Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qCUDVAJu0WE1iC38_PFCi6E0PUM.roa
File: qCUDVAJu0WE1iC38_PFCi6E0PUM.roa (raw, json)
Hash identifier: PGIxTlkBk5H/sJOvjFCG8usS3MVeyxGx707LsI4WRoU=
Subject key identifier: A8:25:03:54:02:6E:D1:61:35:88:2D:FC:FC:F1:42:8B:A1:34:3D:43
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193AA4362DECC121235AB3CD5F05789C43B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qCUDVAJu0WE1iC38_PFCi6E0PUM.roa
Signing time: Mon 09 Dec 2024 07:12:42 +0000
ROA not before: Mon 09 Dec 2024 07:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215528
IP address blocks: 31.58.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:43:62:de:cc:12:12:35:ab:3c:d5:f0:57:89:c4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 9 07:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8250354026ed16135882dfcfcf1428ba1343d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:0e:1e:63:45:38:74:4a:2c:44:be:e2:33:
5a:ce:64:e3:2c:97:2c:55:48:9e:a9:e8:85:13:dc:
ef:87:85:4a:b2:b5:82:d5:48:6e:be:6b:9d:07:7e:
f1:5d:9d:6e:0f:8b:d9:e7:fe:e1:26:16:d8:f9:a1:
c0:61:0a:c5:7b:95:51:22:d6:05:57:9c:2a:50:7c:
65:35:22:9b:84:97:72:14:92:a2:c2:8e:bb:38:94:
8f:e8:62:8c:ed:32:18:4f:cb:b4:25:83:c8:ed:5e:
b6:ce:06:6d:ed:b7:44:e3:e6:83:e1:3e:de:f1:b8:
ce:34:fa:d6:14:0f:79:99:a4:b9:76:8c:60:ed:9e:
88:16:1b:4d:74:12:1f:06:7f:1a:4c:af:51:52:8d:
02:b1:ef:57:a2:20:86:b2:24:f3:74:2f:3f:43:11:
3c:77:dd:cc:9a:b8:1d:7d:85:4d:ec:a7:21:d8:1b:
74:d4:0e:94:ee:94:ef:c9:86:82:41:5e:ed:d0:18:
74:c0:02:62:40:df:f8:06:44:bb:24:40:f7:19:bb:
b2:65:ef:a0:cf:7f:86:79:ce:bb:ab:85:9d:51:c9:
6e:9b:c8:1f:52:3d:41:6d:40:52:44:09:84:ab:a5:
72:fa:cf:2c:45:79:3e:68:a3:ca:4a:a8:6b:6a:d1:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:25:03:54:02:6E:D1:61:35:88:2D:FC:FC:F1:42:8B:A1:34:3D:43
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qCUDVAJu0WE1iC38_PFCi6E0PUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.155.0/24
Signature Algorithm: sha256WithRSAEncryption
88:47:f6:3b:c3:98:0a:e7:46:2b:13:24:12:af:18:12:dc:4f:
91:1f:86:a7:cf:3a:ae:8b:22:5e:bc:39:b5:3f:b1:2d:68:f8:
7e:41:dc:99:88:0b:ac:d8:85:8f:a7:b2:5c:c4:b2:b8:40:91:
ac:12:99:7e:58:d1:d4:80:a0:6e:14:12:97:e6:5d:0c:97:08:
42:32:bf:3a:c8:f4:2c:ed:e6:ba:c9:a4:16:e4:07:02:1e:a2:
45:f1:44:fe:67:1b:29:90:63:ea:8c:14:50:ae:c9:50:99:85:
86:8a:70:22:1b:3d:63:a7:a1:d3:66:3e:ac:23:be:39:d2:46:
02:76:eb:de:93:b1:fe:21:bc:61:11:05:ea:68:05:22:9d:f5:
8f:27:38:41:2c:97:4a:5a:3c:37:0a:ea:30:c9:96:01:98:81:
5a:1a:27:a8:ab:d8:92:a3:c6:cf:d7:f0:11:34:84:0b:5b:31:
92:e4:4f:9f:47:40:bf:21:c8:96:8c:78:3f:91:00:ac:36:30:
9a:d8:4e:6b:5a:67:17:af:82:ac:2b:21:8e:b4:51:e7:78:ff:
4c:0e:49:96:80:4c:6c:9e:1e:ed:56:89:69:c5:a2:53:27:e6:
62:3c:d8:e9:6b:7d:82:13:c7:2f:fe:c4:0e:ef:8c:73:4e:22:
d2:cb:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:06 2025 by rpki-client