Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qyVit_xITqqyImdLeYe4OVxr3JM.roa
File: qyVit_xITqqyImdLeYe4OVxr3JM.roa (raw, json)
Hash identifier: uMv9W5VHJVf7gyJ84c22xJS4di43qsDOXw/MDro3SSU=
Subject key identifier: AB:25:62:B7:FC:48:4E:AA:B2:22:67:4B:79:87:B8:39:5C:6B:DC:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195777485EC653389F14C53CC7E37DB6825
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qyVit_xITqqyImdLeYe4OVxr3JM.roa
Signing time: Sat 08 Mar 2025 20:31:19 +0000
ROA not before: Sat 08 Mar 2025 20:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213633
IP address blocks: 31.58.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 20:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:77:74:85:ec:65:33:89:f1:4c:53:cc:7e:37:db:68:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 8 20:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab2562b7fc484eaab222674b7987b8395c6bdc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:59:a0:12:e1:7e:34:c3:28:bc:2d:3b:76:
92:d2:c0:ee:1e:8f:75:e8:a8:da:59:05:b8:4e:5c:
b7:45:1e:dd:0f:38:2f:ac:52:76:18:fa:bc:af:c1:
05:b4:64:c8:1a:19:d8:f6:58:fd:34:d3:13:fc:da:
20:45:e5:5a:65:f4:da:0a:45:9d:e5:b1:b4:a8:c5:
4e:26:2b:81:2a:e6:62:c7:0a:b9:9d:5b:b8:7c:70:
23:33:44:6e:e4:89:08:f8:d1:fa:a1:d4:67:b9:93:
3f:e0:42:29:0f:64:c3:5e:39:28:a6:5a:67:ac:ba:
00:21:50:f2:99:db:d5:80:7a:03:c8:25:79:52:2c:
72:cc:2b:f4:f1:b0:83:dd:e7:94:08:66:4b:02:b7:
5c:40:9e:87:4e:72:5d:fb:d7:12:b8:13:6a:fc:fa:
eb:08:5b:48:25:66:17:20:ff:b9:2d:96:a5:a1:a1:
fa:93:13:94:f1:30:4c:b5:f2:8f:4d:96:a2:ec:84:
15:4d:78:d0:ca:32:77:a2:cd:9a:f8:0b:78:5e:75:
c3:01:9b:dc:af:1c:c3:df:f1:4b:7d:24:e4:d7:e8:
59:60:1e:41:56:70:29:af:87:b3:1d:1b:bd:33:84:
59:ea:51:80:72:fb:27:e3:1c:d0:4c:0a:aa:eb:ed:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:62:B7:FC:48:4E:AA:B2:22:67:4B:79:87:B8:39:5C:6B:DC:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qyVit_xITqqyImdLeYe4OVxr3JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.85.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2b:17:1b:a3:c7:bb:ef:dc:c5:42:44:91:1a:40:b5:de:11:
63:79:bb:39:a9:cd:b7:6a:3b:57:e4:e8:28:98:1a:87:61:5c:
90:42:2c:8f:d2:df:6e:8a:3e:b3:2b:5b:0b:6a:da:f8:9a:ef:
18:30:8a:86:a5:47:7b:2b:55:6d:a1:f1:29:31:ae:7a:6b:c1:
c9:70:74:63:40:a4:ba:bb:1c:61:39:96:d3:ed:ed:2b:51:65:
9e:d1:72:d3:a1:f5:2c:04:2d:0a:0d:5e:02:5e:af:f4:b8:a6:
66:f5:79:ee:ca:59:0e:95:59:08:56:1f:a6:51:6e:1f:4d:bc:
61:26:54:8a:11:ab:99:b4:7b:5e:e8:bd:8e:e6:88:f9:c6:42:
85:5a:fb:c2:05:67:b6:1e:69:4b:8e:b7:a9:b7:17:c5:77:fc:
09:61:4b:be:05:24:9a:17:1a:83:03:11:98:0e:bf:08:ea:90:
38:1c:cf:22:32:40:bd:13:de:64:16:9a:94:20:18:6c:b3:e3:
6d:d9:78:80:f3:37:22:a9:de:33:44:dd:d6:37:33:2c:c4:f1:
c8:d8:62:88:43:f3:75:a4:12:62:78:2b:c9:a2:c9:7c:c1:01:
1a:ed:c9:df:88:9b:c5:c6:7a:42:6c:ff:31:3f:10:66:24:58:
38:0e:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:48:07 2025 by rpki-client