Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fO-f1booa2_es0-JpTiZls-knw0.roa
File: fO-f1booa2_es0-JpTiZls-knw0.roa (raw, json)
Hash identifier: w9/RwQXJD7uErbaj+yCboCi5Y929bp4uZF3DMr8oQMg=
Subject key identifier: 7C:EF:9F:D5:BA:28:6B:6F:DE:B3:4F:89:A5:38:99:96:CF:A4:9F:0D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194E69F33E017875155B86824126A3482FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fO-f1booa2_es0-JpTiZls-knw0.roa
Signing time: Sat 08 Feb 2025 17:33:00 +0000
ROA not before: Sat 08 Feb 2025 17:33:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 31.58.238.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 08:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e6:9f:33:e0:17:87:51:55:b8:68:24:12:6a:34:82:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 8 17:33:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cef9fd5ba286b6fdeb34f89a5389996cfa49f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:0f:7d:29:10:31:d1:b2:ea:12:49:6b:13:
00:23:9f:7c:60:3f:e7:ef:d1:c3:84:fb:7c:88:0e:
64:26:e9:09:f7:a8:b6:28:28:fe:49:f3:ee:c3:89:
d1:62:8a:40:8f:af:5a:6b:b0:c4:9f:16:d5:87:09:
83:f9:20:fb:a6:ec:9b:1d:00:7f:10:64:80:bd:9e:
77:15:d9:12:55:39:95:e6:90:df:82:97:6c:ff:ac:
d4:74:c5:3e:74:d2:3c:a7:a7:89:77:51:8f:77:9f:
14:fd:88:32:d0:34:7b:57:3e:15:6f:93:c7:91:b3:
51:52:65:44:cd:d4:9b:71:5b:dc:75:88:4c:2c:13:
04:7e:24:a4:69:08:c5:c5:1a:b8:ba:4c:87:39:50:
4c:3a:87:d0:7f:21:a1:7a:f8:ad:0e:f7:3d:3e:55:
5b:67:b8:a7:c2:1d:7a:20:81:1d:22:c7:20:e5:71:
bb:a7:0d:e6:2a:1d:ce:ce:3a:a5:39:ba:84:de:99:
b8:59:b7:f0:5c:02:fe:bc:4e:89:fa:93:b4:85:38:
5b:4e:2b:bc:09:a6:eb:89:9d:55:ec:66:03:64:85:
e6:9a:4c:4d:f7:6e:d5:de:b1:0a:25:03:8a:da:98:
c3:84:34:1d:fe:51:57:c6:70:3c:53:98:61:6e:36:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EF:9F:D5:BA:28:6B:6F:DE:B3:4F:89:A5:38:99:96:CF:A4:9F:0D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fO-f1booa2_es0-JpTiZls-knw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.238.0/24
31.59.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:3e:df:fa:be:0f:bb:3b:ab:73:82:09:81:05:5f:ca:43:8c:
7d:52:2c:e7:c8:f2:7e:b3:b0:e7:c4:cb:95:63:34:ae:b5:cb:
39:b9:d2:da:e1:a9:84:7f:ad:bb:2a:55:2d:c2:f7:0b:ec:4d:
7a:29:0f:1a:21:85:8a:87:7f:6b:09:94:f1:14:43:af:d1:d6:
f2:75:dd:18:f1:21:1c:23:e6:98:a3:0d:d4:58:b0:31:91:99:
08:d5:02:5f:7b:d2:2a:e8:c1:22:07:32:f2:cb:ec:c6:27:34:
0b:65:0c:40:53:fc:68:7f:1a:62:3c:66:05:d3:ad:21:c9:ba:
d2:a0:34:ef:60:4c:af:a7:c8:bb:8a:ef:53:bd:c3:cb:a5:f6:
95:60:19:88:20:07:b5:9c:02:cc:1e:fb:02:ac:3d:ec:69:51:
10:4d:64:33:b0:4b:a3:45:96:11:45:6a:05:34:ae:13:9d:cc:
e9:24:60:ce:5e:23:7e:8c:d8:4c:e9:59:e4:99:c9:12:b4:95:
83:3a:c4:53:b8:29:90:a6:21:9a:1c:88:b7:01:07:9f:56:05:
2e:f6:02:13:26:e8:ee:4b:d9:35:4e:e8:cc:8d:15:04:91:43:
12:8d:25:eb:60:29:10:11:b0:7f:10:ff:aa:6b:f0:df:43:03:
f0:32:c9:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTmnzPgF4dRVbhoJBJqNIL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjA4MTczMzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2VmOWZkNWJhMjg2YjZmZGViMzRmODlhNTM4OTk5NmNmYTQ5ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE0PfSkQMdGy6hJJaxMAI598YD/n
79HDhPt8iA5kJukJ96i2KCj+SfPuw4nRYopAj69aa7DEnxbVhwmD+SD7puybHQB/
EGSAvZ53FdkSVTmV5pDfgpds/6zUdMU+dNI8p6eJd1GPd58U/Ygy0DR7Vz4Vb5PH
kbNRUmVEzdSbcVvcdYhMLBMEfiSkaQjFxRq4ukyHOVBMOofQfyGhevitDvc9PlVb
Z7inwh16IIEdIscg5XG7pw3mKh3OzjqlObqE3pm4WbfwXAL+vE6J+pO0hThbTiu8
CabriZ1V7GYDZIXmmkxN927V3rEKJQOK2pjDhDQd/lFXxnA8U5hhbjaFdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHzvn9W6KGtv3rNPiaU4mZbPpJ8NMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZk8tZjFib29hMl9lczAtSnBUaVpscy1rbncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzruAwQA
HzspMA0GCSqGSIb3DQEBCwUAA4IBAQBNPt/6vg+7O6tzggmBBV/KQ4x9UiznyPJ+
s7DnxMuVYzSutcs5udLa4amEf627KlUtwvcL7E16KQ8aIYWKh39rCZTxFEOv0dby
dd0Y8SEcI+aYow3UWLAxkZkI1QJfe9Iq6MEiBzLyy+zGJzQLZQxAU/xofxpiPGYF
060hybrSoDTvYEyvp8i7iu9TvcPLpfaVYBmIIAe1nALMHvsCrD3saVEQTWQzsEuj
RZYRRWoFNK4TnczpJGDOXiN+jNhM6VnkmckStJWDOsRTuCmQpiGaHIi3AQefVgUu
9gITJujuS9k1TujMjRUEkUMSjSXrYCkQEbB/EP+qa/DfQwPwMskv
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:04 2025 by rpki-client