Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nSiP2X1LmsA22JFqRZSRoYqh48w.roa
File: nSiP2X1LmsA22JFqRZSRoYqh48w.roa (raw, json)
Hash identifier: 8MvqmwSl4XwCMnurhRdvc3y1bGhTy/R/+vxBLiukr+k=
Subject key identifier: 9D:28:8F:D9:7D:4B:9A:C0:36:D8:91:6A:45:94:91:A1:8A:A1:E3:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282383ADE8550C77A887457A41381D72
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nSiP2X1LmsA22JFqRZSRoYqh48w.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216425
IP address blocks: 31.58.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 08:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:83:ad:e8:55:0c:77:a8:87:45:7a:41:38:1d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d288fd97d4b9ac036d8916a459491a18aa1e3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:8c:07:06:65:fb:ba:26:ad:20:28:52:b8:
55:45:ba:df:6c:9f:b7:55:2d:2d:59:a1:9a:f8:91:
af:5c:b0:d1:9d:21:4c:7f:8c:b8:3f:94:54:c3:e0:
0c:e3:85:22:9f:0d:05:59:4e:1a:a8:cb:86:ea:6c:
6e:ba:a6:8e:12:4f:da:b2:65:c4:80:05:24:1d:39:
bb:c9:9e:5e:0e:25:1b:08:94:c4:ae:ce:f8:68:00:
0b:a1:7f:76:2f:2a:b6:ae:8c:26:a6:94:38:f1:dd:
a1:fe:26:31:de:ba:23:08:03:9d:42:24:b1:80:27:
f3:2d:27:7f:f8:48:ab:53:ce:11:88:64:df:cc:2f:
a1:13:f2:35:f2:1f:fa:e5:de:86:0d:48:a7:38:7e:
d4:9f:b7:9c:52:5a:c6:6a:52:d9:b2:fd:c2:36:aa:
3f:1d:d2:74:db:f6:90:34:f1:c4:be:bf:2c:ca:bc:
de:9a:ba:81:b9:b1:4c:32:dc:a6:87:45:0b:90:47:
05:e8:97:ed:26:aa:d4:da:c0:ca:74:74:d6:a1:a8:
4f:6f:7d:6d:64:4d:4e:ae:45:04:6d:f3:6d:f3:d4:
97:06:7b:f2:f0:60:4f:98:71:b1:da:df:84:4a:4a:
a8:21:f0:34:f0:4f:37:18:8e:dc:10:98:9c:0c:b8:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:28:8F:D9:7D:4B:9A:C0:36:D8:91:6A:45:94:91:A1:8A:A1:E3:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nSiP2X1LmsA22JFqRZSRoYqh48w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1d:87:f8:0b:ed:7c:d4:3e:04:35:d2:dc:77:01:7a:ea:98:
c1:2b:9d:e7:d3:63:b9:98:be:46:33:f0:69:d4:5d:da:c9:25:
86:da:6c:21:39:f4:be:f8:ac:a2:3c:88:32:be:7a:b1:9b:0e:
3b:12:6f:25:61:63:27:52:d3:ea:4c:db:cb:86:f8:7a:e7:9f:
4a:c4:6a:40:36:95:2d:f9:bb:30:2b:72:f9:4d:4b:73:89:19:
7f:05:f1:98:ad:d7:ee:4b:02:0c:7c:a5:d1:90:ad:9f:2c:e5:
d7:98:62:69:9c:55:4a:a7:25:c4:c2:77:e1:ac:53:c3:17:8d:
3f:40:3a:28:f0:49:d1:e2:64:30:6f:b1:9c:96:ef:20:98:c4:
60:f4:10:f8:ff:43:c3:be:aa:eb:82:f9:33:d0:5d:36:a3:c1:
d8:10:52:4e:d4:cf:5d:42:a7:3b:9f:f0:a3:d6:ab:23:fe:98:
e0:a2:8f:82:86:c4:02:d2:18:7c:51:3a:53:0b:a5:44:b5:c1:
4f:ef:e1:a1:77:e7:ea:fb:45:ba:4b:f9:52:e5:ab:4d:2a:f9:
fd:17:d2:0d:ca:da:56:c8:ba:17:83:e6:eb:5e:d8:72:08:8c:
f7:76:6a:99:f2:d5:d9:c7:5c:f5:7d:38:14:0b:7d:46:49:63:
2b:7c:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:16 2025 by rpki-client