Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DAdqVzGfneN7lzwvTqhzN_K_2io.roa
File: DAdqVzGfneN7lzwvTqhzN_K_2io.roa (raw, json)
Hash identifier: qq3j3+YECfo7kbOe0uZvu2ftcNyxs/UjRvLPPng5C1c=
Subject key identifier: 0C:07:6A:57:31:9F:9D:E3:7B:97:3C:2F:4E:A8:73:37:F2:BF:DA:2A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A83B021EA69E33464D86495C93F5B40E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DAdqVzGfneN7lzwvTqhzN_K_2io.roa
Signing time: Mon 27 Jan 2025 14:47:07 +0000
ROA not before: Mon 27 Jan 2025 14:47:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 31.58.68.0/22 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.59.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 14:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:3b:02:1e:a6:9e:33:46:4d:86:49:5c:93:f5:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 27 14:47:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c076a57319f9de37b973c2f4ea87337f2bfda2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:57:5a:bc:9c:03:43:a7:e0:4b:1e:c8:00:
c2:16:18:0a:11:7b:2e:e3:10:71:a7:de:1d:02:95:
2b:dc:a5:ba:06:83:4a:98:35:33:08:f7:bb:7e:0f:
13:f5:a8:2b:2d:45:95:e3:49:0e:cb:76:8c:a4:16:
c8:f5:72:5c:49:96:0b:14:62:32:47:2f:d0:b4:d3:
e4:1a:00:42:1f:d3:0a:c4:e1:f2:dd:b9:14:4d:00:
48:95:88:f7:ab:1a:87:fd:e5:cf:b7:e1:14:57:2a:
ff:45:8c:93:78:ad:b0:0e:3c:a8:e2:21:ca:43:84:
5a:60:4e:80:31:47:25:28:44:1a:b2:f2:31:54:4a:
8b:2c:ad:42:5a:1b:68:20:51:21:7c:6c:50:60:f4:
32:e8:d8:e5:1c:8e:5d:ad:78:2f:bd:f7:13:2a:58:
fa:41:43:53:37:c2:49:5a:54:23:33:4a:ca:d5:bd:
89:ca:f1:88:21:63:8b:6c:f5:0e:66:7a:18:8f:44:
46:4a:3c:df:bb:65:ae:45:8f:25:3b:ce:05:f8:dd:
a2:ff:40:10:30:c7:af:fd:08:08:03:2d:03:4a:c6:
cd:22:5f:34:83:13:8e:15:72:f0:14:c9:de:29:39:
e8:48:6b:0a:b3:b7:c9:30:9a:12:b6:33:b6:ca:fb:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:6A:57:31:9F:9D:E3:7B:97:3C:2F:4E:A8:73:37:F2:BF:DA:2A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DAdqVzGfneN7lzwvTqhzN_K_2io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.68.0/22
31.58.76.0/22
31.58.84.0/22
31.59.29.0/24
Signature Algorithm: sha256WithRSAEncryption
70:00:a3:54:94:64:73:44:05:86:a4:32:69:4d:a6:32:c2:03:
d4:70:13:41:a2:e0:02:07:ec:ab:8a:17:3f:dd:e0:23:b2:71:
bc:64:27:41:3c:d0:d5:8f:c8:45:de:90:15:c2:d2:b9:e3:43:
ce:df:df:41:b9:ee:9f:b1:7f:88:19:93:15:30:65:84:ba:3a:
ff:3f:2b:b8:a9:f9:ff:e6:ae:cc:56:22:88:76:84:9c:22:5e:
a1:be:30:cd:5b:66:89:6e:fb:9d:55:81:4f:7f:67:ea:75:66:
7e:31:1a:d6:2b:25:fa:7f:c0:62:c1:dd:8e:ab:09:f5:1b:03:
19:9f:ac:f8:8e:49:bf:89:c8:24:ab:c5:f5:bd:75:97:be:1b:
6a:2d:d0:30:53:68:f4:db:70:dc:4a:c1:fd:b9:9e:a1:d9:41:
c8:54:be:54:1e:05:de:dc:f6:ef:10:69:f5:55:e2:86:eb:13:
01:59:8e:d0:8b:18:21:f9:bd:74:f9:69:ff:d6:56:1b:26:17:
ae:28:aa:80:47:55:8f:bf:95:aa:92:3a:64:14:fe:9e:23:52:
fd:15:89:c4:a6:41:f5:54:59:bc:63:82:66:33:56:e1:3e:37:
67:27:a0:35:90:9e:ee:0f:70:6b:73:3f:40:7b:23:91:c4:03:
c3:91:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:31:38 2025 by rpki-client