Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UHHFNOcTeXT4LEBi3mmivRuRy3s.roa
File: UHHFNOcTeXT4LEBi3mmivRuRy3s.roa (raw, json)
Hash identifier: CBXK7+06eCN1fFrzaFYiDEdORhELmBz91FYks1vDXSU=
Subject key identifier: 50:71:C5:34:E7:13:79:74:F8:2C:40:62:DE:69:A2:BD:1B:91:CB:7B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E1ED1E32AD15E0B22E00CCA2C2817F80
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UHHFNOcTeXT4LEBi3mmivRuRy3s.roa
Signing time: Fri 07 Feb 2025 19:40:00 +0000
ROA not before: Fri 07 Feb 2025 19:40:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 31.59.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Feb 2025 17:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:ed:1e:32:ad:15:e0:b2:2e:00:cc:a2:c2:81:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 7 19:40:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5071c534e7137974f82c4062de69a2bd1b91cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:f8:9c:60:08:bc:0a:e1:09:6f:26:e8:e3:
05:55:91:ee:56:5c:1c:87:37:98:dc:89:f6:5a:f5:
f2:d9:a9:e2:e4:62:d0:88:f9:d5:91:07:02:4f:1e:
b9:0f:51:50:2d:b1:79:fa:43:b0:90:c0:2f:8f:2f:
89:cb:cf:a3:39:4e:36:c9:1c:e0:f0:18:ca:3d:6c:
29:71:c9:ae:02:05:54:fa:1d:51:c2:4f:f2:53:4b:
44:49:a0:a4:0c:96:04:2f:e8:33:4a:d3:e3:fd:c4:
d8:42:bd:d7:f0:cc:c1:51:5f:53:a2:79:50:71:8b:
06:c9:c3:ae:21:70:d7:0f:3b:10:d3:67:77:11:7c:
f2:2b:7c:05:21:6b:98:fd:51:71:d2:c3:02:17:ac:
75:9f:21:3c:c8:47:b7:cb:50:1d:9d:b0:45:b4:8e:
71:94:6c:9c:fe:b0:03:c9:6c:15:52:62:b3:7d:db:
bd:43:4a:fc:0f:e7:3d:16:1c:df:38:7b:a9:21:49:
30:50:db:6b:f0:8c:0e:89:b3:69:e2:36:f3:1c:58:
72:d4:ef:67:72:dc:f9:a6:ae:30:49:63:4d:ac:da:
31:e9:5d:88:3e:3d:44:10:af:6e:64:7e:34:9f:77:
9d:ee:a0:ea:ab:50:36:61:29:1c:a2:91:f7:7c:c3:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:71:C5:34:E7:13:79:74:F8:2C:40:62:DE:69:A2:BD:1B:91:CB:7B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UHHFNOcTeXT4LEBi3mmivRuRy3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.41.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ab:d2:41:9e:1d:58:b9:03:16:6e:c1:85:eb:78:82:fe:68:
42:03:43:2b:fe:57:3d:61:38:bc:f1:4d:e1:71:71:33:65:68:
1b:68:90:5d:26:ff:c7:ec:94:5a:bb:09:7e:05:7c:fb:83:d8:
8f:9d:be:17:6b:6f:72:bd:27:34:cf:ea:a3:43:8b:08:d2:77:
6f:9b:46:d2:17:02:9c:1d:3e:27:1c:53:0d:63:3e:6c:8f:86:
1d:6b:6d:ae:17:2a:3f:11:59:07:26:e0:8d:17:5c:72:50:b1:
89:0a:4e:48:1c:d5:bc:b8:c3:98:63:fc:75:ee:c7:dc:c3:bc:
23:b0:fd:9e:99:69:34:90:16:6f:8f:fe:1d:e4:9d:9e:c5:c7:
35:71:9d:9f:ae:66:ee:ee:11:c7:88:d2:d1:17:f8:47:0c:de:
98:de:30:28:75:6c:75:4c:c3:1a:dd:00:17:6d:3c:6e:8f:ee:
63:3e:58:5b:ea:5d:d1:b6:cc:90:d0:0e:38:6d:f8:ad:0f:06:
03:8b:bc:08:41:90:cc:7e:b7:08:c1:86:01:eb:31:fa:69:3c:
c6:30:92:8c:11:4e:e5:bf:34:df:58:5e:0c:9e:85:83:7c:b8:
ea:27:cd:12:de:ae:91:37:6d:37:e5:5f:f1:32:4e:61:40:9f:
62:15:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:06 2025 by rpki-client