Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tGfd3ioi12MCVeSqqkweoEnxJHY.roa
File: tGfd3ioi12MCVeSqqkweoEnxJHY.roa (raw, json)
Hash identifier: m2rV+K4wVSLMp+JlYScnb3qFcYWuCc/RF7Isx95HVpg=
Subject key identifier: B4:67:DD:DE:2A:22:D7:63:02:55:E4:AA:AA:4C:1E:A0:49:F1:24:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019439F7AA3CAE9F77B269D1E94CF527B69B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tGfd3ioi12MCVeSqqkweoEnxJHY.roa
Signing time: Mon 06 Jan 2025 04:55:19 +0000
ROA not before: Mon 06 Jan 2025 04:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216221
IP address blocks: 31.57.112.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 07:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:f7:aa:3c:ae:9f:77:b2:69:d1:e9:4c:f5:27:b6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 6 04:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b467ddde2a22d7630255e4aaaa4c1ea049f12476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:f6:a2:dd:d6:eb:8c:54:e8:f2:3a:0c:f4:
5f:fa:50:81:b3:24:b9:01:e4:46:0b:70:d5:88:7a:
b9:62:9c:82:ac:03:ea:6c:38:e5:8d:4e:34:74:f0:
ae:99:6b:cf:7d:05:14:1c:09:38:14:68:1d:2c:ea:
bf:ad:ef:b4:94:3b:21:cc:1b:57:88:eb:1d:73:a3:
ac:89:45:13:cb:49:8c:aa:50:f4:98:f1:7e:8d:51:
1e:e2:1e:e8:dc:f4:ef:59:97:47:0f:1f:a1:d4:6c:
cc:fd:81:db:03:cc:c4:a7:07:7f:e7:a4:0b:42:32:
d0:17:3d:d3:7c:6b:84:33:25:03:58:0c:7f:7b:79:
c7:56:36:5d:51:75:46:4d:60:96:ec:b9:5c:c5:e2:
7d:9e:b5:57:f8:9c:3c:31:25:c2:d3:46:71:f9:fc:
74:0d:bc:56:22:1e:9e:a3:a8:82:3f:f8:5c:fe:88:
dd:8d:82:f0:f3:11:e7:3b:9b:82:2d:11:77:ef:69:
99:ce:9c:4e:9f:cb:72:97:09:58:d6:f9:97:6b:65:
f8:b6:4c:7a:1c:f1:52:fc:19:f5:9d:0a:0f:0f:f1:
00:dd:30:a8:c4:f4:71:c1:8f:e3:8f:bb:15:ad:7f:
e0:65:33:be:a1:8c:5d:bb:5d:16:84:7c:8c:a2:cf:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:DD:DE:2A:22:D7:63:02:55:E4:AA:AA:4C:1E:A0:49:F1:24:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tGfd3ioi12MCVeSqqkweoEnxJHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.112.0/24
31.57.151.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6c:c0:13:bc:df:36:02:1d:6c:23:0d:4b:01:fc:b3:6a:09:
e5:66:98:e6:fa:b8:6d:ec:c2:24:a0:dd:e6:d1:27:08:1b:76:
91:25:ac:40:2f:d9:95:87:79:08:dc:d6:b6:44:79:7a:3b:c6:
a8:a1:86:12:48:7f:ba:70:80:c0:b2:71:d2:eb:07:3a:2b:7b:
8a:66:cb:3a:1e:82:b6:b4:62:ff:47:c0:b9:f1:e0:f9:c3:f3:
b7:75:b4:cd:aa:5d:c8:26:79:e7:70:62:96:17:0a:2c:c4:c2:
b6:0c:00:4f:66:01:2d:ca:55:59:95:a3:ca:57:77:11:82:d5:
f0:1d:69:75:8a:45:ea:eb:f0:25:0c:4d:dd:f4:53:ec:b3:55:
2c:ae:cc:af:6b:03:a3:0b:0e:30:20:8f:a3:79:ea:2b:00:bf:
fa:3d:81:c0:27:23:ee:92:4c:c2:85:7c:27:38:63:87:02:78:
af:e8:6a:d7:4d:d2:c3:fe:97:b7:9d:9a:48:0e:a5:77:58:cf:
97:95:31:62:52:30:49:51:e8:1d:dc:56:a1:4c:c7:78:c3:38:
11:35:19:62:1f:0a:58:e7:77:b7:54:8d:0c:ec:09:82:02:ee:
03:fd:b2:f5:8f:e1:33:e0:e2:18:fd:08:7c:e7:2c:41:15:f7:
c5:a6:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:05:47 2025 by rpki-client