Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HPn2UmxNxAEd0ZirqlvSx01ZxAg.roa
File: HPn2UmxNxAEd0ZirqlvSx01ZxAg.roa (raw, json)
Hash identifier: moZXjjMxLgKDtG/6ai0prICBnCTwuTSFkEAMbcEO7ug=
Subject key identifier: 1C:F9:F6:52:6C:4D:C4:01:1D:D1:98:AB:AA:5B:D2:C7:4D:59:C4:08
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194F8A494227800D6CA85178F89C083E796
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HPn2UmxNxAEd0ZirqlvSx01ZxAg.roa
Signing time: Wed 12 Feb 2025 05:32:02 +0000
ROA not before: Wed 12 Feb 2025 05:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.57.129.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 19:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:a4:94:22:78:00:d6:ca:85:17:8f:89:c0:83:e7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 12 05:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cf9f6526c4dc4011dd198abaa5bd2c74d59c408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:d3:35:35:f3:d4:79:ed:e7:13:36:b0:f9:
94:34:34:43:62:7e:03:2c:7e:02:4b:dc:e1:1d:46:
d8:1d:59:50:b5:fe:d8:91:13:5e:bf:af:84:9c:ab:
ba:13:2c:49:e7:8f:33:2f:bb:ff:c2:59:9a:67:a6:
e7:0d:80:fc:f3:2b:06:04:8c:67:77:a6:39:cf:1f:
3b:8c:f9:9a:a6:6f:38:18:ba:41:1d:a4:b6:4b:3b:
78:76:b2:5f:6c:af:de:ef:25:9b:fd:c8:56:b1:e7:
2c:bc:25:72:31:29:f9:81:09:20:d2:1f:a3:04:7f:
ef:f6:75:ee:c0:e8:e7:e4:3c:7f:d8:73:02:0e:18:
ce:66:3d:f0:98:d3:49:e8:d8:15:82:6f:ff:b1:d2:
c3:18:81:1c:68:d7:8e:93:9e:c8:5e:e9:09:6d:0f:
90:11:fb:44:83:a1:a8:3a:0a:db:1e:e5:48:a0:bc:
c1:9b:3b:6f:64:77:bd:e2:e7:0d:86:26:88:76:61:
e1:43:36:9f:5b:83:cb:65:4f:c4:9e:5e:a1:c8:9d:
2c:8f:08:f8:19:a4:68:21:f5:87:3b:c3:ba:0c:2a:
4a:8b:9f:47:39:dc:3f:5d:75:36:01:4d:16:75:78:
4a:8b:b1:a9:8e:9a:28:33:fa:78:79:aa:3b:64:25:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:F6:52:6C:4D:C4:01:1D:D1:98:AB:AA:5B:D2:C7:4D:59:C4:08
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HPn2UmxNxAEd0ZirqlvSx01ZxAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.129.0/24
31.57.206.0/24
31.58.90.0/24
31.58.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a8:de:50:df:92:c1:64:0e:b6:7a:a5:7d:ac:ba:62:66:bc:
f1:3a:51:b8:95:99:cb:47:74:13:d9:ef:22:ee:40:3d:14:13:
53:38:93:62:65:30:ab:66:27:7c:2a:f3:9d:ad:f5:e0:a6:3c:
48:94:25:20:49:3a:d5:6f:e7:27:ea:e7:77:40:2e:a3:4d:ff:
ad:61:b0:af:53:8e:ef:1c:84:5f:99:f0:53:ae:d5:5e:b1:94:
18:8f:63:d8:9c:ff:fe:c1:aa:cd:45:26:3a:71:df:96:14:73:
5c:9b:5a:39:06:31:7d:97:b0:da:aa:86:68:09:76:c3:74:dd:
5b:cd:ca:86:c7:08:dc:74:16:27:a1:44:42:0f:77:5d:7d:06:
bb:65:45:41:10:a3:e8:ec:d9:73:c5:65:da:2a:a4:6c:6b:4c:
67:3e:b1:fd:b0:a5:5d:38:a5:dc:a3:6b:26:3c:17:59:ca:57:
51:ac:7e:ef:a8:41:e0:01:19:01:4b:ed:20:ba:89:90:51:76:
90:7d:1e:d3:7e:38:15:80:47:9b:03:cd:b0:ed:6a:14:cc:02:
0a:cf:5d:1f:ad:60:b4:3a:bd:f2:77:14:51:af:81:7a:b9:58:
54:0b:13:e5:ab:93:cf:4c:e5:2c:e2:bf:96:63:d3:b9:06:07:
50:ac:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:24 2025 by rpki-client