Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yJhe24EymZyJeY7Q_nzJcFopb9I.roa
File: yJhe24EymZyJeY7Q_nzJcFopb9I.roa (raw, json)
Hash identifier: MnzJdx0WbqMBwKh3RMK4D5PeReM0Lz8f4XRaEKfLSPc=
Subject key identifier: C8:98:5E:DB:81:32:99:9C:89:79:8E:D0:FE:7C:C9:70:5A:29:6F:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019376DB18481FE710A90052C195FDB9C36C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yJhe24EymZyJeY7Q_nzJcFopb9I.roa
Signing time: Fri 29 Nov 2024 07:38:10 +0000
ROA not before: Fri 29 Nov 2024 07:38:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62390
IP address blocks: 31.56.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:db:18:48:1f:e7:10:a9:00:52:c1:95:fd:b9:c3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 29 07:38:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8985edb8132999c89798ed0fe7cc9705a296fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:a8:e3:3b:8b:b2:85:8b:52:65:aa:b3:77:
6c:3b:43:8c:50:1c:22:86:4f:e5:00:38:c3:b4:8a:
d6:ab:53:a5:79:31:05:13:50:d3:06:7f:8d:84:74:
db:71:69:55:6e:b6:49:b1:ba:b0:92:2f:ea:e0:98:
0a:f2:7d:70:af:9a:39:4d:b8:47:09:ec:ff:a6:77:
94:be:c8:5d:5e:34:65:e1:25:9d:e9:f6:38:78:94:
0e:af:ee:c8:5c:8d:c1:e6:39:c9:e1:ee:f8:b9:65:
6f:94:44:b3:0c:a8:66:52:b0:60:03:cd:af:68:3d:
b2:e0:f9:8b:a2:64:8e:6e:f8:cd:d2:3e:8b:9c:6d:
a0:66:51:12:c9:d2:9c:e9:07:7c:71:bd:35:ff:24:
48:57:af:e9:60:91:e9:18:d4:95:8f:c5:42:bb:cf:
b1:42:75:54:b6:4a:7c:12:a2:f8:ff:42:9d:19:77:
09:66:91:8c:1c:30:45:aa:11:45:8d:2e:37:21:5c:
9d:e2:09:49:21:02:4e:91:9c:de:da:f1:22:20:74:
38:57:cb:23:b8:ab:5c:8c:63:3a:d2:92:a0:4e:45:
51:28:6d:16:91:af:54:62:aa:f9:4e:23:94:ec:19:
53:0f:2f:bb:d4:e3:b0:58:ee:86:c4:88:ee:be:6e:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:5E:DB:81:32:99:9C:89:79:8E:D0:FE:7C:C9:70:5A:29:6F:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yJhe24EymZyJeY7Q_nzJcFopb9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.41.0/24
Signature Algorithm: sha256WithRSAEncryption
55:06:f1:23:4a:a1:ca:c9:f8:aa:b3:bf:65:fb:f1:24:d8:bd:
84:d4:f3:f2:b0:1b:54:c7:bc:26:74:28:41:c2:33:bf:bd:43:
09:bb:40:4a:d4:6b:58:55:a6:20:af:de:a1:c8:de:44:10:f8:
19:0d:05:e4:69:f2:20:f6:ae:8f:50:c0:10:d9:aa:70:df:46:
d8:30:27:20:57:89:b7:1b:95:c4:54:f6:3e:48:72:6c:13:90:
60:2b:59:f0:60:7f:88:a0:34:f1:49:54:ec:0e:8d:bb:3a:88:
fe:06:0d:af:8c:88:49:5e:21:7f:5f:98:7d:c6:e8:1b:ad:46:
de:c8:1a:d2:fc:b5:71:af:bd:e6:b7:77:fc:f0:19:0a:e1:2a:
b5:21:11:8a:99:2e:b8:ce:6b:9b:f8:70:ab:ac:c8:03:56:4b:
d7:34:fd:74:5a:a3:59:3f:2b:97:3d:c5:c5:e7:4c:0b:47:66:
6f:4a:4b:32:98:96:3e:eb:84:ab:87:b1:dd:7f:2d:ed:c2:c1:
de:c7:78:8b:eb:ed:f8:d4:6b:87:96:27:26:71:70:7a:7a:ac:
0c:65:fd:a8:ce:55:93:13:a9:0d:40:d3:ea:01:79:5d:e7:78:
85:fc:d9:2e:9d:13:dd:53:71:17:41:3c:aa:ad:ea:a8:1d:3f:
55:72:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:49:15 2025 by rpki-client