Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8BRIX_o7bt0k8lnk0o8DMV79G-Y.roa
File: 8BRIX_o7bt0k8lnk0o8DMV79G-Y.roa (raw, json)
Hash identifier: mosPugq0SmGgUOk0K/NmsSvDZFbpVtfxoRxzyefRCJ0=
Subject key identifier: F0:14:48:5F:FA:3B:6E:DD:24:F2:59:E4:D2:8F:03:31:5E:FD:1B:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019439F7A9263C6FF3E59898146CDD82DA9F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8BRIX_o7bt0k8lnk0o8DMV79G-Y.roa
Signing time: Mon 06 Jan 2025 04:55:19 +0000
ROA not before: Mon 06 Jan 2025 04:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214209
IP address blocks: 31.56.156.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 09:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:f7:a9:26:3c:6f:f3:e5:98:98:14:6c:dd:82:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 6 04:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f014485ffa3b6edd24f259e4d28f03315efd1be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:ee:70:33:62:b2:06:dc:5f:63:98:c9:f7:
21:74:a7:db:f6:97:08:50:10:d3:f9:ff:4f:ac:80:
36:6a:ab:a0:23:fb:44:3e:5d:1b:6e:30:50:eb:48:
a6:55:b6:4a:59:06:ce:63:81:09:2c:c5:6e:77:ac:
3f:c5:05:65:25:e4:98:a9:09:d6:40:a5:2f:74:60:
a8:09:f4:d3:48:22:9a:30:32:d0:8f:92:54:87:b9:
1b:72:d2:62:96:cd:4e:05:34:66:05:f0:1a:b0:66:
54:b7:72:5a:5a:46:ab:bc:ec:aa:c2:25:dc:7a:ed:
97:c6:3f:b9:6c:7b:b1:78:da:8d:30:19:80:10:91:
f3:5c:b9:d8:89:ee:cc:81:7d:40:5d:c6:e5:60:f0:
28:9b:12:de:c2:35:c9:b0:83:62:f1:1a:60:82:d3:
a5:e9:9c:b6:e4:b2:e8:55:74:2e:b0:83:25:a5:c6:
d7:7a:30:03:8e:00:32:09:2c:fb:b9:28:e5:1c:ef:
95:45:5d:30:17:66:1d:77:45:c4:5a:a4:e6:a9:cd:
0f:e4:ce:5a:92:8b:86:18:d2:a3:43:c2:ad:db:45:
cd:da:32:2a:be:3d:2f:f1:e4:89:f7:cf:32:3b:09:
a3:f5:9c:ea:0d:2c:5d:fe:96:dd:8a:57:ab:70:03:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:48:5F:FA:3B:6E:DD:24:F2:59:E4:D2:8F:03:31:5E:FD:1B:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8BRIX_o7bt0k8lnk0o8DMV79G-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.156.0/24
31.57.65.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f2:7c:4f:e0:8e:03:03:b6:95:55:0d:97:a0:56:eb:ba:7f:
78:c0:8a:a0:5a:9a:88:16:5d:a4:f4:03:40:77:12:56:d7:5f:
b1:d9:99:c1:9c:eb:40:24:e1:1b:85:48:fb:e6:ac:84:d0:a1:
27:c0:84:7f:b2:ff:87:f1:85:a0:23:9c:3f:db:4d:15:16:4c:
44:7b:af:91:86:f8:ad:0c:ec:f2:d1:84:92:aa:cf:2a:41:f8:
92:3f:4d:f0:3a:e9:da:f9:80:57:0c:11:eb:50:a6:aa:10:f1:
ba:78:e1:13:07:98:ca:17:d9:de:d1:3b:87:f0:a2:2c:81:e4:
a3:09:46:a7:ef:01:d5:d2:07:26:94:40:5f:58:16:bb:a1:22:
43:0e:b3:e1:83:fa:59:2f:ca:2e:19:c2:d4:d3:2e:89:4e:c3:
bc:7b:83:d1:20:3a:7f:2f:3c:f0:13:6f:98:6e:51:dd:26:41:
22:03:71:18:b7:3b:ec:cb:3b:a8:86:b4:f9:89:21:84:e1:7b:
81:ef:7f:ca:63:43:62:05:cb:f1:be:b3:58:dc:c1:fa:74:20:
26:1f:94:27:58:2d:2f:00:ad:4c:4a:a7:30:96:49:38:e0:52:
d0:f3:54:44:4f:53:63:4d:c2:7d:fd:11:a3:cd:49:4f:c0:b5:
98:43:bf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:12:50 2025 by rpki-client