Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-LeeIcNyFPHh3O5mf0_AwuQ7PaM.roa
File: 1-LeeIcNyFPHh3O5mf0_AwuQ7PaM.roa (raw, json)
Hash identifier: 2qX2aGghrkpM/0ABWuxuzafSGzxLB+IRR7Q14dX+Oec=
Subject key identifier: F8:B7:9E:21:C3:72:14:F1:E1:DC:EE:66:7F:4F:C0:C2:E4:3B:3D:A3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193BF18F10EAFD552862068B991F57EC14D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-LeeIcNyFPHh3O5mf0_AwuQ7PaM.roa
Signing time: Fri 13 Dec 2024 08:18:22 +0000
ROA not before: Fri 13 Dec 2024 08:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 31.57.100.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:18:f1:0e:af:d5:52:86:20:68:b9:91:f5:7e:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 13 08:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8b79e21c37214f1e1dcee667f4fc0c2e43b3da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6f:8a:a3:13:85:10:66:88:5d:32:72:bb:9c:
68:f3:37:48:6b:dd:0d:ab:0b:7f:7d:cb:14:b2:ee:
92:31:29:42:0e:87:70:4f:fe:3a:01:88:68:c6:00:
3a:aa:77:c5:11:a2:83:bc:c3:a5:57:13:2f:1a:69:
11:bd:12:2b:62:b7:76:b2:f5:65:85:f5:e5:9e:47:
ad:0d:95:8a:b7:91:94:ae:7d:e9:4e:3f:29:f3:14:
c4:f0:fc:82:8c:b2:0d:70:cd:63:8e:c3:ce:f3:6d:
9e:32:44:ca:70:43:10:ce:a1:09:e0:87:79:fb:62:
c2:48:81:67:3a:f7:26:b4:10:7c:af:cf:1d:ca:12:
67:ad:cf:29:fe:f3:5f:da:b1:5a:19:47:13:f6:4c:
46:5f:d9:1e:74:26:c7:45:2d:0e:64:f4:f0:68:6e:
d0:00:b2:a2:20:e8:22:0b:c1:c8:bd:9f:39:70:f5:
95:2a:57:2b:8d:a6:88:3f:4e:cd:36:7c:65:94:de:
62:05:d2:86:8f:0c:d6:0c:a4:51:74:dd:c9:7f:ea:
6f:87:de:02:a9:a0:af:5e:3b:31:f2:9d:49:1a:e3:
1a:d5:3e:43:7f:42:2b:db:42:9f:70:28:4f:51:1d:
fc:54:f7:12:67:ba:1b:ff:23:4d:e1:c3:4c:fb:0b:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:9E:21:C3:72:14:F1:E1:DC:EE:66:7F:4F:C0:C2:E4:3B:3D:A3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-LeeIcNyFPHh3O5mf0_AwuQ7PaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.100.0/24
31.57.228.0/24
31.57.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ae:88:22:00:27:17:49:dc:fd:1c:27:e1:88:f4:69:39:cd:
83:0f:52:66:1a:3f:b0:e9:0d:d6:33:2a:44:68:fd:3c:dd:04:
6d:b7:96:8d:aa:75:b8:da:70:bd:df:62:d0:ac:2c:c7:cc:55:
0d:0c:94:77:6c:6c:d6:96:d9:d7:cc:5f:e1:1a:75:f6:b4:a5:
d6:ce:8d:ec:ec:b7:ad:ee:c4:f1:aa:47:9b:4f:bb:57:af:b5:
f2:37:ae:12:b2:e2:89:be:a1:db:fe:85:0a:a8:15:91:4b:4e:
ab:e8:ab:a7:62:77:65:16:0e:41:ee:3f:7c:8e:7c:04:20:3d:
df:20:6f:74:cd:76:ba:ad:01:94:61:81:fc:89:d9:6b:59:56:
2a:17:a4:02:c1:44:30:8b:f1:18:31:49:38:eb:72:bb:c4:02:
07:d5:88:24:e9:a6:47:ff:5a:13:9b:5b:39:2e:84:94:b3:6b:
67:6d:6c:c0:32:6d:14:1c:63:25:df:f6:26:e2:15:8d:7c:a9:
5a:fe:b4:bf:dc:0f:e0:06:9c:2d:e3:80:6f:7b:90:75:1d:3e:
8b:aa:1c:6c:77:10:53:23:85:60:7c:12:70:2a:68:5e:b6:47:
61:6a:2b:3e:b4:f1:aa:9c:00:3f:93:63:54:11:69:40:da:17:
2d:97:c9:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:03:42 2025 by rpki-client