Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t3bhFuWMDuBmGpYkYAKQtWJIuT4.roa
File: t3bhFuWMDuBmGpYkYAKQtWJIuT4.roa (raw, json)
Hash identifier: G0o0vg2A0aKVWMHZJ/8z2F669wo6m7xVSM+yOaKwX84=
Subject key identifier: B7:76:E1:16:E5:8C:0E:E0:66:1A:96:24:60:02:90:B5:62:48:B9:3E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193B5DB36A0DFE66B30E49968F96BD519B9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t3bhFuWMDuBmGpYkYAKQtWJIuT4.roa
Signing time: Wed 11 Dec 2024 13:14:22 +0000
ROA not before: Wed 11 Dec 2024 13:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202662
IP address blocks: 31.56.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:db:36:a0:df:e6:6b:30:e4:99:68:f9:6b:d5:19:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 11 13:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b776e116e58c0ee0661a9624600290b56248b93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:74:60:f3:d8:8f:72:22:1c:d4:dc:c5:3b:
92:76:84:4d:ac:f2:70:f1:2e:46:a4:d0:b2:eb:16:
f4:87:1a:69:22:e3:a7:9b:dd:39:f0:5e:9c:89:a6:
9c:d7:04:32:fa:8b:d3:36:b6:df:4f:18:3a:e0:c3:
4a:11:69:fe:7e:d7:2f:1d:f2:f9:83:88:58:5a:47:
b3:ac:bf:de:1e:c9:40:5a:b9:11:14:b3:0f:4f:62:
20:d9:ed:7a:af:d1:ff:c6:0f:6d:01:35:75:5d:99:
47:ad:14:77:0d:ed:92:d9:72:22:9f:ce:7b:82:76:
9d:f5:63:6c:3b:7b:91:88:a4:b0:93:c3:81:59:04:
b5:96:87:e3:9f:a0:c6:6d:5a:9a:4b:46:00:9f:97:
79:1d:73:7e:3b:98:3c:bc:e6:33:2c:33:e7:c0:6c:
6c:72:ad:fe:97:37:cd:30:82:21:65:ca:41:e2:a1:
33:a3:91:5f:17:e3:b7:84:ba:99:2a:c1:7c:5f:a5:
0c:89:07:21:a3:01:c6:b4:10:9b:96:09:3c:9e:ed:
5d:cc:2f:a7:20:ee:10:e1:d1:61:6e:25:62:fd:73:
7a:ed:cb:91:d5:66:cb:8c:ca:09:4a:ee:9f:8e:0b:
db:72:64:6a:55:5b:34:28:c5:d4:49:73:a0:1a:5a:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:E1:16:E5:8C:0E:E0:66:1A:96:24:60:02:90:B5:62:48:B9:3E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t3bhFuWMDuBmGpYkYAKQtWJIuT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d5:20:15:6b:02:7a:f1:7c:15:5b:94:7b:76:fc:c7:bd:34:
5f:02:af:3d:64:5f:d7:f9:f1:10:7b:c3:e2:b8:e8:ee:a5:2f:
db:97:a4:0b:eb:fd:03:05:ac:89:9b:57:96:09:24:8e:63:ae:
29:bf:73:0f:fd:f1:52:3f:c5:47:25:2e:64:90:4a:d1:6b:93:
69:e0:41:72:f8:d5:a4:c6:6d:ad:bd:93:9e:eb:25:bf:ae:d1:
60:52:ae:de:09:ff:15:63:3a:83:ba:3d:bc:45:a7:cb:22:a1:
20:10:3f:2f:24:b6:16:05:83:ce:d7:d8:e8:71:91:c3:7a:15:
e1:25:d1:18:b2:60:c9:1b:7a:43:6f:fa:f7:62:dc:77:13:a6:
0e:54:e0:28:2c:f3:52:e0:1d:69:76:0f:3a:44:2c:cd:bd:1c:
3e:41:3f:68:99:84:d4:ad:7a:bd:be:2a:89:da:db:98:aa:b9:
25:d1:e6:c8:4c:c1:85:5d:9e:5d:a1:1e:38:f1:63:8a:24:a3:
6f:7e:5e:8e:26:67:fc:48:30:a2:4f:ce:3c:d3:89:4d:00:cc:
77:c2:02:8d:c6:e2:d0:02:7e:ba:1a:31:a7:c1:05:1f:b9:af:
97:5a:80:b0:29:c0:0c:9c:df:3d:9e:8e:7b:bb:5d:ba:68:d2:
65:24:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:13 2025 by rpki-client