Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zf1SqH4x7Ng0D7G_NUtVLB11ZWs.roa
File: Zf1SqH4x7Ng0D7G_NUtVLB11ZWs.roa (raw, json)
Hash identifier: DJFOkHEakqleczeWEPSV88zhnqU6TrZql9VBKggPsKA=
Subject key identifier: 65:FD:52:A8:7E:31:EC:D8:34:0F:B1:BF:35:4B:55:2C:1D:75:65:6B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A2D766A3C7D72126BFC0F5D13A27D64D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zf1SqH4x7Ng0D7G_NUtVLB11ZWs.roa
Signing time: Mon 17 Mar 2025 06:43:00 +0000
ROA not before: Mon 17 Mar 2025 06:43:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 31.56.87.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.57.65.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.59.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:d7:66:a3:c7:d7:21:26:bf:c0:f5:d1:3a:27:d6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 17 06:43:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65fd52a87e31ecd8340fb1bf354b552c1d75656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:8a:57:96:d5:d0:03:09:02:ad:71:42:fa:
4b:de:ae:f7:15:3f:98:e0:c3:79:da:12:c0:e9:e2:
20:ae:0c:e4:b6:33:c7:9d:23:02:ab:4d:86:b1:43:
4e:4a:2b:e4:61:80:5c:85:47:69:f7:ac:5b:ca:6c:
16:09:b3:d2:a6:36:0b:7b:ba:a2:f1:7b:2f:01:2d:
48:03:d0:5e:c3:fb:cc:5a:0d:cf:59:d2:e6:17:7b:
b0:29:81:55:f9:ca:c4:34:10:a6:08:d1:91:fe:00:
ed:5f:1d:d9:01:b9:9b:1d:e7:8c:eb:60:0e:83:89:
60:ed:21:45:53:ad:fc:ed:e5:cd:29:b6:e4:fc:c8:
14:85:a3:95:18:29:41:5a:23:d2:16:7d:5e:e1:1d:
2e:a5:36:38:6c:45:84:93:50:6b:15:f1:81:e1:24:
f0:05:8d:62:32:43:21:84:8a:8f:a5:89:27:b0:58:
a7:95:77:46:c6:24:30:4e:c0:bb:78:d0:fd:63:85:
44:bb:a3:ed:8f:1a:9f:ec:9c:bc:72:ae:e3:92:7f:
58:2c:ec:7b:9d:a8:9c:ae:be:fd:e8:8e:ae:4b:01:
d5:29:13:dc:b9:02:f4:da:ad:b5:62:21:ec:16:db:
be:0a:5e:73:88:f0:53:eb:74:5d:93:15:4e:e3:dd:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:52:A8:7E:31:EC:D8:34:0F:B1:BF:35:4B:55:2C:1D:75:65:6B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zf1SqH4x7Ng0D7G_NUtVLB11ZWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.87.0/24
31.56.122.0/24
31.57.65.0/24
31.57.222.0/23
31.59.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:15:68:dd:e8:1c:22:55:87:10:87:31:8b:5f:0e:fe:49:1e:
d4:3d:64:bb:8c:d3:00:73:a1:27:18:fb:6f:cc:fe:c4:b4:bc:
d6:f6:56:13:c7:05:78:48:2d:20:34:5e:e9:45:c2:b8:2c:f4:
71:6f:4b:03:78:38:b6:a4:49:8f:a5:19:66:3c:11:b4:6c:28:
e5:fe:36:6b:8b:46:2a:8c:eb:5c:c3:2c:21:15:2f:64:d7:d0:
ac:93:cd:4d:e9:33:ce:33:21:24:4f:fe:56:52:42:04:86:fd:
51:36:55:c3:55:9f:0c:6e:bc:f6:04:f1:5d:fd:3c:f8:ad:cf:
bf:d6:f5:16:01:a5:24:fd:e1:79:c0:12:91:e9:5b:7c:cd:07:
45:03:70:ad:9c:6e:fa:b1:9c:f0:e6:00:56:18:45:64:91:09:
d0:38:20:bb:bd:32:25:77:0f:f8:05:8c:3c:39:1f:9d:cd:cc:
42:db:d9:45:fb:6a:57:c7:36:0c:48:72:26:85:1f:df:fc:65:
3e:17:24:24:b8:b8:3e:3a:60:59:57:2c:fd:62:1f:5e:28:40:
28:a2:84:7f:25:ff:83:50:37:07:16:9c:78:0c:dd:15:d6:41:
9d:ae:69:31:43:5f:b4:68:04:20:58:d9:c8:2f:40:43:a6:97:
2e:98:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:43:38 2025 by rpki-client