Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-F-o02vlHdjLlIklVyc4zXVkEIk.roa
File: 1-F-o02vlHdjLlIklVyc4zXVkEIk.roa (raw, json)
Hash identifier: czXSh5DZAjBhiqa48Mo9an1BYgFsDeVZlMc+OdBlPQc=
Subject key identifier: F8:5F:A8:D3:6B:E5:1D:D8:CB:94:89:25:57:27:38:CD:75:64:10:89
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019374301CBD4A70FFA7CE130CEBF4A07437
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-F-o02vlHdjLlIklVyc4zXVkEIk.roa
Signing time: Thu 28 Nov 2024 19:12:10 +0000
ROA not before: Thu 28 Nov 2024 19:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7979
IP address blocks: 31.56.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 13:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:30:1c:bd:4a:70:ff:a7:ce:13:0c:eb:f4:a0:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 28 19:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f85fa8d36be51dd8cb948925572738cd75641089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:68:de:2c:14:a4:9c:67:78:7b:9b:e5:3b:
ed:26:7e:a6:b8:57:c2:fa:0b:a4:92:1e:70:3f:4c:
ef:5d:15:0e:6c:4a:99:4f:ff:5c:a3:ba:b9:01:78:
27:af:d6:98:d3:3d:c8:5d:8d:e9:74:0e:39:d5:1e:
d1:f4:94:04:e0:9d:e0:6b:d2:13:ef:f2:15:e5:0e:
30:8f:39:04:46:5c:43:df:c9:ab:64:c3:9a:59:93:
99:f7:c0:f2:48:ba:a7:86:12:75:03:fb:8c:f0:f3:
d4:57:bc:33:d9:91:ec:29:99:95:80:77:42:aa:3a:
9e:61:0b:1d:7f:2c:c4:bb:3f:23:38:2b:dd:32:8f:
b7:a4:fe:38:10:44:19:30:ba:0c:7c:a8:1d:dc:5b:
43:b4:17:50:6d:7e:ae:36:56:f7:5d:ba:0a:16:5f:
07:f8:0d:81:97:b7:87:39:b5:67:9e:6b:e9:26:05:
3f:a1:fd:1a:ce:27:4a:fc:a5:0d:e4:23:f3:e3:09:
d3:70:54:01:39:46:79:88:dd:2f:a7:34:7a:7d:76:
7f:d7:45:5a:a6:60:b7:7e:4f:4f:62:6f:85:dc:18:
8d:9c:78:43:33:34:46:92:5a:d9:58:d0:5c:f9:21:
0f:5c:a7:18:ee:a4:45:bf:82:63:76:7a:59:3e:32:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5F:A8:D3:6B:E5:1D:D8:CB:94:89:25:57:27:38:CD:75:64:10:89
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-F-o02vlHdjLlIklVyc4zXVkEIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a1:2b:83:9a:f8:4e:5b:bc:59:ce:e6:54:83:b4:05:4d:fe:
41:67:2c:fa:b1:20:ab:cd:52:e8:b4:ce:3e:f5:f0:ad:c0:bc:
04:08:40:1d:58:82:8a:13:fe:0b:94:02:74:aa:e1:a0:4c:d4:
f4:ed:13:ad:af:ae:e2:f7:35:c3:12:b9:7b:38:a0:2b:7d:85:
3f:6a:15:08:c9:5c:0b:cd:31:4d:5b:3f:14:a2:85:5a:b8:a0:
13:c5:e1:e5:83:a4:97:76:c3:2c:01:a9:f5:2e:56:8f:25:2c:
f9:f3:3f:ef:5d:57:1f:15:4e:e2:04:0d:04:8c:67:85:8f:96:
a4:a8:3b:5c:17:e7:86:06:74:80:6f:7e:8d:56:a0:bc:7f:84:
6b:c9:22:6a:f7:e8:e3:fd:3d:e1:1e:8b:57:c0:4f:3a:cf:a4:
30:24:cd:09:18:fd:cb:c6:65:6f:44:e4:c6:14:ff:59:71:a8:
3a:8c:3b:89:7b:d2:da:17:75:9a:ec:8c:a7:64:57:ea:83:4c:
8e:6d:d8:1f:af:c7:84:b2:44:d3:e4:07:59:48:0d:00:52:7b:
68:c1:52:98:ae:df:a2:47:73:cd:e5:9a:68:79:1f:35:96:54:
a7:bf:ff:21:9d:19:2b:d8:9e:f2:21:de:83:7c:5e:25:36:bb:
72:3f:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:53:09 2025 by rpki-client