Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pQoe_S6upCCsN7hIaN363gUs6Uk.roa
File: pQoe_S6upCCsN7hIaN363gUs6Uk.roa (raw, json)
Hash identifier: 5VadvKhVmIDzHHssdCVxQhjl7vG3UfVy0BSw3+1nqRM=
Subject key identifier: A5:0A:1E:FD:2E:AE:A4:20:AC:37:B8:48:68:DD:FA:DE:05:2C:E9:49
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195C6CEB5A26327690F54FE4F31B331D3A8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pQoe_S6upCCsN7hIaN363gUs6Uk.roa
Signing time: Mon 24 Mar 2025 06:19:50 +0000
ROA not before: Mon 24 Mar 2025 06:19:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 31.56.122.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 16:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:ce:b5:a2:63:27:69:0f:54:fe:4f:31:b3:31:d3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 24 06:19:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a50a1efd2eaea420ac37b84868ddfade052ce949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:94:38:64:1e:76:74:d0:e9:72:1f:d4:89:1f:
af:b6:0b:f3:7e:9d:10:55:06:b2:90:6d:9a:b8:ae:
bd:6f:4c:a1:af:ed:ca:76:37:b6:89:c9:96:3e:47:
bf:a5:51:5a:53:93:b8:8f:35:1e:1f:8d:04:f6:0b:
08:ef:7b:64:51:f2:df:0e:af:13:43:1f:41:c3:f5:
13:d0:af:de:a7:88:89:2b:04:21:ab:c3:da:52:c8:
87:03:b4:18:1d:2f:66:de:98:90:57:b1:7e:eb:49:
87:a7:85:bb:72:3d:62:cf:a4:d8:fa:3f:f6:77:32:
75:fc:c3:8a:dc:24:e1:a3:7c:58:c3:95:33:de:48:
28:40:b5:ee:5d:4d:51:e1:db:d7:21:d2:19:f2:50:
21:01:51:ff:d8:7b:9c:48:9e:32:a0:86:eb:c3:ad:
82:d9:4d:4b:ab:c2:12:41:2e:36:2a:73:30:d4:0c:
88:15:37:a1:6c:d5:ed:7c:01:a4:13:47:99:31:b8:
da:fa:54:72:06:cf:f8:15:b9:80:08:77:03:c2:30:
09:5f:f4:69:c4:0c:f9:e9:f0:58:b7:61:d0:b3:e5:
c2:88:13:63:fe:9f:fe:05:e8:9a:f8:ab:a3:51:69:
89:7c:58:05:5b:1b:6c:86:2b:28:c1:67:e4:87:02:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:1E:FD:2E:AE:A4:20:AC:37:B8:48:68:DD:FA:DE:05:2C:E9:49
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pQoe_S6upCCsN7hIaN363gUs6Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.122.0/24
31.57.65.0/24
31.57.222.0/23
31.59.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b3:5d:ed:ac:e2:90:ba:0b:9b:47:7e:c8:0c:1d:e8:88:cf:
e2:6b:51:72:2c:7a:5e:a9:ac:6d:12:4d:29:61:29:b3:3a:e5:
78:2e:d6:2b:2f:4c:c3:bc:b8:e3:a2:d0:c6:42:2f:5c:83:93:
87:51:a5:95:2a:f7:2e:fd:23:cd:44:e5:7e:cf:54:fc:4f:95:
b1:b0:7c:40:6f:3f:58:fc:28:80:e3:f3:fd:f7:bb:67:68:6f:
01:8f:5d:c1:60:0f:87:70:0c:9c:ef:3a:98:2c:7f:77:7d:e0:
6f:d6:ed:ce:80:d5:07:44:18:1c:97:49:f6:15:c6:14:d5:13:
b1:ea:1d:10:74:1c:f7:1c:54:ac:0f:13:93:12:8d:61:f3:f8:
d2:4b:99:8e:e9:78:4b:e7:6c:85:8c:01:34:10:5a:5f:2a:56:
20:70:b6:27:e0:67:d2:0d:65:43:9d:57:51:1b:f9:d8:df:4a:
6b:e9:d8:e5:ec:22:16:07:9c:f3:71:34:30:39:0a:c5:7f:ec:
79:3b:60:bf:c2:39:e2:95:58:ff:b4:96:63:ad:e0:bc:f8:b2:
8e:99:71:10:05:39:04:a9:bc:bd:81:7b:b9:2b:c4:d6:04:a5:
38:27:fc:54:a1:72:49:07:92:39:29:fc:ff:2f:38:9e:a6:7c:
d3:9a:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:05:10 2025 by rpki-client