Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BcJjSuNKTt4PIO0OvnjkmFzMJuA.roa
File: BcJjSuNKTt4PIO0OvnjkmFzMJuA.roa (raw, json)
Hash identifier: P6WX8eF/3trzIEl53dUPv4GUBg3wE7gM6nf/rcns8zo=
Subject key identifier: 05:C2:63:4A:E3:4A:4E:DE:0F:20:ED:0E:BE:78:E4:98:5C:CC:26:E0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019439F7A9F8124F69B4C3D7774BC2459F99
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BcJjSuNKTt4PIO0OvnjkmFzMJuA.roa
Signing time: Mon 06 Jan 2025 04:55:19 +0000
ROA not before: Mon 06 Jan 2025 04:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 31.57.159.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.220.0/24 maxlen: 24
31.59.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 19:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:f7:a9:f8:12:4f:69:b4:c3:d7:77:4b:c2:45:9f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 6 04:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c2634ae34a4ede0f20ed0ebe78e4985ccc26e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:8f:e3:08:39:33:7e:3d:4d:5e:f4:73:a7:
5c:50:97:85:28:66:1c:e4:95:58:a8:ca:be:c3:f1:
d4:26:58:86:f8:59:30:b3:76:90:5f:97:d8:3d:90:
12:2e:83:a1:d9:b7:73:a1:39:7e:fe:99:02:e6:71:
50:65:a6:ef:3f:72:a1:89:06:59:22:fa:c2:55:96:
1b:26:d1:d9:ec:4e:c8:2b:73:ae:08:f3:3f:4c:10:
d2:67:6e:54:7c:51:d0:90:ee:bb:5c:7e:b9:59:3f:
06:95:c2:fd:a9:1f:c2:04:ac:ba:87:b7:65:04:dc:
f4:4a:f7:21:c5:bc:61:e9:5c:82:77:54:75:3c:32:
72:e3:20:9f:6e:96:5e:9e:77:6c:23:ab:fa:60:9c:
d4:49:99:a6:52:d8:8d:8b:e3:03:7a:ee:f7:b6:06:
d4:1f:db:a0:3e:4c:82:17:8d:26:79:f1:7a:47:03:
33:7d:66:0f:ff:46:d5:3b:9f:df:62:39:ef:6b:73:
ff:ad:1d:dd:76:e4:69:0c:e6:32:9a:dd:1c:37:a9:
5d:5a:60:f7:4b:20:bd:23:bc:c5:2f:b8:08:94:a6:
fb:20:54:ad:5c:48:78:78:43:36:32:b1:e8:ad:d0:
62:20:06:c9:bb:ba:79:b6:56:db:61:2d:85:36:32:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:63:4A:E3:4A:4E:DE:0F:20:ED:0E:BE:78:E4:98:5C:CC:26:E0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BcJjSuNKTt4PIO0OvnjkmFzMJuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.159.0/24
31.57.207.0/24
31.57.220.0/24
31.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d7:3e:b4:df:0c:85:9c:68:c4:f1:95:4d:60:8e:06:06:98:
fd:9a:ad:01:c9:61:6f:10:6e:63:5b:b5:de:e7:1f:e8:6a:37:
9a:07:67:0c:31:44:23:0f:4f:84:b7:1b:ab:1c:4b:fa:9c:5f:
16:4d:4b:e3:ff:1c:4e:80:4a:4e:04:03:0a:bf:e2:b7:70:1e:
f2:ee:0e:0d:0e:60:4e:69:8d:08:85:ae:d2:5f:70:52:c5:53:
68:73:d8:28:5c:66:00:08:dd:43:36:3d:41:a3:62:95:33:5b:
2d:ec:7b:d0:ba:43:a6:b4:e3:24:f5:aa:05:b8:22:43:f8:0f:
78:9d:99:90:00:44:59:96:26:7e:58:53:44:5b:11:99:08:c8:
b6:6d:52:cd:68:92:13:f9:08:42:d9:4e:55:b9:b4:f9:e4:b2:
91:ce:37:ed:54:51:3b:82:ae:2f:b2:20:cc:a5:37:3f:09:55:
50:db:b0:0d:8c:53:e5:57:03:08:ee:c2:19:e4:6b:5e:8a:ff:
77:85:20:d3:ef:8f:a2:68:16:8d:cb:74:08:0f:a9:71:cd:fb:
d6:86:7b:a3:7a:15:02:ca:ad:0d:7a:74:89:93:d5:df:00:d5:
9e:28:54:45:fc:3d:38:99:81:42:91:e7:12:95:43:49:25:96:
85:91:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:47:17 2025 by rpki-client