Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R57rUhpbpqrVfqhdc2Am4DD0b-w.roa
File: R57rUhpbpqrVfqhdc2Am4DD0b-w.roa (raw, json)
Hash identifier: JIP/HCOpnGYj4e8JmQb/6NlVNEJZXBZKbZVZfB0X9fQ=
Subject key identifier: 47:9E:EB:52:1A:5B:A6:AA:D5:7E:A8:5D:73:60:26:E0:30:F4:6F:EC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A07BE9C546132011564C7E8575AB29EF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R57rUhpbpqrVfqhdc2Am4DD0b-w.roa
Signing time: Sun 16 Mar 2025 19:43:50 +0000
ROA not before: Sun 16 Mar 2025 19:43:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.58.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 06:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:7b:e9:c5:46:13:20:11:56:4c:7e:85:75:ab:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 16 19:43:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=479eeb521a5ba6aad57ea85d736026e030f46fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:e8:c6:54:67:94:a8:40:72:ec:2a:e9:76:
7d:98:9a:26:dd:c4:86:44:8e:9a:e2:79:75:43:9c:
02:7f:1c:a2:62:d0:cd:63:e7:01:9f:a6:68:30:4a:
fa:ec:21:c9:fa:e1:c2:c8:cc:3c:15:5b:61:13:4d:
71:d5:e9:61:eb:65:1d:0a:41:de:d9:b3:8b:b2:d6:
25:6e:08:ed:b4:30:e2:bc:a2:aa:84:ea:97:f5:3a:
4a:0d:c6:c5:9a:75:bc:b5:e6:94:cb:31:fc:84:50:
ab:94:f5:33:13:e5:00:30:ce:01:5f:5b:5e:08:f7:
18:12:9f:79:2f:dd:e7:dc:d1:5e:51:5d:e4:64:54:
97:dc:f6:b8:d8:0d:95:ed:55:cd:44:4d:ef:0b:f7:
ec:f9:82:52:b4:60:ab:87:4f:58:1a:4a:4a:69:73:
aa:a1:6a:ba:5a:33:98:ed:d0:fe:5c:4e:8c:f0:e7:
5e:ad:11:9b:9f:87:13:30:b2:a5:ab:c7:ec:96:3b:
5a:f5:ab:ce:6a:bb:4c:1f:8f:a7:cb:85:a2:77:88:
5f:1e:41:c5:bb:c3:e6:2f:46:f8:1d:f3:14:cb:60:
aa:a0:c7:24:90:61:8d:54:06:e6:ba:66:1a:21:43:
10:2e:1f:1b:27:04:2b:2b:26:2b:99:83:9a:3b:3b:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9E:EB:52:1A:5B:A6:AA:D5:7E:A8:5D:73:60:26:E0:30:F4:6F:EC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R57rUhpbpqrVfqhdc2Am4DD0b-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.87.0/24
Signature Algorithm: sha256WithRSAEncryption
54:94:25:0b:6d:fd:fd:e4:63:21:ca:2e:29:d3:07:14:18:7b:
8c:67:0e:69:b4:ac:b4:10:1f:46:69:bf:b2:39:fe:15:eb:2a:
6b:7e:26:06:c7:8b:50:b5:2b:d1:c2:66:8c:6d:6a:94:08:91:
90:87:ea:d6:6e:9c:84:71:fe:b6:46:fd:de:05:7e:e1:fa:63:
49:24:e0:e5:d0:65:82:2f:43:82:81:23:ca:02:ef:6e:24:b5:
ba:37:c6:a6:04:14:ac:ed:28:52:ad:9e:5d:74:7a:59:43:6a:
29:9b:24:15:37:28:95:40:f3:f9:d5:98:06:b0:5e:2c:87:6d:
90:8e:96:11:a5:79:44:37:4e:a1:5a:c0:9b:50:03:53:1a:df:
8a:50:b8:d3:26:38:f5:25:22:d8:70:6d:ff:9c:53:21:bd:d9:
d8:e3:50:7b:f0:99:43:ef:05:25:88:e1:48:c0:ec:94:4e:0b:
bf:0a:1c:75:0b:77:05:ce:5c:13:3b:56:af:02:f8:16:e1:c0:
1c:78:6d:f2:7e:bb:81:00:ae:dc:25:ec:c5:dc:1b:e2:f4:f4:
3a:19:fd:ef:3c:f5:c2:80:84:1e:ee:0e:52:10:23:62:91:b5:
d6:eb:0d:15:e4:73:90:9c:97:d2:5d:dd:93:03:d6:a7:cb:57:
48:c8:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:41:29 2025 by rpki-client