Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JSlnweA_X2xRGYSNPEussikIT2o.roa
File: JSlnweA_X2xRGYSNPEussikIT2o.roa (raw, json)
Hash identifier: cxoRM9wN/WkE7vHcQVVxEOywb+LQkSGNGnKwFDqu+7s=
Subject key identifier: 25:29:67:C1:E0:3F:5F:6C:51:19:84:8D:3C:4B:AC:B2:29:08:4F:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195C977B99B4BD99AE3EB6D1775440C360A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JSlnweA_X2xRGYSNPEussikIT2o.roa
Signing time: Mon 24 Mar 2025 18:43:41 +0000
ROA not before: Mon 24 Mar 2025 18:43:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401190
IP address blocks: 31.57.212.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 25 Mar 2025 06:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:77:b9:9b:4b:d9:9a:e3:eb:6d:17:75:44:0c:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 24 18:43:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=252967c1e03f5f6c5119848d3c4bacb229084f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:9d:c4:2d:a1:aa:4a:5f:4e:ad:da:80:47:
e3:39:71:df:c6:ca:9e:d3:0b:4c:a3:98:cd:6f:5a:
f1:8b:46:f9:f6:ee:42:9b:8a:10:0d:4e:60:d7:89:
c9:f6:b8:a7:a1:20:05:fe:0f:15:b7:39:e6:3f:8c:
08:14:84:4f:3f:b8:49:db:c8:1c:4e:b0:c0:ea:b5:
ef:64:c4:4e:04:65:d5:72:fd:d8:71:3f:51:aa:18:
8f:92:44:7a:41:66:2b:e4:cc:9d:d9:c4:1c:b9:28:
3b:fb:b4:60:6a:f2:33:4e:04:1b:69:9b:2a:ea:dd:
a0:25:8c:ff:bf:fa:ec:b5:82:b8:03:2a:26:14:dc:
81:3f:eb:5b:77:ac:a1:ed:f7:c5:98:1d:df:69:2f:
f8:de:04:d7:c2:85:96:04:6a:65:39:6c:d1:db:fe:
3f:c5:6b:7a:e3:79:39:34:17:05:3a:ce:73:24:2c:
63:5d:2d:09:f7:9f:18:7e:ef:06:82:71:fd:32:cc:
4c:14:0e:5f:23:27:e1:e7:9a:1d:54:80:6e:5f:ff:
10:10:e8:fe:18:c9:9f:79:06:75:f6:2a:b8:6d:a5:
23:e2:28:c5:bf:83:8e:a7:96:9d:f9:4d:05:45:ee:
8b:b0:06:a3:11:b7:04:b0:0b:39:28:be:5f:50:21:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:67:C1:E0:3F:5F:6C:51:19:84:8D:3C:4B:AC:B2:29:08:4F:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JSlnweA_X2xRGYSNPEussikIT2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.212.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:6d:46:65:df:5c:ab:10:c9:79:bb:ce:09:a8:27:3c:e4:2a:
8e:e9:18:0e:52:f7:ec:6e:c5:74:4f:54:ff:f8:b6:a8:4d:5e:
73:f6:8c:57:92:94:3c:32:c3:74:12:e0:a2:b3:cc:a5:dc:88:
b0:b0:a4:25:e2:2d:be:fb:dd:9d:51:fb:f8:07:f4:e9:05:b8:
a7:dc:5b:e3:21:87:4a:8d:48:43:57:21:5b:a3:32:a3:90:dc:
f4:8a:57:17:13:a5:a2:43:d3:87:7d:63:d9:33:38:f0:2d:06:
22:e9:43:bf:3f:53:e0:4c:6b:bc:7a:03:0a:c8:f6:5f:15:01:
15:22:01:d1:98:d5:d1:e4:e1:ab:f3:ea:14:5c:b9:35:1c:c1:
d9:55:dc:82:74:fd:09:7a:4a:f3:90:23:a2:98:3d:ee:38:a4:
af:53:c0:18:bd:f1:eb:f7:06:e6:1f:ca:73:2c:61:69:1e:bd:
d7:a7:7c:76:aa:aa:c8:69:8e:17:68:b9:a8:31:37:54:eb:4c:
07:84:2a:21:1a:b7:a0:9f:3a:05:42:d6:9f:bf:8f:a6:35:aa:
17:d0:d0:47:72:46:99:3b:4f:c0:07:ec:29:30:86:8c:f9:a5:
9f:35:7b:57:44:c0:71:7b:e7:8e:2d:de:75:44:58:c3:22:08:
e5:21:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:58:43 2025 by rpki-client