Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pkdee_QX-QTn0SDWcanjcwIrF9E.roa
File: pkdee_QX-QTn0SDWcanjcwIrF9E.roa (raw, json)
Hash identifier: 2zCOIldQoH0AM2Jv+9Rvhlr+dscsrOGLTcYRbX68xMU=
Subject key identifier: A6:47:5E:7B:F4:17:F9:04:E7:D1:20:D6:71:A9:E3:73:02:2B:17:D1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282383223494D480D1EA6872B1DE61C6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pkdee_QX-QTn0SDWcanjcwIrF9E.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216221
IP address blocks: 31.57.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:83:22:34:94:d4:80:d1:ea:68:72:b1:de:61:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6475e7bf417f904e7d120d671a9e373022b17d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:cc:ea:f8:26:5f:fb:cc:e6:f9:9a:3f:b4:
f1:ac:5e:a6:cd:60:22:d8:cb:25:ae:55:98:2e:63:
75:65:ce:81:2d:98:f7:2c:1b:7f:18:4c:f8:7c:9e:
d0:da:8c:7d:4f:8b:bd:cb:27:15:8c:f3:12:35:7b:
f6:7d:3c:dd:61:62:2b:f8:56:fa:67:5c:28:a7:a2:
49:9c:91:a5:bb:23:79:b3:04:65:be:27:b4:e6:2a:
28:fb:95:05:dc:25:62:72:01:db:a8:1d:b1:e4:76:
93:2f:6a:38:21:14:03:ce:7b:61:cf:14:3a:4c:70:
ae:ba:3f:ae:80:88:0e:52:06:d1:a8:4d:41:20:af:
66:51:7e:10:fb:60:06:eb:56:0c:ea:7c:24:36:e6:
b0:ab:95:bb:0d:fd:4a:7c:15:1e:76:5a:e0:25:b9:
53:94:d5:18:0e:b3:68:cb:10:1b:bf:75:d6:44:c7:
a8:c1:7e:f3:95:8f:34:f5:67:44:0c:e9:b2:c9:fd:
17:a8:3c:6b:5b:13:85:f8:b9:96:3b:e6:08:39:c6:
c1:c3:45:8a:5e:9a:00:47:4e:85:4d:7f:89:9d:04:
70:c9:b0:45:c2:57:0b:77:01:7a:c9:1d:db:42:15:
ab:cf:e4:08:2e:b8:40:db:aa:32:a2:58:b4:9b:b4:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:47:5E:7B:F4:17:F9:04:E7:D1:20:D6:71:A9:E3:73:02:2B:17:D1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pkdee_QX-QTn0SDWcanjcwIrF9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.112.0/24
Signature Algorithm: sha256WithRSAEncryption
19:99:2e:68:7b:89:8b:ba:6f:1d:e4:6c:9d:42:32:14:75:92:
10:f8:5e:00:32:81:f1:d8:87:2e:65:ea:57:40:b8:6e:e3:17:
1b:0c:24:b1:80:3d:46:e9:9b:b5:87:78:68:25:5a:c9:f6:69:
0e:06:35:21:66:e9:d7:d6:2c:3e:43:02:77:7c:ed:38:7e:69:
34:28:d4:2a:a1:03:49:f9:95:6e:a1:81:6c:cc:c9:b3:2d:40:
01:af:f1:70:dc:ed:cc:6b:ae:96:bf:78:b1:49:66:5b:5d:24:
1f:cd:d4:15:fc:b8:08:c9:24:bd:10:5f:f1:73:3d:d7:2d:0d:
3f:1a:85:07:5e:7a:07:e5:b8:fe:54:0c:74:2d:96:6b:50:4f:
83:50:32:5f:7a:6e:41:f6:7c:fa:b3:88:77:a4:ef:87:c9:ff:
da:2f:28:b9:c4:1d:6c:99:2b:77:b1:eb:55:18:f1:5f:73:54:
da:3b:17:dd:84:21:bd:5a:89:57:9c:5e:73:fa:7b:9d:ac:fb:
20:f6:34:db:7a:fd:a1:38:d5:be:e4:d7:1f:35:07:67:d9:42:
cf:c1:e1:66:f0:6f:81:a6:b4:25:d5:30:a6:e5:d8:c8:a1:1a:
c7:49:28:7e:05:4e:03:46:8f:40:a1:7f:0a:92:42:cc:4c:33:
3b:e1:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:10 2025 by rpki-client