Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zF8HnFbzKWC96JuUfNPls9RKLP8.roa
File: zF8HnFbzKWC96JuUfNPls9RKLP8.roa (raw, json)
Hash identifier: nH1T1kRxv/QFNrpWP0zUgoYu2zMDVtPiwTdCizQk8iA=
Subject key identifier: CC:5F:07:9C:56:F3:29:60:BD:E8:9B:94:7C:D3:E5:B3:D4:4A:2C:FF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193730113D62361B8A09E664B829EC467F8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zF8HnFbzKWC96JuUfNPls9RKLP8.roa
Signing time: Thu 28 Nov 2024 13:41:10 +0000
ROA not before: Thu 28 Nov 2024 13:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 31.58.49.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 21:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:01:13:d6:23:61:b8:a0:9e:66:4b:82:9e:c4:67:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 28 13:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc5f079c56f32960bde89b947cd3e5b3d44a2cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:d8:8b:20:1b:7d:8c:fa:22:23:24:76:6d:
50:bc:8e:ef:b0:25:d4:5b:59:20:d4:9a:ee:b6:73:
06:2b:31:9a:1c:37:21:aa:76:11:c0:06:95:3b:f9:
a0:df:63:6b:48:f5:88:38:cb:7a:46:2f:ed:5e:3d:
ed:a3:16:82:cf:32:fa:32:13:66:d1:0c:2b:1f:68:
63:7b:ff:45:4d:64:05:20:81:ce:50:86:c7:65:14:
7c:26:2d:8b:fb:6d:ac:7f:df:c2:89:f3:aa:a1:48:
8e:0a:c7:fc:e9:7a:b8:1f:84:5e:af:7e:a2:4f:ba:
bb:f8:e5:43:36:71:0d:35:45:3d:ba:5b:a3:1a:14:
81:d1:1b:97:85:f4:15:0a:45:2c:8c:09:d1:ce:07:
90:14:3b:11:ef:3e:06:0b:c0:88:78:80:b0:8f:50:
68:81:9b:ef:7d:ee:66:16:0b:93:d2:56:4a:3a:a8:
b1:f8:6e:c5:31:1f:e1:5c:83:5a:74:86:9a:77:ad:
26:20:93:96:54:d0:47:0f:b0:93:99:94:21:8e:b1:
0d:e2:2c:41:36:9a:8b:89:66:9b:ff:b0:d8:d0:b6:
20:34:1f:28:f4:35:5c:12:3b:fe:ca:62:ef:a4:80:
af:97:0b:f5:ba:66:b5:48:1b:05:3a:d0:10:59:81:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5F:07:9C:56:F3:29:60:BD:E8:9B:94:7C:D3:E5:B3:D4:4A:2C:FF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zF8HnFbzKWC96JuUfNPls9RKLP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.49.0/24
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:96:2a:8c:69:76:9f:d6:70:de:c4:b9:e1:ff:ed:f7:dc:3c:
ed:fe:cc:e1:e9:3c:44:82:30:a0:53:b2:25:68:97:57:59:cf:
f7:f3:b5:d6:7e:02:9f:9f:43:72:49:fa:5e:11:34:b0:11:0f:
f2:63:ab:49:d8:d8:01:5e:de:38:31:d2:f0:a0:99:26:a1:31:
ce:7b:9e:c1:6b:53:42:d2:ff:4e:43:01:c4:2a:03:d1:9a:f1:
2c:07:42:a4:3c:4b:f5:17:a4:92:ea:53:2d:72:4f:5b:b4:76:
f4:ce:35:81:88:44:d2:fa:ba:84:45:cf:c7:8c:3d:0a:9d:ab:
1f:86:c8:10:1e:ff:62:bb:00:9a:36:8d:29:bd:61:27:87:00:
de:f9:f5:ea:36:5a:ee:f4:9d:90:54:12:01:a8:3f:11:b9:59:
d3:e9:a5:64:f3:cd:7e:6d:18:41:40:0a:e3:45:4d:64:a9:24:
cb:ef:08:ae:65:0d:e2:87:a4:2e:7c:1d:b2:49:49:e5:11:66:
54:6f:b6:63:cc:43:36:ad:5c:7a:6a:90:41:38:4b:c8:2b:99:
25:92:2b:8a:5e:20:0b:99:44:23:2c:04:23:f8:eb:97:37:ed:
0d:5d:36:d4:fd:b0:3e:91:18:cf:fa:c4:4e:63:4d:75:55:fc:
3c:cd:c1:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZNzARPWI2G4oJ5mS4KexGf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTI4MTM0MTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzVmMDc5YzU2ZjMyOTYwYmRlODliOTQ3Y2QzZTViM2Q0NGEyY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDfYiyAbfYz6IiMkdm1QvI7vsCXU
W1kg1JrutnMGKzGaHDchqnYRwAaVO/mg32NrSPWIOMt6Ri/tXj3toxaCzzL6MhNm
0QwrH2hje/9FTWQFIIHOUIbHZRR8Ji2L+22sf9/CifOqoUiOCsf86Xq4H4Rer36i
T7q7+OVDNnENNUU9ulujGhSB0RuXhfQVCkUsjAnRzgeQFDsR7z4GC8CIeICwj1Bo
gZvvfe5mFguT0lZKOqix+G7FMR/hXINadIaad60mIJOWVNBHD7CTmZQhjrEN4ixB
NpqLiWab/7DY0LYgNB8o9DVcEjv+ymLvpICvlwv1uma1SBsFOtAQWYFY6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMxfB5xW8ylgveiblHzT5bPUSiz/MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvekY4SG5GYnpLV0M5Nkp1VWZOUGxzOVJLTFA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzoxAwQA
HzqpMA0GCSqGSIb3DQEBCwUAA4IBAQCpliqMaXaf1nDexLnh/+333Dzt/szh6TxE
gjCgU7IlaJdXWc/387XWfgKfn0NySfpeETSwEQ/yY6tJ2NgBXt44MdLwoJkmoTHO
e57Ba1NC0v9OQwHEKgPRmvEsB0KkPEv1F6SS6lMtck9btHb0zjWBiETS+rqERc/H
jD0KnasfhsgQHv9iuwCaNo0pvWEnhwDe+fXqNlru9J2QVBIBqD8RuVnT6aVk881+
bRhBQArjRU1kqSTL7wiuZQ3ih6QufB2ySUnlEWZUb7ZjzEM2rVx6apBBOEvIK5kl
kiuKXiALmUQjLAQj+OuXN+0NXTbU/bA+kRjP+sROY011Vfw8zcH6
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:15 2025 by rpki-client