Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BAFdtjOd_Pu72_YoYP9LauiTDvg.roa
File: BAFdtjOd_Pu72_YoYP9LauiTDvg.roa (raw, json)
Hash identifier: 0YOEGqxNZ4e4RUY9YePo0lu7j/WSEmc+p3qfRA5keH0=
Subject key identifier: 04:01:5D:B6:33:9D:FC:FB:BB:DB:F6:28:60:FF:4B:6A:E8:93:0E:F8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01950AB6BCC335AD3DA18CF63F456ED3928F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BAFdtjOd_Pu72_YoYP9LauiTDvg.roa
Signing time: Sat 15 Feb 2025 17:45:02 +0000
ROA not before: Sat 15 Feb 2025 17:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214819
IP address blocks: 31.58.50.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 16:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0a:b6:bc:c3:35:ad:3d:a1:8c:f6:3f:45:6e:d3:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 15 17:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04015db6339dfcfbbbdbf62860ff4b6ae8930ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:e2:0b:e7:ab:1b:fe:5d:5c:f2:65:27:9b:
ef:0d:a2:5a:58:cc:1d:3b:29:a4:4e:0a:94:a4:5f:
5a:8b:56:0f:d1:b1:4f:b1:0a:1a:0b:6c:cf:6c:bf:
63:78:37:2b:5d:2d:50:41:09:38:db:f4:b4:33:f7:
15:7b:38:29:c8:c8:ec:ef:55:5f:3c:08:72:5f:78:
3f:58:98:a2:6f:aa:1a:b1:bf:80:b9:24:e8:d7:09:
f2:c2:a1:3c:93:a1:59:b2:9b:92:c3:10:94:19:d5:
64:03:af:0d:6d:ed:83:38:cd:03:cc:89:a1:5d:14:
e5:20:ad:86:92:07:f8:a9:92:15:26:b1:c6:62:53:
ec:9b:2a:da:d8:e9:94:5a:13:60:da:4e:5f:21:db:
14:d6:ea:e2:73:e9:47:da:be:0d:60:27:26:fe:3b:
02:34:1f:11:a8:b6:9e:d7:51:e0:a3:c6:1f:54:d1:
f2:fa:e0:c9:56:71:0f:7b:87:27:2c:85:a1:54:c5:
95:e3:0b:38:c2:6a:b1:dd:ae:c4:8f:a4:3d:78:43:
68:12:88:00:de:f3:66:b7:70:aa:d6:2f:23:54:fc:
33:25:df:1d:51:e0:a9:02:cb:28:f1:e7:f1:72:d2:
09:86:18:24:84:36:ef:ec:a7:2f:b5:3e:2b:f6:a5:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:5D:B6:33:9D:FC:FB:BB:DB:F6:28:60:FF:4B:6A:E8:93:0E:F8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BAFdtjOd_Pu72_YoYP9LauiTDvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.50.0/24
31.58.160.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9d:a5:9c:1f:b7:a1:d9:e3:98:f5:20:c0:8c:79:96:06:95:
b0:5e:fd:4c:1e:ad:e7:57:ca:9c:86:83:ce:11:89:ca:4c:c0:
94:f0:71:54:66:db:00:9b:9f:78:7d:62:b8:1d:25:9c:89:33:
6e:4d:34:52:b8:b9:be:c8:cb:38:39:fc:21:b6:0a:9b:79:fb:
92:1c:c9:6c:a0:2f:3f:9e:bc:16:e2:46:f3:45:ff:28:9c:16:
64:4a:02:56:be:ee:aa:9b:58:1a:30:23:61:28:e3:52:92:63:
18:dd:43:e5:9d:da:9e:e8:c5:17:3a:98:6a:a6:23:4c:51:44:
cd:21:03:46:d8:24:52:04:4a:38:a2:9f:20:7d:f4:88:f3:e6:
1b:77:25:bf:e5:f7:47:79:04:a1:78:75:a4:0a:da:5e:00:d0:
a4:38:71:8a:d2:19:9f:9b:64:40:ec:f9:fe:1f:ff:f7:fa:56:
a3:95:42:cb:15:92:92:be:b1:9d:0b:9f:af:06:c6:96:5e:ce:
20:2b:ad:f6:74:36:b0:5d:9c:36:ce:98:3b:e3:69:26:ee:11:
2d:7d:6e:bd:8e:46:fc:40:5b:c4:5a:ad:4d:6b:6d:9d:aa:36:
cd:52:2f:7d:a2:f1:47:ed:86:90:4d:fa:21:03:94:96:62:24:
cb:67:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:05:00 2025 by rpki-client