Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x9MnJ636o-1-exxfvm_XYyOc1S4.roa
File: x9MnJ636o-1-exxfvm_XYyOc1S4.roa (raw, json)
Hash identifier: TihQI1VWRfciSQicHFZd+OBuuKGnGSHqba1IozZhmEc=
Subject key identifier: C7:D3:27:27:AD:FA:A3:ED:7E:7B:1C:5F:BE:6F:D7:63:23:9C:D5:2E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282372B3A3B1654FBB6B9CBE24146AD4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x9MnJ636o-1-exxfvm_XYyOc1S4.roa
Signing time: Thu 02 Jan 2025 17:49:59 +0000
ROA not before: Thu 02 Jan 2025 17:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214209
IP address blocks: 31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.59.112.0/24 maxlen: 24
31.59.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:72:b3:a3:b1:65:4f:bb:6b:9c:be:24:14:6a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7d32727adfaa3ed7e7b1c5fbe6fd763239cd52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:dd:94:d9:61:fb:13:3e:b0:4b:62:c7:b0:
54:83:6a:83:7a:32:77:68:8a:5a:c3:16:7b:96:cc:
d9:df:99:be:d3:96:02:29:51:ce:99:ab:61:46:7d:
f4:9c:9a:7f:8d:41:a6:4e:9e:5f:d4:e4:f6:b9:b0:
cc:31:7f:c7:f0:2d:07:be:3f:77:56:1b:7f:07:0d:
6b:36:c2:ca:bc:a5:d5:ec:21:ad:f8:b0:a2:1c:ee:
4f:df:22:24:73:bf:27:2d:ed:ba:6a:b4:eb:e4:33:
cd:9c:ea:f4:19:d1:0b:bf:6d:7b:37:9d:bb:de:f1:
b8:d8:2f:f6:1b:7c:08:d9:55:b7:2b:de:a7:cc:34:
f2:36:43:5d:a8:2c:66:dc:a4:e5:38:e4:80:ab:59:
36:11:19:cf:f5:dd:f2:0c:71:de:80:a3:f8:c2:fb:
05:c3:d8:1c:73:4e:d1:c5:70:97:83:a5:aa:c6:1c:
87:79:02:e2:b5:79:14:4a:45:63:5a:e7:4d:84:54:
3b:5d:53:5f:ae:e6:4e:08:4b:a2:ae:55:f9:d6:96:
b9:7f:18:75:54:c7:8b:c3:61:08:aa:b9:4e:f5:43:
49:8d:45:ca:9a:08:7e:dd:ee:e9:a3:21:dd:d7:a3:
ec:6d:f0:4e:0a:0a:0c:b8:cc:88:95:d7:79:98:0d:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D3:27:27:AD:FA:A3:ED:7E:7B:1C:5F:BE:6F:D7:63:23:9C:D5:2E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x9MnJ636o-1-exxfvm_XYyOc1S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.156.0/24
31.57.65.0/24
31.59.112.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:2d:00:5d:59:55:56:22:1d:47:18:fb:24:2a:58:39:45:3a:
62:8e:bc:90:06:90:be:fd:52:d9:2a:a8:1e:40:62:24:5b:ca:
02:f0:12:71:17:64:d8:19:81:da:37:72:6e:00:ae:f7:6c:2f:
76:23:07:60:42:5c:af:f0:f3:bf:f6:87:ef:60:89:5d:b2:1f:
df:91:73:21:74:ff:ae:39:09:78:8b:75:b4:84:be:99:fe:52:
55:62:ad:49:a7:33:dc:55:12:19:2c:86:ed:e5:0c:b4:36:ff:
92:0a:24:38:cf:b7:18:c5:d5:4c:bf:e0:6f:ed:bd:f0:6c:be:
df:e6:be:fe:be:a6:71:bb:7c:6d:ae:1e:5c:0f:f8:1b:1f:eb:
06:db:46:11:16:1e:e5:98:d1:4d:0c:2d:3d:e9:15:68:c6:b4:
bb:10:cb:1b:90:f8:c4:7b:99:2f:bc:0e:98:ca:5a:f2:5f:ad:
74:86:29:31:b2:63:f1:5b:bb:1a:67:3e:5b:7f:5c:90:1d:05:
9e:46:9e:0f:99:3b:2e:e2:07:ec:ea:c2:54:10:f1:c3:85:4f:
38:60:0b:ad:82:dd:92:7d:ef:5e:33:6c:fc:9e:8f:fc:d0:0b:
cb:de:6e:95:6c:f8:e6:13:c3:b1:cf:7f:7a:af:3c:85:e0:ab:
6f:9c:1c:a8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoI3Kzo7FlT7trnL4kFGrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2QzMjcyN2FkZmFhM2VkN2U3YjFjNWZiZTZmZDc2MzIzOWNkNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7PdlNlh+xM+sEtix7BUg2qDejJ3
aIpawxZ7lszZ35m+05YCKVHOmathRn30nJp/jUGmTp5f1OT2ubDMMX/H8C0Hvj93
Vht/Bw1rNsLKvKXV7CGt+LCiHO5P3yIkc78nLe26arTr5DPNnOr0GdELv217N527
3vG42C/2G3wI2VW3K96nzDTyNkNdqCxm3KTlOOSAq1k2ERnP9d3yDHHegKP4wvsF
w9gcc07RxXCXg6WqxhyHeQLitXkUSkVjWudNhFQ7XVNfruZOCEuirlX51pa5fxh1
VMeLw2EIqrlO9UNJjUXKmgh+3e7poyHd16PsbfBOCgoMuMyIldd5mA2YBQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMfTJyet+qPtfnscX75v12MjnNUuMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveDlNbko2MzZvLTEtZXh4ZnZtX1hZeU9jMVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzicAwQA
HzlBAwQBHztwMA0GCSqGSIb3DQEBCwUAA4IBAQB7LQBdWVVWIh1HGPskKlg5RTpi
jryQBpC+/VLZKqgeQGIkW8oC8BJxF2TYGYHaN3JuAK73bC92IwdgQlyv8PO/9ofv
YIldsh/fkXMhdP+uOQl4i3W0hL6Z/lJVYq1JpzPcVRIZLIbt5Qy0Nv+SCiQ4z7cY
xdVMv+Bv7b3wbL7f5r7+vqZxu3xtrh5cD/gbH+sG20YRFh7lmNFNDC096RVoxrS7
EMsbkPjEe5kvvA6YylryX610hikxsmPxW7saZz5bf1yQHQWeRp4PmTsu4gfs6sJU
EPHDhU84YAutgt2Sfe9eM2z8no/80AvL3m6VbPjmE8Oxz396rzyF4KtvnByo
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:49:03 2025 by rpki-client