Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQk5p8L1XS67pCzKf6n1BgF0IXM.roa
File: zQk5p8L1XS67pCzKf6n1BgF0IXM.roa (raw, json)
Hash identifier: isZc6xkloxd3Jaaj2mlEg8SbY79oXA6Ra8N4rM2OTFM=
Subject key identifier: CD:09:39:A7:C2:F5:5D:2E:BB:A4:2C:CA:7F:A9:F5:06:01:74:21:73
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428237ADA637674F0C0A24B51406CEADD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQk5p8L1XS67pCzKf6n1BgF0IXM.roa
Signing time: Thu 02 Jan 2025 17:50:01 +0000
ROA not before: Thu 02 Jan 2025 17:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 31.57.159.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.59.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:7a:da:63:76:74:f0:c0:a2:4b:51:40:6c:ea:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd0939a7c2f55d2ebba42cca7fa9f50601742173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:d4:b9:87:d3:33:e4:92:a8:6c:0e:31:2a:
77:22:b2:bc:37:28:7a:24:ca:ab:0c:8e:87:7a:66:
ac:0f:6a:24:7b:4a:87:a6:d4:df:2f:f2:fa:d9:ee:
41:d8:5e:4e:f9:3c:d3:f9:50:7a:86:96:86:4e:37:
ff:c6:1f:44:66:e8:e6:a9:0e:6b:2f:3d:d1:0f:c5:
be:73:c7:c7:47:74:12:bb:49:0b:61:bf:e7:e3:34:
73:e7:e2:30:26:ab:5b:0c:6b:39:1c:51:bd:31:d3:
d6:ee:9e:c9:0b:a9:3c:2d:2e:8d:f4:8f:48:85:33:
bb:1c:7c:1b:53:37:6d:56:df:30:df:d2:d1:91:f3:
22:d5:57:f0:de:7c:80:0d:14:c0:e6:5b:d4:5c:1a:
03:ec:40:93:df:17:c0:17:af:b3:45:3d:52:a7:50:
a7:d1:3f:54:9f:46:60:2a:0b:f7:82:45:bb:53:3d:
44:c3:c2:d7:05:99:ce:83:25:e5:04:33:e9:56:f2:
ca:1a:3f:5c:d7:89:07:04:0a:97:e4:68:61:aa:85:
6a:17:5d:9d:b0:30:32:f0:1e:6b:2a:b7:c7:3c:22:
1d:33:fb:99:69:81:31:d1:6d:9f:96:74:ab:cb:12:
f2:4d:49:0a:7a:66:12:85:49:fc:42:6a:d2:9b:85:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:09:39:A7:C2:F5:5D:2E:BB:A4:2C:CA:7F:A9:F5:06:01:74:21:73
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQk5p8L1XS67pCzKf6n1BgF0IXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.159.0/24
31.57.207.0/24
31.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:64:69:10:89:74:26:3d:7b:91:6f:e6:22:a1:31:d5:20:9b:
9e:0e:d3:45:9c:79:00:83:0a:11:4a:2c:37:bb:87:a6:25:69:
d2:64:1f:9f:20:8c:11:69:49:a5:ee:d5:bb:c5:9e:00:58:bc:
55:52:e7:37:59:44:02:aa:f9:c3:51:ee:fa:73:c5:9c:8f:73:
28:1f:7e:87:26:aa:f5:cf:16:f3:c1:d7:47:b3:e5:21:16:7d:
1e:e6:31:da:c1:93:8e:9e:85:58:09:aa:71:54:89:e7:b0:39:
33:ed:39:9c:d2:6a:2d:3b:87:af:06:18:a8:cc:8d:b0:33:a6:
29:bd:6e:02:45:c3:d3:54:ea:71:67:ec:39:7c:97:2d:f4:bf:
2e:81:db:4d:70:fa:16:fb:e7:70:d3:41:42:f0:41:f3:cc:60:
0a:74:e2:45:c4:b2:34:1a:e6:66:ed:6d:03:f3:59:76:ac:5c:
35:ae:06:9b:a5:c6:d8:06:76:88:76:30:ab:37:d7:e2:dc:3f:
a8:b0:12:ce:f3:d0:3e:f8:a8:a1:56:c5:9a:a1:82:70:88:8b:
00:11:dc:3b:f3:3c:09:0e:7e:92:84:44:59:47:d3:fe:58:64:
b1:0a:0a:97:47:5f:30:10:1d:d4:c9:95:70:8c:4f:96:4b:7c:
6c:94:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:08 2025 by rpki-client