Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zELU01-sX9dbJFya9YE3U2HyJnQ.roa
File: zELU01-sX9dbJFya9YE3U2HyJnQ.roa (raw, json)
Hash identifier: 9bIVc0+wN06D8qlpLC2ToCSS2xftFNISFpRNlZ6A1Ns=
Subject key identifier: CC:42:D4:D3:5F:AC:5F:D7:5B:24:5C:9A:F5:81:37:53:61:F2:26:74
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194832E23A3C47CF232C03B0BD4AA6525ED
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zELU01-sX9dbJFya9YE3U2HyJnQ.roa
Signing time: Mon 20 Jan 2025 10:07:06 +0000
ROA not before: Mon 20 Jan 2025 10:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57142
IP address blocks: 31.57.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 06:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:2e:23:a3:c4:7c:f2:32:c0:3b:0b:d4:aa:65:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 20 10:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc42d4d35fac5fd75b245c9af581375361f22674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:be:d0:7f:a7:e8:f5:03:16:b6:77:28:e5:
d8:13:fd:5f:19:f7:87:71:a2:16:bd:e4:fd:3d:11:
bc:c3:7f:21:cd:f1:d6:bf:61:bc:50:5a:cf:ad:e4:
18:be:07:24:40:0a:8e:14:1f:92:ef:43:74:65:06:
ad:22:f8:b1:61:3b:9b:2a:d2:6b:b8:48:e0:32:b0:
1c:9b:57:ac:32:d3:f0:27:bb:8c:f7:f9:3e:a7:a8:
1b:54:d6:a6:bd:6d:04:6b:87:a7:1b:88:a4:77:6f:
c2:24:df:2d:7a:83:5e:b4:35:f2:d2:44:0f:ab:04:
3f:33:07:5c:91:2d:93:37:a7:53:3c:d6:fa:7f:13:
82:60:55:0c:34:fe:9a:0b:0d:70:0a:b9:3d:16:f3:
d9:c6:2f:91:58:c0:d3:c6:c6:87:2b:d0:d2:20:ec:
24:4c:53:84:6f:70:f3:e3:1a:49:bf:f3:98:f5:69:
5b:7b:cf:94:26:0f:91:9c:da:85:41:ae:3c:98:7b:
6e:b7:24:f8:01:4e:91:d9:e0:6e:d9:72:43:95:84:
7f:d8:a1:c5:f5:83:6a:00:05:2f:50:a3:44:0a:0e:
0c:89:31:34:03:78:ed:78:82:62:e1:6a:7b:45:c7:
23:fe:a3:87:0d:a9:a0:09:69:23:96:af:b9:3f:2c:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:42:D4:D3:5F:AC:5F:D7:5B:24:5C:9A:F5:81:37:53:61:F2:26:74
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zELU01-sX9dbJFya9YE3U2HyJnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:4f:c3:bb:fd:30:ac:0f:77:94:42:4a:42:e3:82:a3:a8:9d:
ae:d3:53:4c:f0:51:a4:e0:d6:6b:ad:53:86:27:45:61:38:34:
e2:50:cf:5a:0d:e4:17:ba:c2:e0:b8:d5:61:74:e2:fe:cd:d0:
c7:17:83:58:32:8a:17:5d:80:29:25:c4:72:ee:24:65:6a:29:
e4:fe:f5:b8:fe:be:06:a8:87:2d:35:19:d3:2e:5d:34:25:21:
79:37:9d:8e:89:3a:68:b9:07:e6:6b:f7:54:b6:69:ba:d5:95:
ba:05:f6:56:85:73:2f:91:b0:fb:cc:d0:f2:ec:03:f7:13:c7:
d6:7f:89:a9:b9:5a:19:a0:71:23:44:7e:18:69:1e:5b:c5:36:
fd:69:8b:fe:01:0d:09:8c:f6:1d:90:8f:ba:9b:ce:79:7c:e8:
15:f7:cf:28:e1:1d:eb:bf:5e:ac:c8:af:3b:3a:99:34:c6:bb:
c1:d0:a5:ff:17:2b:39:ac:5a:2d:b2:10:d4:cf:42:84:6f:25:
5f:e6:99:29:59:d4:2d:43:77:b8:c6:0d:46:58:26:4d:d2:fd:
05:dd:f5:54:d2:73:99:a7:15:e6:29:f7:60:71:32:66:fc:5e:
2c:3d:cb:04:c6:78:1f:af:e2:59:46:9e:c7:3a:5a:23:90:cf:
8f:4c:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:09 2025 by rpki-client