Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_462cSIZmnkbMujDnXGRZB_2YlQ.roa
File: _462cSIZmnkbMujDnXGRZB_2YlQ.roa (raw, json)
Hash identifier: 7jwSmTsYCS4mPJQo7FMxexWslfKgCwPd5wmXwbgMEls=
Subject key identifier: FF:8E:B6:71:22:19:9A:79:1B:32:E8:C3:9D:71:91:64:1F:F6:62:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01956728786332363D41CE474CE5ED8F36D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_462cSIZmnkbMujDnXGRZB_2YlQ.roa
Signing time: Wed 05 Mar 2025 16:34:20 +0000
ROA not before: Wed 05 Mar 2025 16:34:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26737
IP address blocks: 31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 19:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:28:78:63:32:36:3d:41:ce:47:4c:e5:ed:8f:36:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 5 16:34:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff8eb67122199a791b32e8c39d7191641ff66254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:40:c4:bc:21:7e:35:93:a5:19:16:2e:18:
81:d4:04:b9:d8:fd:9d:6a:c7:ce:28:6f:9d:7e:4f:
75:3e:4e:d7:bf:4d:8a:7f:e9:63:0a:ff:3b:e8:a6:
a0:0b:7b:04:76:c2:2d:e2:dc:11:c0:d2:53:e6:48:
e0:f4:9b:8e:4a:51:fe:c8:b4:37:ea:3b:b7:35:b0:
19:9f:b3:9c:12:7b:1f:62:69:03:fc:2b:36:8e:4e:
cc:a6:5a:14:86:0b:b0:88:0a:ab:68:42:70:59:0b:
b3:f2:ff:58:40:58:17:1b:c5:a5:50:ab:a7:c8:1a:
00:c2:30:3a:9a:3b:e4:33:dd:78:ad:a1:64:94:27:
50:23:75:83:29:08:f8:85:4f:d8:bc:b2:8f:cc:c8:
4b:9e:9e:ed:7b:84:d2:0c:f3:59:02:0e:83:8d:71:
b1:3e:14:d8:78:b9:75:8d:60:a5:11:0e:76:10:e7:
c2:2d:48:c4:f8:4e:3f:18:cf:5d:e4:d5:8c:dc:7c:
82:63:55:86:2a:ee:e9:a0:fa:3f:ab:09:02:b7:e2:
85:38:6a:36:0e:5b:19:47:cf:9e:b5:ce:48:b2:6b:
7f:d2:ae:b3:59:fe:24:2b:d3:20:df:6b:9f:11:eb:
24:37:18:4d:5a:78:17:be:60:af:12:98:3f:7d:4b:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:B6:71:22:19:9A:79:1B:32:E8:C3:9D:71:91:64:1F:F6:62:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_462cSIZmnkbMujDnXGRZB_2YlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
Signature Algorithm: sha256WithRSAEncryption
82:21:51:97:b6:b1:47:df:84:08:03:f8:06:54:df:17:64:81:
49:5f:cd:c8:26:fd:d3:a4:ba:f7:aa:bd:71:14:3b:7c:ab:f6:
51:76:37:1f:45:80:f6:49:b3:9d:69:9c:f4:da:83:74:48:52:
8f:77:ea:01:05:66:06:a3:f6:fc:bb:6d:ff:50:0b:72:17:c7:
2a:26:46:4d:34:16:77:02:c5:8e:ef:12:64:80:06:0b:f6:56:
01:45:ad:6c:21:2d:93:aa:68:09:c7:67:fd:41:8a:da:7b:61:
f4:a6:0e:4d:11:64:30:67:48:55:00:c9:64:fc:95:07:dc:e8:
7c:4d:64:14:03:0a:2b:f1:df:c8:37:c1:e6:4f:a4:0e:57:49:
00:0b:93:94:39:12:a5:c8:95:0c:3d:84:38:cb:ee:ee:e2:83:
f0:37:1f:49:23:5d:58:17:94:bd:de:6b:e5:0b:42:cb:57:83:
72:bf:2b:fa:14:c7:a5:d8:ef:39:f4:3b:7f:be:92:92:4c:29:
10:97:0f:76:f6:38:3e:7a:af:96:bd:af:45:b1:57:58:d0:99:
e5:91:5e:37:2b:65:04:6e:62:e4:a1:2c:9d:cc:f1:6a:40:a7:
96:28:63:78:79:50:fb:8b:aa:2d:ee:4d:e1:f2:4f:00:6f:83:
49:82:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:40 2025 by rpki-client