Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cViCrMBqlfMVsI9o2jiZUQIEp0M.roa
File: cViCrMBqlfMVsI9o2jiZUQIEp0M.roa (raw, json)
Hash identifier: Rrdpf4QToTxXLERErAQTlh68AI03xv+8dBsDI6iHlaY=
Subject key identifier: 71:58:82:AC:C0:6A:95:F3:15:B0:8F:68:DA:38:99:51:02:04:A7:43
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193DE40BA9B1CEB6C869AFE4960EEECCA65
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cViCrMBqlfMVsI9o2jiZUQIEp0M.roa
Signing time: Thu 19 Dec 2024 09:30:04 +0000
ROA not before: Thu 19 Dec 2024 09:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 31.58.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:40:ba:9b:1c:eb:6c:86:9a:fe:49:60:ee:ec:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 19 09:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=715882acc06a95f315b08f68da3899510204a743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:2f:cc:3b:3e:5b:27:0c:51:ce:fd:13:6c:
e4:d5:1a:49:ec:85:c1:67:d1:0d:8d:a5:f8:92:e0:
52:48:5c:33:78:6a:23:de:33:05:1d:0a:ac:e6:66:
5d:24:3e:ea:62:2c:d2:c5:df:90:ff:23:3d:75:ad:
a1:27:07:2e:85:ff:e2:63:57:8d:19:16:ba:e9:d0:
d7:39:c3:5e:31:cd:d9:26:52:b7:b4:64:1d:b8:13:
60:c6:1a:f3:0d:ce:e5:3e:d4:d1:c8:a0:a2:1d:2f:
27:46:7d:3a:37:ed:16:38:1b:49:9a:2c:84:a6:38:
4e:00:32:84:b8:75:0f:e5:4f:23:03:e2:14:59:c3:
57:32:22:a1:30:c7:b9:30:07:3d:a5:6b:1b:39:78:
b7:89:e5:3e:fd:40:fe:8f:c5:88:01:c4:e9:0c:ed:
9c:d8:4a:f3:ed:75:ba:49:57:64:7d:3a:6f:97:a5:
4b:58:eb:13:17:73:83:ec:2c:80:9b:17:1e:c1:83:
c2:16:5f:67:ae:7b:aa:48:63:e0:7b:d2:78:9a:db:
a5:5f:af:16:ba:95:2c:89:12:91:7a:51:5e:17:fe:
d7:63:96:4a:09:64:cf:55:87:67:02:55:ec:94:64:
95:15:22:98:f6:0f:e5:8c:ba:51:5b:9a:78:11:69:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:82:AC:C0:6A:95:F3:15:B0:8F:68:DA:38:99:51:02:04:A7:43
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cViCrMBqlfMVsI9o2jiZUQIEp0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
54:dc:78:94:2f:47:aa:61:f5:a4:80:5b:c6:00:a1:00:0b:d5:
31:56:08:9a:1d:29:4d:cb:aa:c4:cd:1e:b1:8b:d7:28:fc:07:
af:73:fe:01:37:e5:55:1f:72:b4:5e:01:ed:7b:53:f1:6a:72:
28:ce:53:0c:dc:93:c8:2c:b0:e8:f3:2f:57:3a:46:dc:3d:58:
35:c8:c1:b1:e9:ec:ac:d1:b9:29:d6:48:7a:62:93:ec:48:4c:
4e:bf:f2:6b:12:8a:73:d1:bc:ab:28:f5:0d:4b:45:b0:46:77:
bb:44:aa:35:67:b1:c8:21:f9:3e:e7:20:ff:3a:a9:a1:7f:9f:
4a:55:1b:3c:79:18:01:c0:f6:05:b2:94:72:53:c2:03:65:b3:
c0:09:fe:a6:61:43:5a:21:02:c7:65:2c:6d:47:ac:7e:ef:5b:
3f:ab:ed:7d:c7:3a:9e:1a:c9:07:59:f9:5e:8c:72:12:2f:20:
6c:6e:08:61:29:c4:d6:7a:f9:93:a2:05:aa:09:06:5b:8b:e6:
a1:5b:ab:1c:c9:6e:5e:d9:d2:0d:28:52:9c:b5:28:19:ea:92:
e8:83:d5:92:ce:03:3d:fe:76:1d:d3:60:85:40:ef:61:b3:62:
b0:0e:49:b2:be:9a:4a:8f:9c:00:de:34:eb:31:43:37:44:0d:
ff:f7:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:12:42 2025 by rpki-client