Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pp9jZTD7OS9a4jJSg_VNqNgqHwo.roa
File: pp9jZTD7OS9a4jJSg_VNqNgqHwo.roa (raw, json)
Hash identifier: uryXcoIuzrpsI4mGttIY+98fSTRmfeyajSDxIOdge4s=
Subject key identifier: A6:9F:63:65:30:FB:39:2F:5A:E2:32:52:83:F5:4D:A8:D8:2A:1F:0A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823551E07E53421B1BF9B994F3F9546
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pp9jZTD7OS9a4jJSg_VNqNgqHwo.roa
Signing time: Thu 02 Jan 2025 17:49:51 +0000
ROA not before: Thu 02 Jan 2025 17:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 31.57.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 18:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:55:1e:07:e5:34:21:b1:bf:9b:99:4f:3f:95:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a69f636530fb392f5ae2325283f54da8d82a1f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:01:48:95:0f:c4:e8:8b:e6:fa:9a:42:64:
74:2f:a9:c9:f9:d8:44:da:1a:e3:43:4e:f3:54:ba:
35:fe:a8:70:db:72:fe:1d:4f:fa:db:f7:08:98:bf:
22:98:df:2c:01:1c:b6:7b:b0:d2:81:4d:09:9f:27:
44:23:87:28:cb:ea:ba:61:7c:a9:90:b0:80:7a:db:
a7:c2:e6:a4:12:c4:4b:72:e0:1f:6a:80:4e:9d:73:
c9:1a:93:b2:eb:b1:68:24:22:65:5f:d1:30:35:9a:
62:7f:ac:a2:e2:6d:33:92:5c:28:98:ff:a8:e6:78:
6a:e8:c8:ae:e6:1f:91:6f:1c:86:05:83:a9:7d:fc:
63:e4:2e:59:24:1a:bf:b7:fe:3f:a7:c0:6a:46:7c:
25:6e:e3:2d:b1:48:ff:8a:78:92:a5:0b:8d:42:5e:
5c:ef:3f:1c:74:bf:3f:e0:7e:6e:b6:ab:73:4f:37:
0e:ce:fa:c3:58:29:0d:b1:38:94:3c:35:4d:20:2e:
7c:49:82:23:04:f2:16:6a:cc:41:4b:df:d8:f1:9e:
a0:7b:e6:3b:d8:2b:0e:e0:a3:c5:76:f2:ee:19:6e:
f3:49:a9:fd:91:16:1e:5e:0e:2f:39:37:3d:84:8b:
30:71:4c:27:f4:ee:e6:ba:e0:99:14:fe:ab:42:09:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9F:63:65:30:FB:39:2F:5A:E2:32:52:83:F5:4D:A8:D8:2A:1F:0A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pp9jZTD7OS9a4jJSg_VNqNgqHwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
64:2f:94:f6:61:1c:24:40:7a:da:24:9c:4c:51:5b:7e:34:09:
55:b5:11:92:3c:ac:73:9c:e3:42:db:7d:41:95:b5:b0:2f:e5:
ba:f5:64:da:aa:ce:65:e1:7c:3c:c0:ca:1d:56:b6:aa:5d:c8:
43:c9:1e:cd:6f:a5:b2:d3:0b:7e:6a:ab:20:e0:ab:7a:e9:a9:
59:6e:66:13:32:bb:61:e6:17:55:28:45:f4:08:e3:67:89:d3:
b4:6e:53:ba:6b:fb:35:21:fa:88:97:6d:fa:3f:93:04:4e:63:
81:29:52:a7:96:3e:2d:68:5b:5c:76:c9:73:b9:8a:30:64:61:
63:86:24:67:d5:b7:ca:ea:f9:39:34:a8:90:49:63:9a:4c:d6:
a1:bc:c8:67:1f:cc:67:33:61:ea:8b:19:8a:98:04:7c:71:76:
a1:60:b6:10:b4:10:46:5e:d7:35:8d:bf:10:71:0e:46:e2:a9:
84:98:57:70:6e:60:2b:7b:ca:8c:f9:91:c9:d0:75:4f:97:50:
0e:2f:5c:25:74:06:c1:f6:32:72:e2:d6:b0:07:12:f5:24:2d:
e1:58:7b:c1:bb:6d:52:9e:fe:e7:d1:d9:5b:06:00:c8:10:35:
6b:e5:96:71:eb:c9:33:d1:32:6e:e5:fc:99:14:0c:b4:dd:d4:
6d:4d:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:07:15 2025 by rpki-client