Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0vEkpmw3FkgERUADMT8ZHadnHWU.roa
File: 0vEkpmw3FkgERUADMT8ZHadnHWU.roa (raw, json)
Hash identifier: Vje7KX5wRjM+ETEvkhHWNvpdSJAYX5qd9bHB4KxzsM8=
Subject key identifier: D2:F1:24:A6:6C:37:16:48:04:45:40:03:31:3F:19:1D:A7:67:1D:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019616C02100BB9A1FF3D55F3063536C86BD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0vEkpmw3FkgERUADMT8ZHadnHWU.roa
Signing time: Tue 08 Apr 2025 18:53:32 +0000
ROA not before: Tue 08 Apr 2025 18:53:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 15:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:c0:21:00:bb:9a:1f:f3:d5:5f:30:63:53:6c:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 8 18:53:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f124a66c37164804454003313f191da7671d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:8c:a4:63:5c:4c:60:17:38:3b:37:d6:19:
2d:13:d4:76:3c:64:92:47:35:05:1d:e7:96:c0:56:
14:b2:66:de:4d:d9:f5:e5:1f:e4:46:3c:31:6e:3b:
e0:18:40:ec:da:93:e8:6d:48:5a:55:5e:a2:4a:c6:
6c:4e:f1:8d:23:6b:4c:1b:38:cd:ea:8d:a9:cb:86:
59:ac:d5:b5:d9:08:72:99:dd:25:4c:4e:61:59:88:
59:aa:09:b5:69:40:fc:2c:00:87:b2:92:89:34:c2:
03:bd:3b:1d:fc:02:20:a1:85:99:45:47:f0:7d:38:
0c:15:c4:d4:4c:91:f4:89:f4:a7:42:ec:64:2a:13:
d5:41:ff:4f:6a:78:cf:ba:19:05:37:ef:d0:4b:08:
0e:39:8f:49:a3:66:6b:bc:bf:59:ef:7f:85:1f:c3:
44:ce:54:94:d0:b3:a3:d4:eb:4a:7b:90:5b:3c:86:
f0:ce:cf:83:df:0a:7d:a6:20:16:78:bb:1d:90:9b:
18:39:fb:df:d7:10:15:b4:6c:48:51:9e:fa:d6:ea:
05:26:be:32:e9:11:f0:2f:a2:ee:a0:0a:bf:6d:69:
53:d0:f1:c3:de:31:3b:da:7b:8e:d2:1a:11:c6:c9:
7b:88:0b:f5:f1:d6:7b:f7:d5:66:3f:d6:19:ef:61:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:24:A6:6C:37:16:48:04:45:40:03:31:3F:19:1D:A7:67:1D:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0vEkpmw3FkgERUADMT8ZHadnHWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.253.0/24
31.57.255.0/24
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c7:af:24:0f:fa:9e:a7:ab:4f:35:47:4d:8a:83:d3:41:52:
70:12:4e:2c:c2:b7:75:9c:22:67:62:93:54:fc:80:df:34:a8:
0d:a9:25:96:ec:a3:0d:5f:4c:57:21:24:0d:0b:8b:1b:56:3b:
56:fb:f3:49:38:59:85:fb:4f:0b:77:8c:a8:6a:e7:55:53:09:
36:f6:33:0b:ac:e0:cd:a2:1b:31:95:42:41:5d:72:82:ba:01:
30:7f:27:38:b6:fe:3c:e9:c0:d4:c7:55:50:2f:29:04:60:83:
3c:7a:ba:22:e2:db:98:f3:b6:8f:8c:f9:fa:34:a6:ae:4d:ba:
9e:ab:30:da:d4:b2:14:f2:00:98:95:ab:bc:13:bb:51:78:84:
cb:04:f9:e9:4a:8a:e1:5f:1c:53:a1:e2:c5:c8:0a:72:dd:25:
e0:ad:b6:5a:9c:05:2c:bf:33:39:08:fa:84:0a:5e:6b:0e:a2:
c7:1a:89:f9:1f:b7:64:31:fa:81:27:b5:d8:15:7d:0f:a1:05:
74:62:59:89:23:63:d1:e2:86:75:ba:78:32:0b:33:08:f0:4c:
f1:1c:53:03:ea:ff:1f:df:c7:6a:01:fc:7e:89:49:db:5b:38:
2b:4e:08:1e:0e:ad:ad:90:d7:ef:08:3e:0b:ad:e7:8d:c8:2c:
e8:56:cb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:05:48 2025 by rpki-client