Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZOriZCy4wgNmmhfyGisPmBsHeTE.roa
File: ZOriZCy4wgNmmhfyGisPmBsHeTE.roa (raw, json)
Hash identifier: G9rcLqk8qnr3HvbHIk1Xz10pTcE/t8Bhz/hgXEXPjyo=
Subject key identifier: 64:EA:E2:64:2C:B8:C2:03:66:9A:17:F2:1A:2B:0F:98:1B:07:79:31
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01943D19A90735B2EE0A8088A144DCF2E34D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZOriZCy4wgNmmhfyGisPmBsHeTE.roa
Signing time: Mon 06 Jan 2025 19:31:19 +0000
ROA not before: Mon 06 Jan 2025 19:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 31.56.4.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.57.147.0/24 maxlen: 24
31.58.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 06:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3d:19:a9:07:35:b2:ee:0a:80:88:a1:44:dc:f2:e3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 6 19:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64eae2642cb8c203669a17f21a2b0f981b077931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:91:f4:94:ff:05:b7:3e:ff:76:39:4b:ca:1a:
f3:9b:03:13:aa:3c:de:f2:08:5b:79:a1:9a:15:c3:
22:f8:63:b3:42:21:74:51:d3:ca:38:9a:a1:b2:3e:
72:f6:f3:58:d7:fc:9a:42:48:c0:de:73:da:09:da:
38:92:8a:76:5a:00:32:b4:63:27:07:94:53:54:76:
18:4e:30:50:83:32:75:64:16:7b:8e:73:aa:7c:9f:
51:f3:c7:b6:39:b1:d7:e7:b0:f4:86:d5:a6:a8:1c:
6e:10:7b:0b:4f:53:5b:14:fd:ab:08:e7:3b:3b:ae:
9f:63:fc:da:e2:24:c4:74:d0:b7:63:b1:68:63:7e:
f0:17:19:37:7c:d0:dc:c8:5f:d2:d1:f7:fe:05:06:
7a:a1:d3:bd:de:29:05:52:58:3b:19:49:93:ef:b7:
f7:5d:e9:dc:83:92:d1:bf:9c:fc:b7:b5:8b:c0:02:
83:13:5f:61:54:c9:3b:a3:26:78:6b:94:d6:5d:04:
03:f0:ec:84:ef:79:e1:31:89:e0:a1:37:30:d1:a7:
29:86:7f:13:b3:f0:97:06:c9:7a:eb:39:9a:04:9d:
0e:f5:e7:5a:38:f2:99:8f:9e:fc:f6:9c:81:7a:e0:
66:84:9b:b2:65:41:9f:dd:75:34:1f:54:cc:18:98:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:E2:64:2C:B8:C2:03:66:9A:17:F2:1A:2B:0F:98:1B:07:79:31
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZOriZCy4wgNmmhfyGisPmBsHeTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/24
31.56.63.0/24
31.57.147.0/24
31.58.66.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bb:cd:7c:ac:45:0a:7b:e6:ab:72:5e:da:33:01:87:ec:d7:
6c:87:cb:dd:c6:26:d4:47:63:e6:77:ed:f1:b5:b3:15:d5:f7:
b7:ca:b3:bd:51:39:60:ee:33:58:95:43:86:a7:3d:7e:4f:82:
fc:52:8d:7d:67:e0:3d:f0:02:73:09:d3:15:ec:6c:5a:0a:05:
1f:97:2b:7e:2c:fc:0d:24:76:99:1f:cb:0a:3d:77:b4:5e:6a:
1d:24:b8:79:7b:20:b2:71:0f:3d:01:e0:0f:71:15:c9:de:7d:
21:8c:fa:c3:51:37:5b:d4:65:51:20:1a:dd:a0:b7:ea:02:89:
f0:f1:9c:33:d8:d0:62:1c:73:f1:ac:3d:55:1b:03:d1:5b:e4:
76:55:81:83:36:4b:e6:37:29:d1:9a:36:ef:4a:ec:eb:6a:3d:
03:33:73:9c:f9:9c:bc:91:7f:03:1e:98:d7:89:5f:5c:cc:60:
00:4d:47:c3:a3:1b:f8:dc:39:eb:7a:ab:fa:23:29:7f:fe:c4:
e5:55:b3:a1:9e:68:65:d6:5c:28:76:cb:05:ae:26:86:cd:3d:
e8:db:f0:08:f5:ee:2d:57:74:bf:02:1c:ae:07:ba:cc:cd:3a:
f4:8b:e4:90:34:90:e2:86:36:46:45:57:fb:6d:1b:d1:32:e7:
15:81:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:33:30 2025 by rpki-client