Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zF8vNH30V737YV5ffv-aJIJfZwU.roa
File: zF8vNH30V737YV5ffv-aJIJfZwU.roa (raw, json)
Hash identifier: tJn5ZmWQFmKOXR96g5yD1shKAkLCUx+az7adZBfrzAE=
Subject key identifier: CC:5F:2F:34:7D:F4:57:BD:FB:61:5E:5F:7E:FF:9A:24:82:5F:67:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194FA86252D9E547770B06B74CACE81AB1B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zF8vNH30V737YV5ffv-aJIJfZwU.roa
Signing time: Wed 12 Feb 2025 14:18:02 +0000
ROA not before: Wed 12 Feb 2025 14:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.89.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.57.254.0/24 maxlen: 24
31.58.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 16:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:86:25:2d:9e:54:77:70:b0:6b:74:ca:ce:81:ab:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 12 14:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc5f2f347df457bdfb615e5f7eff9a24825f6705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:d0:c4:63:60:62:63:47:d3:c4:41:49:c6:
c5:47:ac:29:01:a2:9e:d8:38:7d:44:d6:f6:6f:1a:
9e:a8:94:8b:fa:14:20:6b:a2:a0:15:bf:3a:d7:56:
e5:12:22:c6:f9:9d:d9:25:36:ef:55:5c:bd:86:7d:
86:dd:b3:4c:bc:3a:8c:b7:d5:f6:82:26:4b:d0:e5:
79:ce:ae:18:a0:f1:83:ba:1c:99:34:73:8a:38:a6:
cc:65:0f:c7:58:6f:cb:ed:00:64:27:07:65:34:f8:
cf:53:90:33:ae:6a:a6:bf:fe:44:4d:44:a2:56:af:
e8:14:cb:4b:40:7f:55:1c:b3:db:7f:01:4f:b6:6e:
38:46:9c:a7:09:64:61:ec:94:0c:f4:69:dd:fb:46:
c4:d6:55:73:36:7b:e2:da:91:55:df:35:c2:9f:9b:
a3:22:10:40:9a:ae:4a:e4:bb:da:16:47:86:20:93:
e6:d1:96:bd:78:a7:8b:05:e4:4b:cd:ee:1d:16:fc:
be:ff:f1:e5:c8:d7:0e:a2:3c:ee:fd:6c:9e:c6:5c:
37:0f:01:8f:db:e5:01:eb:e1:12:95:c2:20:9c:14:
8d:33:f9:d3:88:fd:83:76:0f:78:6d:dd:01:02:d5:
08:62:f8:df:5d:89:b0:cf:25:71:1c:1e:07:07:1e:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5F:2F:34:7D:F4:57:BD:FB:61:5E:5F:7E:FF:9A:24:82:5F:67:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zF8vNH30V737YV5ffv-aJIJfZwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.89.0/24
31.57.199.0/24
31.57.254.0/24
31.58.153.0/24
Signature Algorithm: sha256WithRSAEncryption
40:99:ce:b0:78:06:a4:c5:90:78:c0:5e:af:4b:66:55:7d:96:
af:07:25:0b:ce:88:32:56:27:42:26:d3:91:f7:b9:fe:30:89:
80:e4:e4:03:39:9a:93:bf:15:42:f7:7e:89:88:a2:ed:8e:80:
61:57:42:48:02:fe:95:a8:64:89:5f:27:44:bb:8d:95:13:aa:
9d:50:81:34:b1:42:c4:1e:11:09:bb:c0:f6:1e:b2:06:03:dd:
07:94:58:ec:01:92:a7:31:06:94:ce:d8:96:e9:5c:b8:58:ca:
be:c5:67:fd:ae:1e:e4:b0:a6:a6:41:d7:28:41:4d:b7:cf:34:
cb:34:ba:99:c3:fc:8e:e2:61:55:46:16:9b:66:cd:b8:98:8e:
7e:cd:d3:b2:56:09:d8:d3:9c:59:e0:c7:88:8c:82:66:03:38:
4b:e6:85:93:ed:96:81:ec:68:09:45:b2:25:43:05:84:fa:04:
59:b7:08:3c:4a:1d:03:19:91:6f:7b:d9:67:f4:3c:10:4e:82:
48:b0:2f:34:df:b6:f7:06:98:4a:cd:aa:ec:ea:42:05:f6:41:
11:18:4f:f0:68:c4:db:c6:78:24:e0:4f:80:c4:7e:0b:8d:cf:
78:8e:1b:0b:b8:3c:23:08:56:01:3f:82:54:06:7a:4f:7f:b6:
ff:d7:b2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:38 2025 by rpki-client