Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c8U1-Icmy_ptECx47UwFK6TOFLI.roa
File: c8U1-Icmy_ptECx47UwFK6TOFLI.roa (raw, json)
Hash identifier: q2CDC+5hV320gG/Y+52iUufPYiwb2sxvcpBcZq1Voxo=
Subject key identifier: 73:C5:35:F8:87:26:CB:FA:6D:10:2C:78:ED:4C:05:2B:A4:CE:14:B2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428234EBB1C96C953636A6A8CACEB7031
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c8U1-Icmy_ptECx47UwFK6TOFLI.roa
Signing time: Thu 02 Jan 2025 17:49:50 +0000
ROA not before: Thu 02 Jan 2025 17:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.58.147.0/24 maxlen: 24
31.59.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 15:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:4e:bb:1c:96:c9:53:63:6a:6a:8c:ac:eb:70:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73c535f88726cbfa6d102c78ed4c052ba4ce14b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:7c:46:9e:d7:b4:63:4c:a8:b7:63:2c:f1:
34:14:6b:bc:d7:d3:69:2d:4c:6f:e4:a4:c2:00:70:
62:73:bd:14:1b:ee:bf:60:aa:2d:2a:2f:05:1c:e5:
25:de:45:1d:24:a3:29:c3:eb:38:ec:9f:c4:40:3a:
2b:1d:00:fa:e4:c0:14:d5:85:3b:57:1d:e7:c3:d5:
97:63:f7:b6:04:4f:3e:2d:ad:12:60:ea:fb:11:bf:
aa:86:44:3f:e2:50:b7:77:0a:7c:67:07:8c:b6:e4:
8e:5b:fd:a0:e9:5a:be:a1:f7:86:aa:7d:96:4f:db:
1d:c3:dc:29:0f:51:c7:6f:70:b7:4a:8a:70:af:ab:
46:4e:d0:aa:a8:d5:fb:95:56:97:04:70:30:b9:95:
c4:33:d7:d4:af:5a:5e:45:d6:03:f5:44:9c:8b:e4:
56:12:88:df:c4:01:f2:75:c3:5e:b9:e1:3b:0b:14:
dc:be:22:b8:aa:b4:7c:ae:64:2c:05:32:c6:dd:34:
0e:08:e5:89:da:18:20:01:31:fe:f5:c2:c9:64:36:
9f:13:99:7a:1f:72:96:9c:bb:41:47:05:89:2d:8e:
84:06:79:dd:f6:29:d5:9b:01:e7:96:24:55:f9:58:
d5:a0:39:60:38:ec:29:46:b4:a1:78:aa:e0:c1:c9:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:35:F8:87:26:CB:FA:6D:10:2C:78:ED:4C:05:2B:A4:CE:14:B2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c8U1-Icmy_ptECx47UwFK6TOFLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.58.147.0/24
31.59.107.0/24
Signature Algorithm: sha256WithRSAEncryption
16:28:28:14:b1:cd:b9:e3:35:aa:0f:9f:81:c5:b0:07:b9:d5:
e3:c2:c9:f1:97:24:c9:93:83:c1:92:21:33:7a:6f:a9:76:19:
0b:35:20:cc:37:1b:c0:2e:6f:a1:08:8f:82:cc:e8:c3:48:61:
f4:e8:84:7d:0f:6d:d5:73:37:96:2a:2a:a5:65:d2:10:11:80:
08:f6:23:b7:63:b7:6c:2d:c6:30:0f:62:31:82:44:26:28:73:
4c:88:12:08:47:4e:4a:c8:39:18:e0:a9:9c:ed:c1:23:6a:17:
ec:cb:e0:a8:38:08:47:4a:f1:86:a7:4a:d8:16:03:6a:4b:31:
44:b4:65:1e:af:9f:a0:52:bc:94:c3:7b:e5:8f:eb:7a:44:a9:
30:96:2f:5b:33:f3:87:d8:c6:3b:02:6a:16:36:1a:d9:bf:2d:
ae:94:35:bc:f1:2f:2b:b8:44:66:3e:cc:b2:22:84:25:63:27:
4d:28:9d:89:75:63:bc:9b:8d:26:b5:c6:33:b6:38:79:d9:1b:
18:43:d1:a9:97:2a:63:42:0e:bd:45:af:90:1d:79:f0:bb:ed:
f6:1d:cd:5c:be:43:d2:81:04:39:27:d0:da:94:ae:27:d9:bd:
14:11:26:f5:77:93:21:54:fe:40:36:13:d0:97:ab:88:db:59:
ff:dc:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:28:33 2025 by rpki-client