Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yyHAzxIYtaG3FK3UUuKAE5RJmvI.roa
File: yyHAzxIYtaG3FK3UUuKAE5RJmvI.roa (raw, json)
Hash identifier: ss53qQlDjB1WQCcMMcRqsAFdEzmiXgsKcKGmVe5i8CA=
Subject key identifier: CB:21:C0:CF:12:18:B5:A1:B7:14:AD:D4:52:E2:80:13:94:49:9A:F2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019376DEC24FF932E635312CAA93DDBE5081
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yyHAzxIYtaG3FK3UUuKAE5RJmvI.roa
Signing time: Fri 29 Nov 2024 07:42:10 +0000
ROA not before: Fri 29 Nov 2024 07:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216022
IP address blocks: 31.56.241.0/24 maxlen: 24
31.57.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:de:c2:4f:f9:32:e6:35:31:2c:aa:93:dd:be:50:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 29 07:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb21c0cf1218b5a1b714add452e2801394499af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:eb:a3:f6:d2:5e:01:08:7d:1b:b1:48:a6:
e7:89:b7:7f:63:1c:1a:12:d8:16:92:a3:58:6a:5a:
13:93:fd:af:be:0d:17:2f:7c:c2:e3:17:07:dc:b0:
47:f0:99:db:b1:92:ed:f2:c7:41:4e:42:9f:46:93:
49:8f:94:36:f8:36:57:6a:ce:35:40:9b:0d:a8:1b:
5c:00:ca:47:18:1d:78:e6:c0:70:8a:a3:c7:f7:8e:
9e:a8:93:2e:c0:4a:be:78:a2:35:07:b0:90:c8:ee:
83:f8:0e:7e:5a:d0:18:57:b0:23:18:93:b9:74:4f:
59:ec:3f:8c:5a:de:9f:de:83:35:20:e5:87:bb:7c:
50:e5:5b:b5:88:62:e4:74:28:2e:5e:e9:71:f3:64:
72:45:0c:11:34:bc:e3:97:2f:d2:0f:33:1c:0c:6e:
81:a5:b9:eb:8b:ae:ab:ee:18:6a:8a:1e:ff:18:35:
89:8a:9a:f5:bf:bb:98:f1:91:5b:45:99:ba:43:bb:
20:a0:23:f7:dd:a5:33:ad:82:e5:42:af:00:0c:4a:
c0:70:9b:69:8e:e2:34:fc:60:81:90:13:0e:25:2a:
98:90:ea:21:e8:a1:28:ee:0c:b8:0d:96:f0:86:e6:
98:16:55:49:be:7b:91:96:4b:ed:d7:fe:6d:31:fa:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:21:C0:CF:12:18:B5:A1:B7:14:AD:D4:52:E2:80:13:94:49:9A:F2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yyHAzxIYtaG3FK3UUuKAE5RJmvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.241.0/24
31.57.40.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a5:9e:38:16:5e:21:d0:47:a9:1b:34:98:80:58:ab:6e:ef:
f7:4e:4b:1e:18:ac:d4:68:e5:46:7c:3b:df:01:56:b0:8c:36:
c2:58:1e:7c:19:7c:4a:89:92:78:65:2f:73:f5:f2:55:26:31:
09:b0:58:24:a0:c6:9e:ce:84:4f:02:10:ac:11:53:43:82:fd:
a3:61:63:2c:3e:ae:2a:ab:03:ea:70:a9:f5:55:1d:50:83:73:
42:22:bd:ed:6a:a4:1a:c6:59:11:7d:14:a9:22:c3:b9:0c:f5:
c8:c5:6b:d1:f9:a4:0d:9b:46:6f:06:6c:ae:57:79:c0:59:dd:
57:30:9a:53:25:06:14:94:fd:cd:ec:af:c7:78:c3:e8:d0:57:
1a:b0:89:c5:7a:e8:ba:07:a1:84:e2:16:31:76:1c:65:5e:ca:
c5:e1:fc:d2:0f:15:cb:d3:44:76:86:69:ae:2b:0c:c7:23:c5:
1c:74:7c:df:35:bc:fb:32:4d:e3:81:48:bf:89:19:7d:66:22:
cf:5c:5c:15:9c:15:b4:88:45:15:24:8e:d3:d5:9b:62:86:ab:
3f:67:1c:52:cd:06:52:03:7b:75:c6:2f:1a:9c:50:c6:dd:f6:
e0:da:9d:e5:0a:6e:f1:2d:39:d3:9b:3e:c4:90:e1:dd:2e:dd:
5b:93:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:07 2025 by rpki-client