Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LU4E8RElxk1rse9fo2OqzL_mLpk.roa
File: LU4E8RElxk1rse9fo2OqzL_mLpk.roa (raw, json)
Hash identifier: HN0+L1ap4C09COrWpFi4Vb6ymRFkFk45gLaTH2/ozWk=
Subject key identifier: 2D:4E:04:F1:11:25:C6:4D:6B:B1:EF:5F:A3:63:AA:CC:BF:E6:2E:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193A609398B5DB001BE8EC00E796E3B2604
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LU4E8RElxk1rse9fo2OqzL_mLpk.roa
Signing time: Sun 08 Dec 2024 11:30:42 +0000
ROA not before: Sun 08 Dec 2024 11:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214083
IP address blocks: 31.57.190.0/24 maxlen: 24
31.58.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a6:09:39:8b:5d:b0:01:be:8e:c0:0e:79:6e:3b:26:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 8 11:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d4e04f11125c64d6bb1ef5fa363aaccbfe62e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:4e:df:72:ae:cc:79:01:3b:d8:75:b5:a1:
c4:42:73:42:89:50:55:58:a4:94:f8:7e:5f:95:1a:
e1:5d:28:a6:37:23:20:aa:c2:66:43:bf:48:ea:f2:
4b:38:1d:cf:c9:5b:0b:9e:33:36:92:08:69:61:29:
31:fb:19:f4:f2:0d:9f:c5:9c:79:a7:d1:41:f1:61:
e2:af:47:65:37:04:e3:b5:95:e1:a7:17:ef:dd:da:
1a:b9:44:9f:20:76:f2:46:0c:5f:43:d5:36:b7:17:
28:74:0c:4a:c5:ec:c6:27:ec:f7:8a:59:be:71:5b:
5f:25:90:e6:a5:5c:6e:f1:ca:64:83:de:6b:c2:07:
28:a8:ca:89:12:df:63:7a:c0:62:48:58:49:90:ce:
41:bd:d6:d8:fd:88:98:6f:76:82:90:2d:bb:35:03:
68:4f:ac:64:e3:9f:61:fc:8a:e3:48:7c:b9:34:23:
8b:7a:b1:87:0d:59:4c:78:09:fb:f8:98:13:fd:85:
69:a3:85:1b:d7:38:13:4b:f2:7a:38:9e:c0:20:da:
64:20:6f:5e:fc:bb:ac:b9:e4:28:f9:77:ed:6e:91:
c0:e0:d2:94:a8:6e:a0:a5:7a:ba:bd:f6:5c:d3:2b:
69:e1:4d:bd:bb:15:d3:fe:4e:72:cd:0a:a6:73:9f:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:04:F1:11:25:C6:4D:6B:B1:EF:5F:A3:63:AA:CC:BF:E6:2E:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LU4E8RElxk1rse9fo2OqzL_mLpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.190.0/24
31.58.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e3:7d:32:4d:26:e0:9b:eb:f6:13:1d:85:2b:10:80:c4:e8:
34:9a:6e:30:2b:68:d9:a4:8c:92:8c:cf:99:35:b1:6d:fc:68:
71:d2:e3:72:eb:a0:a8:ff:39:78:3f:b9:6d:61:bc:5e:5a:49:
7a:8f:7d:ef:12:a9:28:92:8b:7f:73:7a:a3:d6:59:b6:d9:e8:
17:99:9e:00:e7:32:eb:1a:b8:46:3f:11:9c:6c:9a:da:41:8e:
c5:f6:75:46:4f:4f:a6:57:29:7e:b7:b6:50:a8:e0:7a:e0:f8:
eb:4b:4c:a8:21:c1:ce:f9:cb:9b:8d:20:b8:07:b2:e7:77:5d:
bf:ce:8f:3e:83:b9:f9:77:80:b8:ae:6e:ff:88:70:04:8c:eb:
c1:a8:be:93:d4:9a:a4:fd:dc:b3:0a:ea:5a:b0:c9:74:8c:05:
af:5e:d6:2f:a8:e4:d2:1e:f6:e9:84:3f:19:2b:be:1e:a1:44:
18:80:13:d1:53:d2:44:dc:c7:9e:db:72:99:b1:68:0e:99:00:
2c:00:9b:f0:bd:c1:af:32:33:92:15:d8:98:cd:74:4c:b4:08:
d3:a7:0f:01:44:92:d6:bd:8c:59:2a:a5:65:23:c2:d2:43:a6:
95:96:e8:df:2f:34:7d:69:6e:5d:4e:9f:05:f3:1c:99:fd:84:
fb:c9:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:52 2025 by rpki-client