Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oq4vbTbdbuZRfaWj4QRN-Qc5Ki8.roa
File: oq4vbTbdbuZRfaWj4QRN-Qc5Ki8.roa (raw, json)
Hash identifier: EEfXtwokTMNzntXksdyxqKUg3sawM9p9nGwxMAc3du0=
Subject key identifier: A2:AE:2F:6D:36:DD:6E:E6:51:7D:A5:A3:E1:04:4D:F9:07:39:2A:2F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193E30520800C487BE9A9D4A62A50E762A8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oq4vbTbdbuZRfaWj4QRN-Qc5Ki8.roa
Signing time: Fri 20 Dec 2024 07:43:04 +0000
ROA not before: Fri 20 Dec 2024 07:43:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.34.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:05:20:80:0c:48:7b:e9:a9:d4:a6:2a:50:e7:62:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 20 07:43:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2ae2f6d36dd6ee6517da5a3e1044df907392a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:ba:e6:f9:fb:22:7e:70:b4:8e:de:b3:66:
1b:f7:60:9a:b7:7c:24:38:c1:d2:81:2d:3d:c3:ca:
b2:82:8c:ea:b5:7c:d7:c1:fd:ad:9d:e6:ad:5d:2a:
a6:c2:ed:a2:c3:36:70:63:cf:2f:90:0f:02:73:09:
00:d5:5d:47:ce:f1:95:cd:84:ee:55:04:7d:80:41:
82:f7:e6:15:ba:ba:0c:31:e0:ae:dd:e7:04:55:a7:
c1:08:67:ac:ce:35:aa:28:d4:a3:ee:a7:db:14:d8:
56:6c:4f:36:0f:f4:7e:17:23:36:4f:8f:8c:28:6d:
ba:42:7c:62:85:0a:d5:95:3d:d5:09:f6:86:60:dd:
5b:6e:26:c7:23:8c:56:8e:0d:7a:2e:7c:c0:53:69:
8c:f1:b2:cf:64:9e:0b:62:f5:3d:81:f0:f4:a0:80:
25:05:d2:6e:f0:7b:2e:c2:5b:2a:50:04:be:fa:8d:
ba:fe:ab:e0:aa:50:97:f7:6b:02:60:b3:55:19:50:
fa:7a:ba:84:95:90:b5:1f:06:cb:4b:30:09:ff:2a:
81:e5:42:f9:58:89:cf:fd:d5:b9:f0:25:ee:7a:15:
48:05:2f:ea:43:a2:3f:9e:ac:74:b4:a1:cd:42:26:
7b:17:d8:a6:55:8f:15:e4:6f:16:b5:22:a2:e2:d7:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:2F:6D:36:DD:6E:E6:51:7D:A5:A3:E1:04:4D:F9:07:39:2A:2F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oq4vbTbdbuZRfaWj4QRN-Qc5Ki8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.160.0/21
31.57.202.0/23
31.59.34.0/24
31.59.116.0/22
Signature Algorithm: sha256WithRSAEncryption
98:82:cd:28:4d:7c:bf:36:aa:e5:1a:10:67:50:ae:79:2c:b3:
1f:a6:48:5b:77:a5:b7:19:11:8f:c5:f5:46:a2:a4:8b:52:6a:
72:b4:af:35:46:65:33:40:c9:49:24:bf:81:11:66:f4:46:af:
a3:92:9c:1c:3b:e9:bd:41:a3:96:9f:e3:f1:a7:0d:91:a6:ad:
d0:bf:8f:47:c7:87:3c:24:aa:c7:d8:4c:89:d0:97:f7:40:14:
63:d7:fd:04:8d:a9:fd:dc:e0:0e:7c:68:c3:27:42:36:31:22:
0f:1e:41:d6:82:36:d0:b7:b4:cc:1c:04:01:43:64:da:3e:4c:
46:8b:16:dc:38:52:31:56:99:83:1e:02:b3:78:8d:82:0c:d9:
06:40:4a:c7:64:1b:5e:f7:bd:a0:ec:de:d1:d8:a3:7a:5b:09:
14:c4:13:be:d3:8c:b8:e3:a4:c4:13:59:f3:a7:5c:65:27:45:
cf:9c:04:b1:80:19:a7:be:15:60:9e:22:fe:fe:89:ce:19:aa:
16:d2:ed:36:dc:94:1f:87:cc:ee:82:9b:db:f7:57:1f:a8:81:
5e:0a:f6:b1:3a:16:47:4c:4a:c2:df:84:ca:bf:ec:6c:92:75:
70:dd:32:32:a4:0b:b5:65:d0:5a:ca:b0:e9:49:70:4a:2d:df:
3d:a8:ee:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:27 2025 by rpki-client