39:79:3b:5a:b1:59:40:2c:e0:69:d2:7b:41:ad:8e:48:
4f:a2:92:d8:ea:20:f6:e2:5c:ed:b9:d3:98:68:f1:d9:5f:5a:
86:86:a1:4f:f5:69:1a:3e:b5:13:0a:e5:46:32:7c:85:86:68:
1d:eb:bd:8e:29:b4:35:cd:b8:08:53:01:fd:65:9d:47:61:22:
3d:02:f7:9b:88:44:0f:f9:30:bb:28:2d:70:fa:39:34:87:86:
7e:84:d2:78:06:14:95:b6:24:5e:95:f1:e3:c8:6c:ab:47:37:
76:55:9e:cc:6c:3a:82:1f:ec:5f:a8:08:b4:61:75:e2:d4:5b:
10:e5:5f:0b:bc:fc:23:6d:8f:f7:b9:30:00:8f:bd:bd:5f:fe:
89:44:27:1b:82:ac:83:c7:56:19:48:d3:f3:ed:30:87:59:9c:
53:dc:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:52 2025 by rpki-client